Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft
File: 3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft (raw, json)
Hash identifier: QuKYA2V44C8SNNvEa9daS4WSP8QqF7CUgzSPQKlaVfs=
Subject key identifier: 0E:2E:A6:40:62:FC:52:78:16:29:33:23:9B:84:B0:1B:E3:88:79:0F
Authority key identifier: DD:38:73:30:3D:2D:6E:23:8A:5B:D8:5E:D5:86:7B:64:31:58:FC:14
Certificate issuer: /CN=dd3873303d2d6e238a5bd85ed5867b643158fc14
Certificate serial: 01A0C1E870DDD1F9EBDE80AB9ADBD56A2B53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft
Manifest number: 0420
Signing time: Mon 21 Sep 2026 03:00:30 +0000
Manifest this update: Mon 21 Sep 2026 03:00:30 +0000
Manifest next update: Tue 22 Sep 2026 03:00:30 +0000
Files and hashes: 1: 3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.crl (hash: v1DLD/XTTI+OMRFg1yVCaqcL3zLDl3+98TJHr+UxrNk=)
2: 45LoXLoxcInpku_THY00cz-VRl0.asa (hash: iUXxUQdMIOxiR9iMkASzSiuuJ2DU2UhVyU2ts5cW1eU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:e8:70:dd:d1:f9:eb:de:80:ab:9a:db:d5:6a:2b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd3873303d2d6e238a5bd85ed5867b643158fc14
Validity
Not Before: Sep 21 03:00:30 2026 GMT
Not After : Sep 22 03:00:30 2026 GMT
Subject: CN=0e2ea64062fc5278162933239b84b01be388790f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:79:21:e3:26:fc:1b:d4:73:aa:5a:c2:c0:fe:
b3:e4:cc:87:54:0f:fd:86:dd:e7:de:a1:96:35:a7:
09:4b:8a:f7:e7:b9:d7:00:94:86:45:f7:24:6b:01:
fb:28:85:7c:3f:c4:71:67:ef:54:53:c0:5c:88:21:
29:2c:b1:da:8c:19:80:85:78:0f:3b:63:13:b9:78:
b6:57:91:63:3f:6e:f5:09:56:88:95:84:0b:16:3a:
c2:0a:af:11:2c:a6:89:ea:fa:6d:7f:f7:68:05:c1:
43:7c:4c:b3:c4:24:c4:1c:9b:d4:54:fd:ef:30:d7:
ff:cd:54:85:86:ca:ec:6d:58:e2:62:d9:9a:9a:56:
a7:18:59:08:e9:22:a6:21:c3:1c:50:91:5f:46:ad:
6a:0b:fa:07:00:ad:4d:f6:c7:92:e6:3b:57:95:3c:
c6:44:43:43:3f:d1:f4:0c:33:f4:21:fa:58:97:8c:
73:3a:01:ef:36:c7:c8:ef:68:94:d0:11:b4:57:8c:
6c:f4:b3:6c:cd:88:11:1c:95:e0:35:a5:84:ee:98:
da:ca:a6:38:6f:da:8b:08:d3:9c:5b:a3:9c:d6:0a:
25:d8:9c:15:a9:49:ef:a3:58:88:fb:e1:a3:d1:97:
1f:e0:16:c0:c1:7e:62:8b:13:da:7f:cf:16:7b:c8:
5c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:2E:A6:40:62:FC:52:78:16:29:33:23:9B:84:B0:1B:E3:88:79:0F
X509v3 Authority Key Identifier:
keyid:DD:38:73:30:3D:2D:6E:23:8A:5B:D8:5E:D5:86:7B:64:31:58:FC:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:dd:36:70:3e:cc:03:f3:26:3f:e6:80:23:07:72:60:1a:f7:
95:ad:a2:bf:61:33:7f:d9:98:85:78:e5:8f:41:59:54:6e:f7:
a1:16:be:dd:2c:81:b1:3c:7a:e5:d7:9a:ee:56:1e:bc:f4:07:
5e:7a:1a:43:7f:d0:2e:0f:5e:34:fa:2a:13:b7:a7:3b:9c:2f:
03:ce:52:94:b8:c9:a6:1e:c3:5b:48:f9:bd:74:1c:94:8e:2d:
a6:b1:a9:92:c9:e9:95:72:c1:f4:22:65:07:9e:f8:49:db:c0:
bc:68:b1:2e:8e:f4:5b:d0:cb:04:8a:65:39:1d:db:e7:77:8a:
63:11:ff:5c:ae:32:5d:3d:24:41:77:53:8f:64:7c:94:a3:d5:
64:ce:b5:7b:17:bc:89:65:af:82:83:cf:21:40:c2:c0:9b:c7:
c8:b3:df:14:ad:3e:9b:e8:0a:37:ad:29:58:51:84:57:3b:01:
3d:5b:40:f6:65:f4:d1:fd:ce:3d:05:ae:11:c5:24:93:77:da:
7f:c0:b9:dd:eb:66:b7:c1:6f:9f:5e:8c:1a:ca:5e:33:1b:68:
f7:99:f9:14:6d:d4:30:67:b9:5e:95:fb:8d:d7:ac:cb:10:e2:
70:d8:80:da:f7:bf:d9:a1:5d:1d:14:be:96:5f:35:bc:b3:05:
1a:7c:ea:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:27:45 2026 by rpki-client