Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
File: 3UZwwqb9ciMyf2i62-bQgyK3gFg.mft (raw, json)
Hash identifier: e9BcBOQ3QUzF4L8MQPc0wssiS71Cgu2YFudT/dXTnAk=
Subject key identifier: 23:73:33:5B:7E:35:1A:26:98:E9:5D:9B:C2:F7:2B:7A:FA:57:97:C0
Authority key identifier: DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
Certificate issuer: /CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Certificate serial: 01A0D94D582B9E6F3A2A6082FCCEB8782D4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
Manifest number: 1951
Signing time: Fri 25 Sep 2026 16:01:59 +0000
Manifest this update: Fri 25 Sep 2026 16:01:59 +0000
Manifest next update: Sat 26 Sep 2026 16:01:59 +0000
Files and hashes: 1: 2dLJGNtyrJQjFI2AhS7wj2LhKrc.roa (hash: UnzgZZ3TVB6578Tog21CNFea50mTLp1x803U9EWHzmU=)
2: 3UZwwqb9ciMyf2i62-bQgyK3gFg.crl (hash: 2QZ6obFB2Kl2R1PuzfTV74qjfNM6PUZVALBJz1sFEh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4d:58:2b:9e:6f:3a:2a:60:82:fc:ce:b8:78:2d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Validity
Not Before: Sep 25 16:01:59 2026 GMT
Not After : Sep 26 16:01:59 2026 GMT
Subject: CN=2373335b7e351a2698e95d9bc2f72b7afa5797c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c4:74:72:60:fd:e6:85:29:52:ec:60:13:27:
92:cf:5e:0f:3c:9f:5c:c5:b1:09:e3:f7:80:ef:f2:
4a:57:6f:af:15:67:d2:12:9a:d2:30:e2:eb:44:34:
81:f8:6f:71:c1:c9:c2:6b:be:6a:64:2c:03:69:13:
16:62:f1:cd:a6:0f:8e:fe:58:b3:84:10:84:4b:71:
41:ef:3d:81:b3:76:8c:44:cf:af:f3:e8:dc:64:e7:
ba:f6:e0:33:08:11:4a:b0:1f:aa:98:65:0c:a2:60:
e7:aa:1a:60:0d:37:7c:cc:3e:e7:7d:36:0b:fd:e0:
09:6a:c4:59:73:91:05:3d:5b:51:2e:98:ec:87:a0:
16:28:3b:84:f6:42:74:b7:8f:e5:2b:9f:3f:46:8f:
3c:35:7e:66:75:5c:d4:4a:36:92:17:5a:89:f0:5a:
53:8d:23:dd:ea:f8:28:7f:f5:da:b7:54:7d:e1:85:
05:5f:f2:3a:0f:f8:a9:db:96:c3:53:4b:2a:d6:9e:
3a:4d:85:39:5d:48:97:b7:ee:03:4a:86:67:2e:ef:
ab:23:44:f7:d0:31:4a:cb:b6:45:ab:07:c7:db:4e:
47:e0:ce:71:a2:09:e9:9e:c4:75:1a:15:b2:52:2c:
e1:11:4b:97:73:11:74:70:3b:c6:4c:7d:0a:2e:35:
21:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:73:33:5B:7E:35:1A:26:98:E9:5D:9B:C2:F7:2B:7A:FA:57:97:C0
X509v3 Authority Key Identifier:
keyid:DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:9c:4f:7d:6d:81:83:26:dc:eb:fd:94:48:1a:e1:af:78:b2:
42:47:8e:b5:73:d3:06:66:00:fc:65:54:80:b5:c4:a4:b6:7c:
cb:42:5d:72:2f:85:12:83:ea:b1:4a:de:71:00:6a:f1:47:0d:
da:03:3b:9b:7b:e5:53:dd:90:ea:ed:7e:d3:9b:04:af:9f:26:
5b:17:3e:39:8d:ee:5c:ce:ac:2e:e7:a6:62:e5:4e:6c:26:55:
cf:10:be:79:0a:a5:2a:b4:e3:90:cf:e9:ae:9a:f3:d4:d2:59:
cc:1b:c3:57:c9:d9:a3:7e:e3:13:07:de:ba:a4:7b:60:45:bb:
cc:93:1a:da:74:20:d3:b2:c9:a1:13:29:07:24:98:64:c8:0b:
d9:53:ff:91:60:77:27:f9:e1:0a:18:03:e4:9f:5c:5b:42:dc:
75:21:02:59:84:64:c0:eb:b6:5f:5e:2d:c6:3f:48:77:a9:35:
ff:b9:c7:3f:5f:c6:51:5a:2f:ef:eb:f0:cf:1e:c5:d3:da:87:
82:6b:16:bd:cc:53:06:8c:78:a8:2d:e4:7c:e2:0a:3a:f6:a8:
b8:24:b5:2c:0e:d7:95:c0:a1:ca:4c:eb:87:28:4d:ad:c2:a9:
24:d3:4c:3a:0e:83:87:44:1c:c5:60:15:72:87:3e:31:ef:06:
68:c9:aa:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:49:35 2026 by rpki-client