Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
File: 3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft (raw, json)
Hash identifier: WaiMqNVDCBwdLAyk8oFzYXFhKWw8KCPUit5GbJtVllY=
Subject key identifier: 57:DD:9C:07:2C:E3:38:51:44:BC:A6:91:16:0D:90:90:19:58:AC:B8
Authority key identifier: DE:23:F1:8C:57:6D:6F:A6:09:13:35:33:C0:D0:E3:8D:77:32:C6:52
Certificate issuer: /CN=de23f18c576d6fa609133533c0d0e38d7732c652
Certificate serial: 01A0F3B153BA8CDC1CFCB73A543D3BB8D6F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
Manifest number: 0726
Signing time: Wed 30 Sep 2026 19:01:19 +0000
Manifest this update: Wed 30 Sep 2026 19:01:19 +0000
Manifest next update: Thu 01 Oct 2026 19:01:19 +0000
Files and hashes: 1: 3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl (hash: G3RXNQrqLajLlXzgA/0rsMQ42K4xNiByzi3tKoDffAo=)
2: GUtmTasoYg9vC_X6TeYo5LqnthI.roa (hash: h4pcOYZGVhmcTnXyyDF08GhSsY9jTxf6Vxsbll0E63Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:b1:53:ba:8c:dc:1c:fc:b7:3a:54:3d:3b:b8:d6:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de23f18c576d6fa609133533c0d0e38d7732c652
Validity
Not Before: Sep 30 19:01:19 2026 GMT
Not After : Oct 1 19:01:19 2026 GMT
Subject: CN=57dd9c072ce3385144bca691160d90901958acb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9a:b5:d9:bc:22:88:09:27:29:03:42:e7:f7:
ae:1a:8d:a2:9b:4b:e1:72:4d:15:6e:ee:25:34:26:
32:24:0b:62:fe:db:e2:3a:63:c7:78:b5:62:56:56:
10:05:65:4b:fa:09:9c:54:fe:7b:99:6c:68:83:d3:
31:6b:72:c4:a6:7c:e2:72:49:8b:16:df:54:7a:a3:
a6:95:dd:a6:78:5f:c4:09:b5:db:67:35:b2:8e:2f:
18:b2:a9:dc:1f:e5:ef:3e:6d:15:bf:33:5a:e3:10:
46:a9:3a:15:bb:8f:75:ee:89:34:87:15:67:1a:12:
5d:9c:9e:7f:d3:6a:85:90:e9:86:62:2c:6e:bd:94:
c3:d3:ac:08:46:29:d6:ca:dd:cf:c9:e5:d0:4e:01:
0b:55:36:63:2d:8a:9a:f7:d9:46:fe:1a:ce:46:58:
eb:1f:4f:63:43:53:53:ee:7b:eb:f6:32:a6:07:f4:
c8:b2:8d:e1:d8:dc:a6:aa:95:4a:db:f8:98:ca:46:
5c:b4:e4:36:d5:96:51:f6:d5:02:80:54:d9:b1:53:
4e:f5:c8:70:de:bf:83:10:b0:17:6b:e3:2c:05:85:
0d:ad:da:7e:f8:f7:20:24:35:74:c6:6a:23:c2:b8:
3f:3c:92:82:74:b8:c2:46:f9:42:e0:5e:2d:27:ec:
2d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DD:9C:07:2C:E3:38:51:44:BC:A6:91:16:0D:90:90:19:58:AC:B8
X509v3 Authority Key Identifier:
keyid:DE:23:F1:8C:57:6D:6F:A6:09:13:35:33:C0:D0:E3:8D:77:32:C6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f6:43:48:7d:64:da:83:0c:92:9a:7b:ae:ab:8f:92:23:56:
ad:d8:9b:36:b9:c2:bb:cd:1f:3f:5f:08:a0:6a:5a:1c:a4:18:
cb:44:fc:89:2c:f6:61:bd:d9:04:67:7f:00:74:50:4a:6b:7c:
1c:d8:4c:c3:ca:a7:6b:db:f7:61:e9:32:b0:85:ac:94:76:21:
a7:e8:57:a4:dd:81:c8:96:f7:2d:b0:f0:99:87:f2:8a:0d:e5:
7f:56:2b:4b:f7:69:30:20:ed:42:c0:44:fc:52:70:bc:02:86:
4b:fd:83:88:88:e5:ba:06:e7:63:df:f9:a2:52:e0:90:f8:cd:
9a:e1:bd:92:42:84:69:1d:ec:3e:fb:a2:85:b1:e9:e1:74:77:
54:e2:07:c5:0f:3d:1c:84:2a:83:67:8c:11:33:e3:4d:ee:60:
76:6a:92:73:54:78:31:61:6c:d6:63:9b:35:4b:b4:1d:ea:bb:
39:09:1e:15:a6:b8:ba:06:e0:1a:aa:54:9b:31:8c:1a:e1:57:
ba:62:cf:85:1b:9e:1f:58:b3:f6:f5:5f:c4:03:eb:e7:15:c1:
7f:e7:09:26:af:99:b6:12:26:97:8b:77:5e:fb:91:e0:f8:64:
a7:fb:50:71:4b:ed:dc:4d:4a:53:9a:b2:1f:e5:3b:94:86:c2:
ca:c5:69:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 21:52:39 2026 by rpki-client