Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/P3XgDVc45b4rCWaNJ5EUDu8zIKU.mft
File: P3XgDVc45b4rCWaNJ5EUDu8zIKU.mft (raw, json)
Hash identifier: yWqtiFyS4xDEDTMRWb3g7Gdo35WhBsOboojC/ckZEBA=
Subject key identifier: 40:43:99:CE:15:DD:80:D1:2D:03:4C:69:37:85:AE:8B:D4:8C:5B:FE
Authority key identifier: 3F:75:E0:0D:57:38:E5:BE:2B:09:66:8D:27:91:14:0E:EF:33:20:A5
Certificate issuer: /CN=3f75e00d5738e5be2b09668d2791140eef3320a5
Certificate serial: 01A0BF559818CBE077538D5CC71BC8D86CA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3XgDVc45b4rCWaNJ5EUDu8zIKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/P3XgDVc45b4rCWaNJ5EUDu8zIKU.mft
Manifest number: DD
Signing time: Sun 20 Sep 2026 15:00:52 +0000
Manifest this update: Sun 20 Sep 2026 15:00:52 +0000
Manifest next update: Mon 21 Sep 2026 15:00:52 +0000
Files and hashes: 1: 1-cvACUJ1zNKUVJGY0SzzZqXXwZE.asa (hash: sXxGDMYIJp0WkG+/U4Q6H5yHLfkk86gEgtDhCUyi8kI=)
2: 9IDvg1m6FIQbcRd8cJ6Kz2ePInE.roa (hash: u6Pgg+TL8fBUrMeamu9qvumoJ5B+GURrCIvuw0aOKdI=)
3: Luquwxy5MmMCtghrD0bo5fP54_k.roa (hash: Bl2RpJjzTlgY54x2PqQ2Lom0vkyRv1xgE+degACJfHc=)
4: P3XgDVc45b4rCWaNJ5EUDu8zIKU.crl (hash: ito6+ERzwzDxf17rKP+fx/WXPgMiDx9JIu53EoGokUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/P3XgDVc45b4rCWaNJ5EUDu8zIKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/P3XgDVc45b4rCWaNJ5EUDu8zIKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/P3XgDVc45b4rCWaNJ5EUDu8zIKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:55:98:18:cb:e0:77:53:8d:5c:c7:1b:c8:d8:6c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f75e00d5738e5be2b09668d2791140eef3320a5
Validity
Not Before: Sep 20 15:00:52 2026 GMT
Not After : Sep 21 15:00:52 2026 GMT
Subject: CN=404399ce15dd80d12d034c693785ae8bd48c5bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:53:81:de:e6:20:71:68:00:cb:ef:78:2d:fd:
54:22:87:df:d4:dc:c4:d0:3a:05:a6:7c:bf:0c:71:
d4:17:20:e3:16:9e:07:11:9e:77:19:9a:92:6b:11:
6a:9a:ea:70:2e:c1:71:c4:f5:70:31:47:89:33:14:
6b:ab:ed:7b:a3:ce:b8:6c:05:76:b4:56:30:d9:0c:
48:3d:a2:b1:7c:0a:d1:7a:ee:5a:f2:67:ed:95:42:
b4:f2:58:9f:86:af:93:7d:aa:91:93:9a:02:04:2e:
8f:7c:a2:4b:83:32:04:bf:df:6a:c5:9c:b7:32:7d:
d5:89:47:44:59:24:4e:55:8e:a7:e7:cb:d7:bd:ec:
ee:dd:3c:36:21:ac:05:dd:ef:65:48:6f:0c:3d:ea:
d9:c9:5d:3e:c8:89:ef:73:58:06:53:4a:50:4b:53:
2c:74:17:8f:1e:ce:e2:ee:3b:22:28:68:e7:41:e4:
fe:fc:df:7e:3e:58:ef:fb:e6:81:5e:3a:ff:31:70:
33:3c:3f:5d:f3:00:6e:17:3f:1d:24:3d:27:11:de:
9c:87:a4:7a:b4:0f:7b:de:7b:10:dd:eb:90:87:ce:
08:21:69:22:c7:61:e9:f1:0c:ca:36:9a:27:1e:ca:
c4:f1:2e:b9:c2:54:7c:42:4b:e8:01:24:5c:53:9f:
42:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:43:99:CE:15:DD:80:D1:2D:03:4C:69:37:85:AE:8B:D4:8C:5B:FE
X509v3 Authority Key Identifier:
keyid:3F:75:E0:0D:57:38:E5:BE:2B:09:66:8D:27:91:14:0E:EF:33:20:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3XgDVc45b4rCWaNJ5EUDu8zIKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/P3XgDVc45b4rCWaNJ5EUDu8zIKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/P3XgDVc45b4rCWaNJ5EUDu8zIKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:43:25:d6:c9:7c:cb:5c:9f:65:f3:f8:ad:54:70:13:9b:9c:
eb:7f:7b:29:73:ba:c8:50:45:ef:fb:e8:fa:6d:1d:5c:3d:5c:
4f:0c:6d:bd:0e:4e:34:c5:05:61:71:25:28:76:e7:96:f1:37:
8d:ae:39:04:4a:12:40:c9:90:19:3c:5c:01:0f:73:96:78:e3:
1a:90:06:5d:d1:77:78:3c:6c:ba:1d:64:99:c2:cb:fc:40:ea:
b0:e2:85:22:5e:63:70:c9:7c:6a:ef:b5:8b:fc:2f:e3:c6:67:
7e:dc:88:28:c8:34:91:c7:10:50:97:18:22:f9:26:e8:41:54:
e5:b9:75:5a:b7:53:cc:fc:61:b8:11:0d:97:63:3c:37:96:48:
ee:b4:5e:11:1a:a4:e9:bb:6a:ac:0d:19:a8:ae:35:e1:4a:ae:
ac:63:5a:57:0b:89:9c:95:f9:79:e2:7d:d9:61:e6:08:bd:db:
1a:79:42:5b:64:40:10:9e:85:22:e3:8f:c5:ea:30:15:3f:14:
82:b9:8e:fd:0a:55:12:21:be:11:65:7e:fe:c1:e7:ec:6c:ac:
0a:3a:31:9c:14:df:c8:ba:d1:af:56:b4:60:96:91:90:a8:5c:
9c:af:61:42:85:f0:64:25:de:3d:07:69:7d:90:d6:c8:3c:6d:
70:c7:3e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:35:52 2026 by rpki-client