Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft
File: 3AWXDmUMKq8atqOjOoNzJGahUS4.mft (raw, json)
Hash identifier: Iuh1YFHKsJUag1/J4sFd4GhxN1pVlNkdIl2g7Y5bKUY=
Subject key identifier: B3:5C:6C:FB:F4:26:80:04:24:76:76:ED:90:31:EC:60:63:29:0F:D6
Authority key identifier: DC:05:97:0E:65:0C:2A:AF:1A:B6:A3:A3:3A:83:73:24:66:A1:51:2E
Certificate issuer: /CN=dc05970e650c2aaf1ab6a3a33a83732466a1512e
Certificate serial: 01A0CA47D75F278A1970BAD60CBAC551E6FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AWXDmUMKq8atqOjOoNzJGahUS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft
Manifest number: 1A6C
Signing time: Tue 22 Sep 2026 18:01:40 +0000
Manifest this update: Tue 22 Sep 2026 18:01:40 +0000
Manifest next update: Wed 23 Sep 2026 18:01:40 +0000
Files and hashes: 1: 3AWXDmUMKq8atqOjOoNzJGahUS4.crl (hash: ZuuFelGuCRp7lNrzes0eLUcrbwt51T+NbEe6f+WRjEQ=)
2: JP7O65gp7zX3tDUG-U1DvEtjCFA.roa (hash: 4wb9GuGN7HSRqQwmPjSk8wSV9Gc7TW0TyvFnGjiWA5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AWXDmUMKq8atqOjOoNzJGahUS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:d7:5f:27:8a:19:70:ba:d6:0c:ba:c5:51:e6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc05970e650c2aaf1ab6a3a33a83732466a1512e
Validity
Not Before: Sep 22 18:01:40 2026 GMT
Not After : Sep 23 18:01:40 2026 GMT
Subject: CN=b35c6cfbf4268004247676ed9031ec6063290fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:48:9a:56:c6:a8:6d:ae:68:19:c5:0d:6e:1a:
40:94:d4:ef:80:a3:f9:8c:a0:a0:f9:e7:ba:82:1f:
9e:7f:76:80:ee:fb:36:f2:97:5d:af:d8:52:5e:69:
c4:cd:17:f6:a3:b4:b2:23:17:39:e4:8b:a3:39:b9:
08:58:d9:bd:a5:86:d8:42:e2:23:8a:99:22:c2:5e:
7d:8b:04:27:dd:17:f7:73:37:a1:73:64:30:91:49:
5d:51:99:a2:bb:8f:f0:1f:02:2e:6f:f2:57:64:9c:
33:18:a5:7b:22:9e:31:ae:3c:2c:b5:e5:7f:51:8f:
ca:88:1d:0b:a7:9c:25:7a:7c:1e:de:d3:91:d2:0c:
83:98:67:b5:57:86:ae:c0:3c:d4:16:75:84:df:13:
53:de:6e:c9:37:74:12:cf:9e:9d:5e:26:17:e4:da:
cd:2b:74:6a:81:4d:b3:e5:0b:68:88:3b:44:0c:00:
c0:09:71:ef:30:d3:89:f4:63:aa:98:79:a4:e3:6e:
6a:dd:5f:f8:75:a3:8f:33:dc:17:3c:9e:eb:80:ec:
f5:2f:70:5d:cb:90:99:89:4a:df:11:2b:cc:6d:a9:
fa:ec:54:23:ed:84:76:1f:4f:e5:74:b4:53:2f:02:
43:7b:fd:5c:29:eb:ad:25:bf:ce:20:b8:8a:70:14:
76:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5C:6C:FB:F4:26:80:04:24:76:76:ED:90:31:EC:60:63:29:0F:D6
X509v3 Authority Key Identifier:
keyid:DC:05:97:0E:65:0C:2A:AF:1A:B6:A3:A3:3A:83:73:24:66:A1:51:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AWXDmUMKq8atqOjOoNzJGahUS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ea:60:a6:52:e8:0f:90:a9:4f:8f:e4:58:80:40:73:8e:7c:
8f:c1:35:d7:07:d5:d8:47:26:c9:d9:76:e0:5d:c6:73:6d:83:
bb:7d:de:6c:ef:77:9e:df:3f:e9:06:89:a3:5b:ee:b3:67:97:
b2:b3:cc:a2:0f:1e:cc:69:a9:80:8b:a6:a6:f1:da:6b:64:18:
c3:e4:21:42:53:66:27:8f:73:2f:28:a6:0b:ce:c4:c8:ad:d8:
b5:df:66:af:a9:1b:cc:ae:f0:1f:d3:e1:87:75:3a:fa:6c:03:
01:26:2c:08:48:bd:2b:e4:44:25:d2:5c:2e:25:ab:fd:8f:dc:
19:cf:81:2d:87:42:89:0c:da:9d:4f:8b:66:10:0b:64:e6:11:
44:5a:03:e8:e8:d7:31:cf:77:d3:77:5d:5e:9e:18:48:9b:13:
21:9f:1b:1a:8b:b4:14:11:93:fd:a9:3d:e6:b2:21:ae:9c:26:
0d:88:fd:0e:5a:dd:12:8a:ee:7b:e3:2e:64:49:0f:e1:91:1d:
33:7f:c7:22:1f:64:f8:4c:fb:ff:e4:5b:37:c4:ee:b8:90:eb:
c1:65:b9:aa:54:73:a0:c5:cf:b3:d7:26:72:00:f6:b1:da:15:
97:0a:ff:35:24:f8:af:92:0d:4e:af:db:07:78:46:3c:8f:f7:
8f:ed:89:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:40:54 2026 by rpki-client