Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
File: 3y3kqfK8Uj318Kf15DJJikLFX3A.mft (raw, json)
Hash identifier: YwrapTPWM2jUnfYjCmobh3gESZ+M6ooO+9c5kmJ5fSc=
Subject key identifier: 1C:B0:54:10:E1:36:3D:EA:90:12:4A:2D:95:31:87:51:39:E0:25:0B
Authority key identifier: DF:2D:E4:A9:F2:BC:52:3D:F5:F0:A7:F5:E4:32:49:8A:42:C5:5F:70
Certificate issuer: /CN=df2de4a9f2bc523df5f0a7f5e432498a42c55f70
Certificate serial: 01A0D0B67EFB67DF81DDE1EB4D50C60A1A57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3y3kqfK8Uj318Kf15DJJikLFX3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
Manifest number: 01C2
Signing time: Thu 24 Sep 2026 00:00:15 +0000
Manifest this update: Thu 24 Sep 2026 00:00:15 +0000
Manifest next update: Fri 25 Sep 2026 00:00:15 +0000
Files and hashes: 1: 3y3kqfK8Uj318Kf15DJJikLFX3A.crl (hash: t+FjrBPAtusd6Oihlex7bXB/i+HBfBR4FPHl6MGFGbk=)
2: 8XebNTiumaUWcLbgsrPRqEK7yJk.roa (hash: wIkMYGUwRkloiGV8zcV817/8WXtvc8qz+eDzExEQl48=)
3: SU9_tB5lwfHPL_4Kt4ROwFHlUMI.asa (hash: wN65KwAJllI0kxcg5tgjkk0Y4QH9uf/hvRTzQ2pTovk=)
4: xtsoV3YrVhm4MKDjfu3IvjG7q1g.roa (hash: qMRfu2o1bzSJ1p0UvgBKjKi65ckvS8nI12aCVQ8a6vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3y3kqfK8Uj318Kf15DJJikLFX3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:7e:fb:67:df:81:dd:e1:eb:4d:50:c6:0a:1a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df2de4a9f2bc523df5f0a7f5e432498a42c55f70
Validity
Not Before: Sep 24 00:00:15 2026 GMT
Not After : Sep 25 00:00:15 2026 GMT
Subject: CN=1cb05410e1363dea90124a2d9531875139e0250b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bd:a9:83:35:6e:20:8b:60:20:02:2f:8f:c6:
b9:58:a3:ae:2c:6b:83:55:1a:f1:20:21:be:ef:18:
52:7b:09:b6:cb:c2:00:42:2a:f8:17:3b:f4:48:dd:
18:46:5e:fc:db:71:be:20:91:c9:92:37:28:bc:55:
7c:9c:15:53:0d:39:18:b6:ee:47:12:bb:05:64:6a:
d3:86:85:51:4f:34:76:5e:62:a3:28:c0:29:01:e1:
d7:e9:7d:25:c5:71:36:fc:79:9e:0d:07:d5:01:2b:
1a:eb:cd:bc:5e:1a:2c:e0:9a:3b:9c:5c:5e:3a:36:
c6:88:5c:b8:d4:e6:9b:d1:30:1b:d0:a5:a2:d9:89:
fb:06:d8:37:7b:62:36:b9:12:2f:36:ab:7f:85:5b:
0c:65:43:3d:98:1a:38:4f:93:ea:b2:01:94:92:17:
6c:57:52:18:84:95:0b:9b:8a:1a:58:0e:46:c8:5b:
6e:dc:c6:d6:74:33:83:e7:81:a1:7b:f4:f9:c9:5f:
67:9d:fb:89:07:b1:90:91:09:3e:99:57:78:77:fd:
b0:0b:e3:e0:c5:4b:7a:77:7e:b1:ba:20:87:4d:57:
00:6e:6a:fc:f3:8b:97:a3:87:da:e6:da:91:30:2f:
e3:27:6f:4a:8a:52:52:a9:ed:7a:6c:1e:7f:a5:65:
e6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B0:54:10:E1:36:3D:EA:90:12:4A:2D:95:31:87:51:39:E0:25:0B
X509v3 Authority Key Identifier:
keyid:DF:2D:E4:A9:F2:BC:52:3D:F5:F0:A7:F5:E4:32:49:8A:42:C5:5F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3y3kqfK8Uj318Kf15DJJikLFX3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:ae:8b:ae:a6:0d:e8:17:cc:e1:4f:5f:e5:30:a8:12:ba:26:
6f:f4:32:20:84:51:26:6c:da:b6:d9:97:be:74:23:e7:0c:36:
bf:a4:55:1f:18:d5:06:a1:65:03:2e:57:03:2e:33:f5:b1:6e:
46:9a:32:4f:db:33:31:8e:91:b4:68:c4:88:8e:5a:9a:93:75:
83:ae:81:45:58:bb:4b:f5:9c:e1:05:49:6c:d5:07:c6:7f:97:
1e:0e:a0:24:3b:b0:76:ea:9e:e4:be:1f:ab:4b:36:f6:ce:a1:
30:e5:0f:9d:7e:3a:5d:5c:00:e1:ae:00:97:85:ca:2e:10:10:
8d:07:86:c6:3f:0c:c6:77:ae:fd:a2:9c:a2:89:dc:ef:c4:84:
f2:63:88:4d:79:9c:bf:24:d0:f1:fc:65:c5:e6:f6:e2:ac:4f:
43:f8:6a:24:16:47:ff:d2:71:61:da:b3:c7:67:f4:24:21:56:
d0:32:77:77:0b:e0:0f:ce:1a:35:f8:b9:d6:5b:67:80:68:94:
74:0e:58:0f:26:b0:bc:4a:50:d1:6e:ff:dd:0f:7a:e5:a6:c2:
3b:dc:7a:af:e6:be:95:28:05:ea:37:02:62:c2:52:2f:5c:3d:
a9:cc:1d:5f:c3:53:e8:33:67:09:a3:76:04:59:0c:03:78:30:
b1:a5:59:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:06:51 2026 by rpki-client