Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
File: 3A4bkNUSzDQC92FBQGKXleTUrEw.mft (raw, json)
Hash identifier: j2gtcuO3zG+DYoS8Uy7WrtZY326zJoip+89Zpi22dfE=
Subject key identifier: DA:06:86:87:8E:EF:B2:67:70:45:92:F8:43:20:96:9A:31:7B:76:19
Authority key identifier: DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
Certificate issuer: /CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Certificate serial: 01A0E99BCD2C28848AB67A3D388ECF835137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
Manifest number: 158B
Signing time: Mon 28 Sep 2026 20:01:36 +0000
Manifest this update: Mon 28 Sep 2026 20:01:36 +0000
Manifest next update: Tue 29 Sep 2026 20:01:36 +0000
Files and hashes: 1: 3A4bkNUSzDQC92FBQGKXleTUrEw.crl (hash: Weg2YRjcnglEkwnzHHGDpyeA1yoDl/JLaZLDscbfwG4=)
2: oglaQX4nFsIGr-Rok7QLUW7-tlM.roa (hash: s+KJpOp9hYCyRUjA+Of2ZWgASyr4epw2ZvVJ2zuqMSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:9b:cd:2c:28:84:8a:b6:7a:3d:38:8e:cf:83:51:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Validity
Not Before: Sep 28 20:01:36 2026 GMT
Not After : Sep 29 20:01:36 2026 GMT
Subject: CN=da0686878eefb267704592f84320969a317b7619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7b:6a:4d:5d:55:d4:6d:05:fe:e3:e2:b7:e6:
b1:c6:ef:64:42:79:50:db:ef:7b:56:ab:df:62:5e:
02:ef:5b:0c:de:55:dc:87:1c:21:9c:53:4a:41:24:
0e:d2:0c:1f:e6:5a:c1:89:32:b5:89:0b:ca:64:9d:
10:3f:c4:99:ed:75:58:b3:ff:33:e9:e0:85:0c:52:
74:9f:b9:98:dc:36:c9:12:25:55:31:cf:51:31:d7:
42:e4:3f:88:e5:a4:e6:51:6f:b7:2e:4c:4c:6c:f8:
e9:ec:33:e1:26:71:0f:ae:98:52:dd:ff:e2:44:23:
d2:68:83:55:f1:d6:29:5a:d0:78:20:bd:4e:0c:87:
4d:10:92:92:00:c1:87:de:2e:8a:5c:89:68:e0:75:
4c:d0:45:9a:4b:16:15:62:eb:3b:71:24:79:fa:f4:
f1:24:0e:1d:fa:49:9f:8f:45:63:03:27:4c:11:10:
78:22:8f:17:2c:8a:2f:d4:46:d3:88:6b:e9:9d:e0:
5d:e8:37:60:bc:c0:ab:27:79:30:5d:d6:c0:fc:ab:
5c:fd:d6:e3:3a:d3:5c:48:4a:b4:32:80:b0:52:dd:
58:8c:13:86:08:b0:ff:a7:9d:c0:f4:2e:91:a6:db:
7d:9e:70:3d:8a:54:d8:30:c3:dc:66:9a:38:e7:49:
64:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:06:86:87:8E:EF:B2:67:70:45:92:F8:43:20:96:9A:31:7B:76:19
X509v3 Authority Key Identifier:
keyid:DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:6d:30:9e:7b:91:21:07:2d:85:4e:7b:ea:e3:db:44:b9:b4:
72:60:fd:7b:90:3f:6e:ed:c2:ea:eb:31:92:ea:17:e7:b2:c1:
8d:01:be:89:8d:d0:b8:c8:66:25:eb:c0:13:34:e3:a6:40:08:
cc:0c:3a:42:2e:e9:93:0d:af:73:0b:49:4a:e4:b9:1c:40:55:
f8:0c:99:75:8d:b1:47:db:47:0c:9c:c2:a2:73:35:20:1a:5c:
04:3d:ed:81:0c:ce:32:73:4a:08:54:b6:dd:c2:40:12:98:0e:
a9:5f:13:d1:a5:f8:2c:fd:16:d2:65:39:e7:1d:bb:7f:69:33:
4b:98:e1:0f:87:45:05:de:42:1a:a6:40:a8:b9:a5:c1:b5:dc:
24:90:c5:c4:0e:1f:bc:9a:05:bc:a2:ea:8e:0a:bc:ed:8a:68:
de:ef:18:ba:c8:de:63:dd:e5:04:c3:11:22:2b:f9:46:ac:94:
3b:85:7e:48:e6:24:0a:de:b0:4d:a8:bc:fc:45:9b:71:d5:19:
b0:70:3d:51:c3:7c:2b:7f:da:78:a9:5c:0f:58:ff:89:9a:e1:
f6:b5:b1:6c:06:63:aa:aa:83:7b:67:7f:87:ad:8b:ab:1c:25:
ed:66:21:c5:55:7b:c0:be:08:d6:66:47:86:cc:d7:db:d3:48:
52:65:c5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:01:37 2026 by rpki-client