Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
File: 3_XMSEiUO0_onSznH9weT_fX8-M.mft (raw, json)
Hash identifier: LWwyRCD71CTJ8yQdLTz3kDXHZ1StrVl0f6mcKxp6JIc=
Subject key identifier: 81:69:61:17:96:D4:B7:15:BA:C6:84:5A:02:91:7E:03:1F:8F:52:92
Authority key identifier: DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
Certificate issuer: /CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Certificate serial: 01A0C77C5AA7AD46A61B861DC8662076479F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
Manifest number: 1A43
Signing time: Tue 22 Sep 2026 05:00:10 +0000
Manifest this update: Tue 22 Sep 2026 05:00:10 +0000
Manifest next update: Wed 23 Sep 2026 05:00:10 +0000
Files and hashes: 1: 3_XMSEiUO0_onSznH9weT_fX8-M.crl (hash: KvI2cRN5jWsJHY+LSZzHAnATJ3XV/megzIiy7Ds4D5E=)
2: I_klKsqV4Xc27UFkAneEsuB-gHk.roa (hash: AkW1e4Xf71kIFS8tvO/5F4giqlxcvlPyuHSMW67qHI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7c:5a:a7:ad:46:a6:1b:86:1d:c8:66:20:76:47:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Validity
Not Before: Sep 22 05:00:10 2026 GMT
Not After : Sep 23 05:00:10 2026 GMT
Subject: CN=8169611796d4b715bac6845a02917e031f8f5292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d4:34:37:72:84:c1:97:1b:4a:14:ba:12:35:
8b:4f:37:68:6f:90:da:90:f1:41:b0:7b:57:a6:a1:
c5:56:d0:f4:69:c4:06:f3:41:5e:de:36:04:b5:5b:
15:49:ce:4d:d4:1f:ce:dc:0b:24:5b:d1:29:5d:0f:
12:c7:2e:2d:e2:e2:4c:2c:06:fe:a6:f4:06:f6:77:
54:cf:b6:d7:50:50:19:f7:ce:a6:1f:e2:7b:dc:89:
2b:cf:6d:0c:19:6f:1c:6f:1d:c8:b1:11:6a:35:e2:
1c:87:f2:ea:8a:6d:0b:f9:53:a1:ea:15:e6:8f:ee:
25:93:8d:fb:5b:78:df:59:86:e3:58:d2:1d:74:44:
bd:fb:7a:2e:41:23:1d:83:e8:7e:0e:4c:f4:65:be:
20:85:28:0a:55:aa:54:3c:97:37:b0:3d:f3:3a:62:
6f:7f:2e:92:46:8e:3b:06:2c:2f:5d:ed:16:c4:22:
a6:a4:d5:7f:af:cb:9d:ef:7e:50:9f:53:70:c2:2e:
7a:45:63:76:e0:8e:59:71:11:04:a7:f0:00:58:5b:
d0:63:93:0c:4b:1b:cf:e1:df:dd:2c:d2:6f:4d:80:
f9:90:94:3d:39:61:50:44:0c:3b:a1:85:dc:e2:59:
9f:64:2e:af:79:93:6c:5b:ad:65:66:48:e1:db:4d:
07:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:69:61:17:96:D4:B7:15:BA:C6:84:5A:02:91:7E:03:1F:8F:52:92
X509v3 Authority Key Identifier:
keyid:DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:4e:88:43:cd:7e:f9:53:81:89:c4:14:4d:54:c0:29:27:ea:
dc:98:ef:a8:28:e4:46:20:4f:ff:01:0d:96:4a:fd:86:7e:12:
03:1d:3b:0a:71:21:30:46:ba:bf:80:c0:b8:a0:8b:a2:73:22:
0f:e3:6b:32:9c:c5:9f:94:59:b5:ee:f8:aa:1f:09:e0:0c:72:
d2:50:27:e2:b7:2e:8d:03:24:d2:79:66:15:d4:19:e4:96:2b:
d4:d6:c3:3c:b2:0a:90:1e:06:57:7b:df:e2:af:27:c4:4f:89:
b1:fe:d1:25:0c:1a:d4:fe:f5:7c:88:44:57:0e:f9:22:6f:a3:
38:c5:ee:35:fc:d9:66:4d:cb:8f:72:4f:9d:22:ef:82:4f:ed:
05:50:dd:d7:d7:7c:a9:93:5a:be:9a:a1:1b:76:4d:c4:a1:cf:
3a:9e:1e:25:0a:64:77:16:63:4e:f1:28:98:e4:63:87:9d:ae:
88:6b:4b:1f:0c:7b:4b:1e:74:db:c8:83:b6:35:00:00:c4:38:
4d:f1:d5:40:b9:af:2b:56:b4:56:d9:20:b0:88:f9:d7:46:18:
b8:e5:ed:46:6c:91:ad:19:c7:0a:84:7e:85:22:a0:ab:fe:d0:
8c:bd:9a:02:6e:43:b1:ce:85:20:63:57:1e:66:af:90:71:41:
dd:00:d8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:37:18 2026 by rpki-client