Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
File: 3EPqLNB5l-zf4XGIhycIZS4XLfI.mft (raw, json)
Hash identifier: r0F1/WmAic9/2/BhFYA/RmxOEroDeZJ0RNzPo0sNy94=
Subject key identifier: A5:79:3A:65:16:00:28:00:B3:2B:F4:B3:1A:53:0B:1F:A0:D2:CE:BA
Authority key identifier: DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
Certificate issuer: /CN=dc43ea2cd07997ecdfe17188872708652e172df2
Certificate serial: 01A0C58EBC6664AC10659345ABBFD4996CE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
Manifest number: 0ADE
Signing time: Mon 21 Sep 2026 20:01:00 +0000
Manifest this update: Mon 21 Sep 2026 20:01:00 +0000
Manifest next update: Tue 22 Sep 2026 20:01:00 +0000
Files and hashes: 1: 3EPqLNB5l-zf4XGIhycIZS4XLfI.crl (hash: CSKsU1oYwB0IfFzVVx0djNBj7Z6nABj3g9/rgKea8Lk=)
2: fI5jVmmy88-mIgPso0R_tYbnmK8.roa (hash: DZgFgnCe+GlazLWeguoKXJElQSdORsAcJbygFhHnVCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:8e:bc:66:64:ac:10:65:93:45:ab:bf:d4:99:6c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc43ea2cd07997ecdfe17188872708652e172df2
Validity
Not Before: Sep 21 20:01:00 2026 GMT
Not After : Sep 22 20:01:00 2026 GMT
Subject: CN=a5793a6516002800b32bf4b31a530b1fa0d2ceba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ee:8f:d6:e4:1f:0d:c8:73:4a:c4:d0:8d:2c:
46:8b:22:1d:d9:f5:e6:77:27:9b:b2:54:6b:c0:bf:
cd:c7:e7:e1:cb:20:e8:f5:e4:d0:88:d4:68:a2:76:
72:46:be:da:68:62:44:eb:df:94:34:99:87:2d:78:
9a:2d:3a:99:20:51:45:6e:54:61:7d:f9:3d:e5:24:
1d:0a:07:65:fd:20:ee:b2:e0:85:7b:59:a8:96:03:
1a:3f:82:9d:7b:22:ba:e3:47:d0:bc:a4:4f:f8:f8:
39:6a:40:a1:76:42:08:11:6e:4d:3f:d6:23:34:af:
f5:fd:e2:10:02:88:ff:c4:73:c4:5a:c9:09:94:5e:
19:2f:a1:0f:54:06:d5:30:58:a5:27:16:0c:aa:74:
b0:d1:c8:b0:8d:c2:1f:bf:a6:12:e3:87:72:84:a9:
7f:f3:22:a3:a5:f8:f6:f0:4a:65:76:b7:2f:10:3e:
30:38:6b:29:00:f6:d1:ca:97:0a:c7:90:74:ac:7e:
6f:46:d5:08:45:7b:71:64:37:95:d6:24:1b:41:d7:
40:e3:34:ed:3f:37:7d:23:49:3a:9d:ad:ab:0e:63:
0e:91:01:d6:36:fd:9c:c9:d4:3a:9d:d1:3c:b7:53:
d9:39:65:0b:6f:31:af:83:f1:86:0e:ef:f3:86:55:
c7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:79:3A:65:16:00:28:00:B3:2B:F4:B3:1A:53:0B:1F:A0:D2:CE:BA
X509v3 Authority Key Identifier:
keyid:DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:44:f3:2f:6c:07:ff:c5:27:8b:37:95:d4:30:53:69:f3:88:
d3:2c:eb:0a:c1:4b:d5:5a:a8:a9:e4:cd:60:f0:ed:a6:dc:04:
f4:24:0c:ac:8e:4c:2b:aa:24:84:9a:a5:4c:e5:23:dc:df:86:
77:c0:6e:54:17:23:55:41:6f:d6:8c:29:fa:b8:ac:2d:56:4a:
8b:b0:9f:a2:61:c9:2f:4b:ce:14:f0:c0:32:c4:a1:e7:ad:ce:
6f:8f:b5:9a:1b:6e:73:b1:16:41:8e:52:b5:c1:28:81:8a:8d:
fb:32:16:8b:d1:73:a5:fe:84:66:34:b9:a3:fc:55:a6:62:ab:
dd:bb:21:1a:7a:2c:4e:4c:7d:76:f9:ee:ca:53:a3:a2:1a:b0:
98:36:12:d1:b1:07:5d:52:20:c1:71:24:23:db:8b:93:05:f1:
40:e5:43:52:3d:87:34:b4:dc:53:53:e5:b0:32:3c:72:35:8c:
83:7e:5c:23:02:3e:fe:3b:0f:89:40:d1:75:f8:4d:e8:d8:56:
6d:cf:4d:ab:92:e4:d7:5e:51:6a:48:2f:ad:38:28:5d:f7:c5:
eb:32:8e:a8:fc:a0:4b:a6:6f:c9:f6:dc:7a:32:7a:00:7a:4c:
6e:8c:8a:91:50:8a:82:52:f5:0f:2b:48:c4:bc:a3:ed:39:a2:
74:cd:f6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:48:14 2026 by rpki-client