Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
File: 3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft (raw, json)
Hash identifier: iaAzb6lOZY681e4RWcd1MRrgROj514n5daqHws5ITk0=
Subject key identifier: C3:B3:FD:F8:A9:7C:BE:94:AE:25:02:11:35:16:C8:41:4A:0A:A6:44
Authority key identifier: DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E
Certificate issuer: /CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e
Certificate serial: 01A0C6A154BD7BF351CED445B33A194DF649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
Manifest number: 0D85
Signing time: Tue 22 Sep 2026 01:00:56 +0000
Manifest this update: Tue 22 Sep 2026 01:00:56 +0000
Manifest next update: Wed 23 Sep 2026 01:00:56 +0000
Files and hashes: 1: 3eK1ZL7O23CEW3-d4NQhqQce6UE.roa (hash: MyvSzm1E1BuNXsJH9y2br5JSC+bFdaTi0xbtRaMTOVk=)
2: 3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl (hash: Cvb7qk1G0mr9ghjdc+eUmcogUfOBWn6djw5HG1xrgQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a1:54:bd:7b:f3:51:ce:d4:45:b3:3a:19:4d:f6:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e
Validity
Not Before: Sep 22 01:00:56 2026 GMT
Not After : Sep 23 01:00:56 2026 GMT
Subject: CN=c3b3fdf8a97cbe94ae2502113516c8414a0aa644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:70:ee:e3:e3:a9:87:0f:37:00:57:e9:ef:29:
c3:0e:2c:0b:49:fc:36:d7:a7:03:75:10:ad:99:0b:
82:b1:f4:74:8e:93:cb:b8:01:78:d2:b6:24:3e:96:
5b:f5:86:40:a9:da:fc:6e:be:02:9d:6f:be:b9:54:
bd:73:bb:4a:3b:e7:5c:33:8d:69:2d:6a:48:ee:b7:
b6:98:80:d5:e4:18:51:ba:55:98:ab:98:f4:a8:eb:
1f:61:aa:ef:2e:f2:27:e9:1a:39:f6:33:fa:d1:19:
9c:c4:ff:51:8f:88:da:9a:15:81:a4:6a:7c:0a:ec:
85:41:fb:07:78:d5:77:2f:3c:c0:64:a6:4c:be:d9:
e3:53:b0:d2:40:40:e0:81:59:6f:75:43:6a:b3:ac:
1f:f0:be:2c:48:47:65:89:bb:cd:76:bc:81:c9:44:
13:08:d9:31:66:17:15:d5:e9:2a:8b:89:dd:97:a5:
de:c8:41:5d:51:22:8a:14:ba:54:a0:b5:a6:6c:6d:
07:62:dc:6d:79:81:88:50:c7:f5:ad:8e:91:69:f1:
31:70:07:88:09:d5:f0:0b:a5:3e:55:1c:e8:4b:43:
b9:71:2a:65:4f:af:bd:64:4d:de:79:0a:50:c3:69:
45:d4:1c:5b:27:9d:de:bd:ba:98:fa:b9:30:a5:db:
85:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B3:FD:F8:A9:7C:BE:94:AE:25:02:11:35:16:C8:41:4A:0A:A6:44
X509v3 Authority Key Identifier:
keyid:DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:48:70:7b:e0:49:8c:6a:6a:3f:73:c5:ff:8c:34:cf:1b:6c:
4d:f9:46:1a:8a:6b:a6:b7:91:e7:0a:bf:e0:fe:36:c5:1e:b9:
4c:47:e3:20:1c:d8:45:ad:e9:37:37:df:0a:42:f4:f8:39:17:
b8:b8:d7:2c:74:33:8b:92:06:ea:10:36:c3:7a:0e:44:99:49:
8d:86:87:85:ed:6c:ac:e0:22:97:37:42:b3:9a:bc:2d:04:59:
93:d9:db:2f:0d:23:4d:dd:1b:60:ee:99:59:0a:74:ce:b5:24:
f8:fd:0d:69:a1:79:fb:1a:bd:c7:74:a7:42:db:2d:31:31:56:
c7:cb:31:01:47:93:b3:97:03:8b:a9:3f:b6:57:e8:fd:9b:89:
bf:40:3d:ac:8b:d2:78:a9:aa:97:e8:58:8f:80:97:51:8e:8d:
40:19:ca:25:42:29:c0:2a:ef:29:bc:bc:39:23:7c:b8:f2:07:
ec:44:09:3e:a4:d8:55:93:f9:ee:f0:cc:10:f3:f1:6e:46:f6:
41:75:5a:2a:de:33:ed:4a:47:1c:50:9e:8a:f5:bb:1f:ec:54:
6d:d7:5c:34:73:de:77:ce:68:4b:03:cf:37:64:78:de:8b:bc:
cd:c2:34:fb:aa:42:5e:49:c4:0f:74:cf:ba:4e:30:98:18:0d:
39:d9:bf:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:53:51 2026 by rpki-client