Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
File: 3o5guxEQh9CAP8P8xK8yeqhcC4E.mft (raw, json)
Hash identifier: 4Lbp+0EkLdnpqbO84/aKV+sz7Qr4UYj36WI4R2z/fuA=
Subject key identifier: C1:4E:70:00:2B:A3:A7:91:2E:67:5E:53:7C:85:83:65:35:16:9B:2A
Authority key identifier: DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81
Certificate issuer: /CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
Certificate serial: 01A12C56CEC3E091BDAB2B6D2F3B3F4F762F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
Manifest number: 1A9B
Signing time: Sun 11 Oct 2026 19:00:48 +0000
Manifest this update: Sun 11 Oct 2026 19:00:48 +0000
Manifest next update: Mon 12 Oct 2026 19:00:48 +0000
Files and hashes: 1: 3o5guxEQh9CAP8P8xK8yeqhcC4E.crl (hash: D9pZBTAeB0X7LfKnveYhDwdnYcNfMuyfryZAlH2BYsk=)
2: F4NwjEYLDI-yBZ05DnMh2xIsZFs.roa (hash: VPrSJkixuSKsLbMS0Mdq/HH4JbtRsGR6fruBx7JJjhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:56:ce:c3:e0:91:bd:ab:2b:6d:2f:3b:3f:4f:76:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
Validity
Not Before: Oct 11 19:00:48 2026 GMT
Not After : Oct 12 19:00:48 2026 GMT
Subject: CN=c14e70002ba3a7912e675e537c85836535169b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:09:06:07:80:4b:d8:68:37:02:87:b8:74:87:
02:a1:74:92:c7:4d:8f:d4:4f:0a:32:74:42:37:0f:
f8:84:3a:7c:5e:d5:b2:78:cf:1a:74:af:9a:1b:03:
51:d8:38:55:f0:e0:82:4c:ce:72:fa:c8:31:ee:b1:
cf:0e:f3:e3:17:30:20:67:24:24:ec:39:d8:f0:15:
7b:7b:22:c0:2f:de:7b:b2:bd:86:6c:37:81:c8:4a:
d6:b1:c0:aa:f1:0f:9b:ec:9e:28:0b:38:cb:ea:12:
e8:cf:ef:dd:c8:96:ee:ee:7f:41:5f:70:ec:83:13:
b5:fb:dc:f6:13:0f:27:a0:6b:d5:7b:13:4b:af:2f:
52:ea:a9:3a:1b:30:b0:2e:38:c1:a6:14:53:93:70:
77:c9:2b:59:60:1d:ee:c9:b2:d1:37:e3:09:e4:f4:
d7:02:32:c6:08:f6:88:46:03:b5:03:8a:d3:22:ef:
34:02:64:db:9f:da:86:f0:b7:0f:84:a9:fd:f7:82:
af:4a:1c:cc:0f:b0:4a:52:82:c8:4a:21:bc:8f:12:
8d:c5:2b:f7:a4:1b:9f:a3:5c:20:68:be:02:26:d7:
42:86:10:e6:88:35:3a:a1:5c:8d:ce:5d:80:6c:3e:
a7:34:a1:5e:74:aa:9c:14:9d:c8:f6:07:fa:69:cd:
b8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4E:70:00:2B:A3:A7:91:2E:67:5E:53:7C:85:83:65:35:16:9B:2A
X509v3 Authority Key Identifier:
keyid:DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:19:2a:9b:80:cf:31:48:90:c9:61:44:d5:c0:03:c1:85:b2:
d9:00:1e:95:b9:a4:ac:98:e9:5f:30:8c:45:96:f3:e1:5a:21:
70:50:8c:c0:35:b6:e3:2e:07:09:4d:48:71:d0:ae:75:a1:00:
f2:b3:9e:c0:16:86:ba:3b:47:db:69:97:45:f5:ce:0e:78:f4:
a5:cf:51:03:04:ee:37:70:71:7f:5a:b4:b4:b3:ba:c7:37:ec:
50:26:a5:a3:22:99:34:c0:19:75:37:e7:6f:a0:f9:14:f6:8a:
8b:e2:47:e0:ae:a8:06:7b:65:95:4e:56:37:ef:6f:e3:b6:87:
2a:b8:47:d8:55:60:ff:f5:75:33:b3:28:9a:da:84:78:ce:55:
cb:73:2d:00:91:9e:3c:d5:ab:2f:b8:43:fa:e4:62:27:97:61:
59:47:00:20:52:94:e2:38:04:43:dc:a1:03:9a:17:16:88:f5:
cf:7c:7f:84:d6:03:e1:03:0d:95:95:bc:9e:0c:40:19:03:f4:
9d:ed:37:cd:91:f9:b3:40:e7:3d:07:7a:cd:26:5d:5a:03:ae:
5f:fa:d8:be:6b:23:de:81:69:ab:7f:bd:9e:78:ac:83:1b:7b:
03:65:1c:7e:a3:72:eb:b1:4b:a8:f7:88:1a:a5:f9:89:3a:2e:
38:69:89:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 01:03:40 2026 by rpki-client