Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/619a7e-393b-4a35-99c0-48e69cc98612/1/3aCeRyucJahf8jydskIKSWCH-lY.mft
File: 3aCeRyucJahf8jydskIKSWCH-lY.mft (raw, json)
Hash identifier: 3ndSfamPSm5KaN2LPmiZlHVdtK5onXmmd3lnoj7Jg0I=
Subject key identifier: 0D:09:A5:09:1A:8B:1A:20:5C:19:9D:D9:B6:86:AA:DA:B9:BB:97:C2
Authority key identifier: DD:A0:9E:47:2B:9C:25:A8:5F:F2:3C:9D:B2:42:0A:49:60:87:FA:56
Certificate issuer: /CN=dda09e472b9c25a85ff23c9db2420a496087fa56
Certificate serial: 01A0C8585831577EF03C3B397EFF2A5D2A38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3aCeRyucJahf8jydskIKSWCH-lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/619a7e-393b-4a35-99c0-48e69cc98612/1/3aCeRyucJahf8jydskIKSWCH-lY.mft
Manifest number: 21
Signing time: Tue 22 Sep 2026 09:00:27 +0000
Manifest this update: Tue 22 Sep 2026 09:00:27 +0000
Manifest next update: Wed 23 Sep 2026 09:00:27 +0000
Files and hashes: 1: 3aCeRyucJahf8jydskIKSWCH-lY.crl (hash: G0s0pKUa+6h10dfgsdY6kB37zESYAunROkW3zdA5C0M=)
2: SlFzfVkfD2gHM5KxjEPVK_gmhI4.asa (hash: IPdymVbjC7V3blPNsDR0NjT2Y5U4c9mHSZI+2IEdVFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/619a7e-393b-4a35-99c0-48e69cc98612/1/3aCeRyucJahf8jydskIKSWCH-lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/619a7e-393b-4a35-99c0-48e69cc98612/1/3aCeRyucJahf8jydskIKSWCH-lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3aCeRyucJahf8jydskIKSWCH-lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:58:31:57:7e:f0:3c:3b:39:7e:ff:2a:5d:2a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dda09e472b9c25a85ff23c9db2420a496087fa56
Validity
Not Before: Sep 22 09:00:27 2026 GMT
Not After : Sep 23 09:00:27 2026 GMT
Subject: CN=0d09a5091a8b1a205c199dd9b686aadab9bb97c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cd:c4:bb:bb:5e:7c:b1:0e:03:d4:21:d8:71:
a3:cb:bf:17:99:3c:1a:45:3d:bc:f2:e6:53:38:6e:
44:83:f3:fc:ad:fc:1d:4f:d3:5c:0f:2d:47:52:b1:
1e:f3:60:7e:93:9b:8a:a0:92:94:fe:63:90:15:ad:
51:60:59:80:13:db:b6:2a:2e:03:aa:61:17:21:51:
fb:94:5c:c3:31:5f:5b:f7:f8:15:c6:e1:a5:1f:56:
c4:8e:21:7a:e5:90:ac:98:11:bf:cc:ca:c5:39:72:
5f:b0:48:72:6a:b7:86:77:8b:6d:37:37:14:ce:7e:
19:4b:12:dc:fa:b4:ab:53:ef:40:c5:22:bd:c8:94:
eb:a2:b3:97:52:3c:9d:4d:31:fb:97:04:81:d7:06:
7c:38:01:96:a2:36:08:1b:7d:82:5c:30:ad:e6:81:
08:74:c7:01:2a:00:fe:31:63:c0:69:55:55:dc:bd:
91:bd:d3:95:09:86:0d:c5:2a:74:43:74:85:fb:85:
a6:78:9e:9c:03:3c:2a:05:26:2a:54:db:6b:6d:e4:
ce:cc:97:24:30:32:f3:10:7b:11:94:a7:9d:88:ae:
b1:cd:71:aa:a7:45:dc:b5:fc:7c:ec:12:7e:bc:47:
4e:4a:5e:3f:95:a5:f4:76:c3:a2:22:2f:7a:e7:4e:
fa:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:09:A5:09:1A:8B:1A:20:5C:19:9D:D9:B6:86:AA:DA:B9:BB:97:C2
X509v3 Authority Key Identifier:
keyid:DD:A0:9E:47:2B:9C:25:A8:5F:F2:3C:9D:B2:42:0A:49:60:87:FA:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3aCeRyucJahf8jydskIKSWCH-lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/619a7e-393b-4a35-99c0-48e69cc98612/1/3aCeRyucJahf8jydskIKSWCH-lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/619a7e-393b-4a35-99c0-48e69cc98612/1/3aCeRyucJahf8jydskIKSWCH-lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:be:e6:94:0b:35:cb:89:d5:87:93:32:44:62:5f:44:db:f2:
b7:24:e2:8b:db:5b:fe:80:24:77:e9:90:20:71:be:5d:27:95:
76:a4:61:21:68:ba:da:02:96:c1:cc:85:22:d1:96:8d:6b:c0:
c9:af:e4:30:b8:cb:c8:5a:ad:5e:a4:7e:41:9a:ba:05:04:c2:
5c:2d:0a:4b:68:26:f0:3a:9d:74:04:98:6c:fd:dc:be:ab:1d:
80:a1:46:be:91:4d:e2:02:f8:84:29:16:11:57:c2:82:57:d9:
2c:91:f6:93:d3:92:55:87:18:76:cd:36:49:e4:08:8f:48:aa:
31:59:0b:63:b2:98:11:ad:8a:16:5d:ab:fa:06:30:17:75:cc:
98:37:e4:14:a7:4e:b2:88:26:51:63:66:d0:b9:d2:b2:a8:e6:
7c:f9:5c:5d:df:3b:ec:17:dd:72:53:e0:33:52:a2:b0:50:89:
af:b3:9b:78:21:a3:d2:db:ad:67:c6:63:71:8e:31:37:30:1c:
6e:ee:60:75:2a:cd:7c:4e:df:19:82:9c:ac:d1:dd:10:e7:fa:
3c:51:f3:35:f2:81:09:ef:c4:f1:22:a8:b8:64:99:94:9f:16:
1e:7c:e2:c5:91:74:ba:51:c3:3e:29:07:e5:b4:31:9a:04:93:
0d:ca:c7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:02:58 2026 by rpki-client