Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
File: 3K5LBHGmGHLEBBQuH5D1B08NbxU.mft (raw, json)
Hash identifier: gO+C09oRoYJI365ewhkEfJpZf2ng5iGF0NaPdi0Sris=
Subject key identifier: 92:5E:9C:16:27:C4:A3:88:13:7E:09:69:B6:D5:9F:E2:A5:3D:90:93
Authority key identifier: DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
Certificate issuer: /CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Certificate serial: 01A0C1E84B9D94704B8B6124142CFAD0CAAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 03:00:21 +0000
Manifest this update: Mon 21 Sep 2026 03:00:21 +0000
Manifest next update: Tue 22 Sep 2026 03:00:21 +0000
Files and hashes: 1: 3K5LBHGmGHLEBBQuH5D1B08NbxU.crl (hash: TsdMBZAp6+Ww18HHxxmaJvZ9TU339MTMTu+2JpRRVQ0=)
2: 9ZJf1K0dS9GGEr-7vJUqYcT4VlM.roa (hash: 4biyXnO/yjSxTlfFAVtaFC6Bi7sH2DQW0oH896Enc7I=)
3: qsdjnJflN-hqMusJ8mRO3QvIelE.roa (hash: SE6UiCw/dJG6vG+istEe6e9u75qYp7RLjIy5NUM722g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:e8:4b:9d:94:70:4b:8b:61:24:14:2c:fa:d0:ca:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Validity
Not Before: Sep 21 03:00:21 2026 GMT
Not After : Sep 22 03:00:21 2026 GMT
Subject: CN=925e9c1627c4a388137e0969b6d59fe2a53d9093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:96:c4:89:ca:3a:c8:e0:d3:c5:34:08:6c:1b:
a2:54:2f:5c:9a:b4:84:31:f1:d2:f9:5b:38:1f:64:
bc:2d:11:a9:38:08:34:63:b0:5c:fe:be:12:88:6e:
31:98:f0:a1:87:eb:4f:74:4b:05:0d:21:c7:d1:37:
94:34:73:53:8b:ce:fb:43:2d:9b:4b:15:0c:6d:ba:
8d:62:27:84:e7:b4:eb:80:55:89:bc:87:94:9d:05:
66:8d:70:26:67:2e:97:94:a1:d2:3f:ed:f1:e2:68:
92:ae:c9:8c:26:bd:16:d0:33:82:6e:75:75:9a:fc:
b4:f5:62:46:9a:e8:53:56:62:cf:63:fa:0e:ed:3d:
7f:8b:3b:23:65:52:6b:16:65:d2:2b:fc:87:47:ca:
08:3d:85:21:18:44:20:30:75:fe:66:96:2f:02:98:
f8:2d:d1:6e:57:9b:ac:d7:1c:79:7d:a6:37:77:3e:
a4:e8:cb:df:88:e8:e3:4e:fd:1f:5d:c3:c4:1b:bd:
63:0c:ad:00:6b:c7:ba:cc:2e:ce:80:a8:89:e8:f1:
ac:2e:3e:b0:d9:4f:49:a7:f5:1b:93:3c:68:bd:8b:
78:7e:4e:ee:a6:8d:b1:43:f9:22:a0:fa:2d:a1:1a:
1b:33:71:7b:aa:db:31:91:c6:ec:e9:7b:0b:f1:1c:
cb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5E:9C:16:27:C4:A3:88:13:7E:09:69:B6:D5:9F:E2:A5:3D:90:93
X509v3 Authority Key Identifier:
keyid:DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:fb:b0:51:d2:26:65:aa:5a:cd:cc:34:33:38:88:71:cd:12:
24:b3:88:1a:d1:b7:d2:0b:25:f6:d9:d3:1c:23:e6:2e:20:91:
4a:5c:52:38:17:89:d4:01:ae:fe:f0:4f:1e:0f:97:d3:62:ba:
af:b9:74:70:36:94:11:4d:1a:b3:38:ef:2a:18:9e:c0:cc:41:
be:4c:de:6d:a1:b0:39:22:bc:03:49:a2:9b:d6:6b:68:e0:78:
37:fc:a7:ee:8f:d5:df:9e:2f:66:c7:a4:94:49:06:5b:40:0b:
ac:db:9c:36:0e:d5:e3:8c:74:20:31:1d:1a:51:e4:2e:49:70:
b1:6a:dd:73:94:38:7c:b9:e2:1a:18:bb:4d:c9:66:cd:df:13:
ea:22:38:68:1c:53:12:d9:b1:c1:07:09:a8:4f:92:ab:b1:f0:
e1:7e:44:70:7a:3b:0d:54:f5:28:6e:3c:23:0e:77:0d:b1:47:
8a:59:28:b6:51:cd:10:ff:78:fe:fb:94:a0:e0:74:18:bd:0f:
5e:c6:4a:af:7d:e4:9d:5a:31:99:0c:e8:c3:5f:4a:88:b0:ac:
51:62:4a:8d:93:1b:45:02:85:6a:ee:6c:f6:03:46:61:d1:65:
7a:88:8f:3a:82:b0:9e:ab:59:60:f5:07:d9:79:ca:ab:d1:df:
bc:4d:b1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:48:10 2026 by rpki-client