Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
File: 3OVg8OyFDainwPjW84JRAtTeSs4.mft (raw, json)
Hash identifier: hUtdOmAfPmA9GhtBVAy5s4eAtbjyI/f4o8cH5jFSFkE=
Subject key identifier: 9B:74:0C:6C:3F:A8:60:34:D7:E5:8D:2C:CD:6C:F0:2F:67:42:28:72
Authority key identifier: DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE
Certificate issuer: /CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
Certificate serial: 01A0C8C68618FD45FBD50CBB577CB758B5AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 11:00:48 +0000
Manifest this update: Tue 22 Sep 2026 11:00:48 +0000
Manifest next update: Wed 23 Sep 2026 11:00:48 +0000
Files and hashes: 1: 3OVg8OyFDainwPjW84JRAtTeSs4.crl (hash: jlB00ozWxq1CcKQZV829oxupStmr7jQdHaXgvhvi24k=)
2: 6K26AJnKFSRQ6qeqQiaBSR5tmsk.roa (hash: Uasee9UdIsrJgyTXIlKOU2BJMKL73nIUt5Ls4sJkN9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:86:18:fd:45:fb:d5:0c:bb:57:7c:b7:58:b5:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
Validity
Not Before: Sep 22 11:00:48 2026 GMT
Not After : Sep 23 11:00:48 2026 GMT
Subject: CN=9b740c6c3fa86034d7e58d2ccd6cf02f67422872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:99:57:99:0a:17:37:12:4c:cc:ae:80:ff:2d:
e9:0d:c0:ae:ad:63:1e:6c:b6:14:70:4f:68:d4:ee:
c4:fe:07:2b:46:04:ce:17:01:6d:34:dd:30:0c:ba:
b1:cd:9c:b6:90:48:61:0b:b0:8e:ec:7b:98:7a:d9:
a2:82:59:bc:bb:57:f9:ab:2b:5b:55:4d:1c:55:13:
da:63:4f:47:3b:db:4f:b7:74:a6:7f:1a:3f:93:f8:
1d:c2:ac:1f:2f:47:3f:18:6d:a7:1e:26:e1:6d:34:
c6:75:c2:2c:e6:08:46:bb:7c:ce:25:b1:fd:87:ad:
9f:61:b0:c9:6e:54:40:90:34:2e:a4:4f:39:b2:b6:
6a:40:8a:e6:47:70:71:fe:16:23:e4:e3:48:80:f0:
58:d7:ef:dc:d8:a5:2c:68:e7:60:0b:9f:a6:eb:83:
52:e7:ba:df:ef:f1:db:d6:67:d6:9c:71:79:d6:11:
f1:74:2c:a4:fc:f1:f8:77:8c:d0:d1:70:15:f5:14:
4f:55:a3:17:df:8f:53:91:e5:15:0e:70:49:10:a5:
21:0a:a1:62:cf:4d:76:7e:27:7c:29:87:43:a4:06:
77:4b:59:cd:75:71:5e:36:d8:c4:a5:1b:83:38:c2:
a2:b4:da:6f:74:0d:fa:a0:e4:18:f2:ae:c3:6d:6f:
9f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:74:0C:6C:3F:A8:60:34:D7:E5:8D:2C:CD:6C:F0:2F:67:42:28:72
X509v3 Authority Key Identifier:
keyid:DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:a8:06:ed:81:66:fc:ba:d8:52:31:c2:61:97:cf:77:db:e9:
b5:26:cf:4e:f4:32:db:f0:b4:ad:0a:ba:78:cc:6c:6d:94:3f:
01:86:50:86:be:4a:ba:07:cb:b8:92:40:62:bf:65:96:0f:04:
54:83:0d:ef:27:18:97:41:39:9e:70:ee:49:5b:5a:63:36:ff:
2b:d8:da:99:bc:83:cd:18:2d:98:75:59:ed:48:f2:19:38:be:
36:29:77:f3:6d:16:eb:e8:4b:21:cb:85:8e:05:f1:d1:6c:56:
73:8f:db:8c:5c:81:b4:f6:05:e7:56:2b:b9:b3:99:34:b0:c5:
a7:9b:60:d4:ac:e9:d9:9f:46:63:02:e9:36:47:f5:b1:d5:cd:
94:9d:a9:0b:e8:14:8e:57:de:1c:eb:05:0f:71:f0:c4:e3:42:
ff:72:43:72:8d:0e:99:4a:53:f5:d6:ea:c7:1f:06:1c:17:6d:
be:62:37:28:84:28:97:15:d4:93:10:d4:0b:41:91:b1:ce:30:
27:4d:e3:c6:9f:da:90:fd:95:98:c5:80:e0:69:b2:2a:c8:cb:
83:b5:3e:5f:64:d3:60:16:ae:d4:70:fb:0e:82:0e:9a:d5:7c:
6a:a7:fd:9b:34:e2:cd:85:3c:3d:55:90:21:3c:ab:e9:78:98:
ec:28:83:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:39:52 2026 by rpki-client