Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/37bb89-8516-454a-80fc-bb01648fac07/1/3OEoZtsCnY-bejryd2akK-5Wi60.mft
File: 3OEoZtsCnY-bejryd2akK-5Wi60.mft (raw, json)
Hash identifier: cWPtENxPA9AqLlZD1TxV5Pe8ZWEhw0xG89MVY5H+5wk=
Subject key identifier: B6:41:1A:0F:BA:AD:5C:AC:00:21:1A:0B:C8:11:F0:17:ED:DD:8A:75
Authority key identifier: DC:E1:28:66:DB:02:9D:8F:9B:7A:3A:F2:77:66:A4:2B:EE:56:8B:AD
Certificate issuer: /CN=dce12866db029d8f9b7a3af27766a42bee568bad
Certificate serial: 01A0C7EA4F5CBB6575223FFD98344CD91CC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OEoZtsCnY-bejryd2akK-5Wi60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/37bb89-8516-454a-80fc-bb01648fac07/1/3OEoZtsCnY-bejryd2akK-5Wi60.mft
Manifest number: 95
Signing time: Tue 22 Sep 2026 07:00:16 +0000
Manifest this update: Tue 22 Sep 2026 07:00:16 +0000
Manifest next update: Wed 23 Sep 2026 07:00:16 +0000
Files and hashes: 1: 1-r60MLTZRSdgygfymOIKvkloX4s.roa (hash: af6A06NaI4rDIZj+VAritHdSnfA6HkDWGlQ9vMcojAc=)
2: 3OEoZtsCnY-bejryd2akK-5Wi60.crl (hash: xd8Utpb2x5DowjA0afi3KlPm56RWimEF8LR0io+Y3nY=)
3: ijw9MMecXFQ1MALw3HCoNkDG7LI.roa (hash: rCEqb/EtPquuy7z0bjBCs2np62IcolwSM1fIQEnyHGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/37bb89-8516-454a-80fc-bb01648fac07/1/3OEoZtsCnY-bejryd2akK-5Wi60.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/37bb89-8516-454a-80fc-bb01648fac07/1/3OEoZtsCnY-bejryd2akK-5Wi60.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OEoZtsCnY-bejryd2akK-5Wi60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:4f:5c:bb:65:75:22:3f:fd:98:34:4c:d9:1c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce12866db029d8f9b7a3af27766a42bee568bad
Validity
Not Before: Sep 22 07:00:16 2026 GMT
Not After : Sep 23 07:00:16 2026 GMT
Subject: CN=b6411a0fbaad5cac00211a0bc811f017eddd8a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:68:8d:dc:4b:9e:22:b0:ea:68:fc:2c:be:1d:
be:c1:cd:10:e8:bb:78:96:4c:78:2c:3b:28:f5:d1:
29:98:9b:ab:f2:1f:19:28:33:dc:f5:fc:3d:94:f1:
df:fc:ed:87:7d:65:04:ce:19:84:04:3f:98:84:f6:
cc:a5:60:d4:09:7a:23:56:f6:2a:b6:7e:d6:47:25:
e6:96:86:b5:82:bb:cf:91:b2:66:e4:d0:e8:83:d3:
a2:c5:41:ba:83:57:87:e6:2e:12:3c:d2:37:25:40:
5f:8a:57:e5:1b:e4:ed:b0:7c:10:fc:f5:59:cb:91:
e6:81:0b:b7:5e:7f:fd:aa:34:36:0d:f2:01:af:e3:
f0:5d:90:7e:ad:1d:e9:62:ac:af:aa:d2:85:f3:9c:
b9:99:70:42:4f:f2:4d:a8:20:ba:f7:54:05:58:cb:
7b:c9:29:30:da:3c:32:78:9f:f8:7a:08:a8:1e:1c:
a1:e9:5d:a7:cc:e6:7b:cc:8c:ab:7a:4e:66:19:29:
e1:b5:54:1e:68:26:7c:c0:6f:69:29:05:1e:ad:40:
1a:0d:9e:a8:d1:d8:d9:ea:7a:d0:0c:ff:08:ce:7f:
6b:40:02:36:a9:ad:a6:01:97:0f:40:8a:59:cc:d6:
57:c5:e0:fa:fe:23:4a:66:4a:fc:aa:f7:c3:9c:d9:
d0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:41:1A:0F:BA:AD:5C:AC:00:21:1A:0B:C8:11:F0:17:ED:DD:8A:75
X509v3 Authority Key Identifier:
keyid:DC:E1:28:66:DB:02:9D:8F:9B:7A:3A:F2:77:66:A4:2B:EE:56:8B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OEoZtsCnY-bejryd2akK-5Wi60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/37bb89-8516-454a-80fc-bb01648fac07/1/3OEoZtsCnY-bejryd2akK-5Wi60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/37bb89-8516-454a-80fc-bb01648fac07/1/3OEoZtsCnY-bejryd2akK-5Wi60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:24:31:7a:35:cb:d6:29:bc:d8:43:fa:76:02:82:09:9b:bd:
34:dd:0f:12:bd:64:4f:1e:c5:7d:c2:4c:ce:a6:c2:02:c0:c2:
b3:0f:92:6b:8d:d7:49:53:03:d5:f9:63:56:1f:d1:eb:fb:85:
a0:d1:84:8e:07:ea:84:b9:71:29:39:63:56:7a:d9:7b:a1:3e:
0e:e4:b6:a0:f3:8d:0e:7f:3e:d9:08:12:eb:bd:fc:7d:f1:81:
08:95:43:7b:b0:a8:ef:17:cb:b7:46:d1:85:9f:71:36:0c:cc:
81:42:53:e8:39:4a:c6:87:00:9d:58:6d:e5:53:7b:df:f6:28:
96:c3:e2:6b:77:25:ac:e4:61:4a:90:18:bf:74:6a:c7:b2:3f:
86:29:17:46:a1:28:81:05:14:09:4e:2a:f3:2d:51:ec:2c:3e:
a7:16:ee:b4:86:f1:77:63:10:fc:5b:aa:1c:96:12:74:ef:ee:
8f:7d:59:f1:5c:4f:a6:e0:32:13:a6:e6:6a:4b:8d:4c:38:b2:
ab:ea:2a:86:84:ce:91:34:28:55:0b:0d:86:fe:b9:c3:1b:9e:
d5:bf:cc:bd:8d:c5:e6:fb:a9:dc:15:f0:d7:28:0f:c2:eb:93:
de:ba:fb:ec:e2:83:74:0c:d0:70:5f:39:ec:95:4c:e3:5c:db:
49:84:26:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:26:21 2026 by rpki-client