Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
File: 3pDUMpPP6_h-fqsrDVU_0hpulkE.mft (raw, json)
Hash identifier: YdWIX94Xgh+8kvZdM9muis/6IHJwMh8YZB0xLZVsTLg=
Subject key identifier: 7A:58:E8:7F:CC:F4:AE:77:60:63:AE:FF:74:0A:F2:A4:BF:3A:8F:F3
Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
Certificate issuer: /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Certificate serial: 01A0CA7D959094125ACB6B9539F8C4CBF9CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
Manifest number: 1A71
Signing time: Tue 22 Sep 2026 19:00:22 +0000
Manifest this update: Tue 22 Sep 2026 19:00:22 +0000
Manifest next update: Wed 23 Sep 2026 19:00:22 +0000
Files and hashes: 1: 3pDUMpPP6_h-fqsrDVU_0hpulkE.crl (hash: yHb+FnW5UXW90ohTvYVk3G0kbp+ahFjG44oFtPbwGck=)
2: M4QUOFTfojfe9Puztb3G-E5hYsQ.roa (hash: nVwzsK/0G0L0DeqaFuH81eDkbF0VoyZV22ct2zx5OnU=)
3: dyDacYG9aeiRlaiQgtNvE4ErVUI.roa (hash: PdpYlK5IJJ0ruhbi5o/udgWox1/LLP1tGzCkyDFpfcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7d:95:90:94:12:5a:cb:6b:95:39:f8:c4:cb:f9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Validity
Not Before: Sep 22 19:00:22 2026 GMT
Not After : Sep 23 19:00:22 2026 GMT
Subject: CN=7a58e87fccf4ae776063aeff740af2a4bf3a8ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:33:0d:e8:54:7f:9c:da:9e:98:83:99:da:1d:
94:d7:e5:b4:c6:31:bb:ee:1f:6a:b2:91:23:a7:43:
53:88:8a:2e:05:79:2a:03:19:4d:23:5a:fb:cb:0b:
d6:0c:ea:db:ce:54:71:64:e1:5b:9e:4d:21:5a:f4:
65:91:df:ff:46:0b:ee:48:00:14:ab:c7:01:dc:fa:
a4:02:22:4d:f1:9f:fa:f0:4e:53:b2:c9:cc:e2:93:
96:a5:07:f3:8d:8e:19:50:69:56:bf:16:35:82:5e:
52:6d:ea:fa:fc:92:1f:d9:b9:18:e9:50:9c:80:1c:
dd:6c:3b:e3:6e:87:68:ce:70:ca:a1:51:64:fe:9c:
47:c9:4e:e5:e5:92:db:09:44:8b:5c:02:43:4f:f9:
10:a9:62:fa:8a:10:b5:f8:b1:c3:cd:4c:98:51:b3:
9b:83:05:16:25:c6:c3:8e:21:f2:3f:ed:0d:4f:21:
1e:88:98:11:e1:18:5d:57:4a:06:f3:6e:33:e6:c5:
7e:59:b5:1f:91:e4:95:a9:e0:d0:80:62:19:90:81:
33:5b:96:62:e7:c9:ea:2b:69:bb:85:b2:b3:30:91:
df:d2:e2:80:a7:00:5b:c7:75:1e:cb:66:53:90:a4:
51:48:58:3d:a3:88:ac:9b:61:15:d1:f9:12:17:bd:
12:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:58:E8:7F:CC:F4:AE:77:60:63:AE:FF:74:0A:F2:A4:BF:3A:8F:F3
X509v3 Authority Key Identifier:
keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:aa:44:0e:d0:17:65:6d:e9:f3:e6:44:0d:74:d1:7f:3f:0a:
4b:d3:db:51:ea:42:6b:bc:0e:33:41:47:7a:57:a5:4f:9f:ce:
13:ef:b3:9a:24:83:21:bc:28:ab:ac:71:21:c9:eb:82:0c:59:
96:11:33:5c:ce:35:c2:51:7f:a3:13:4f:2f:99:3f:bc:b6:2f:
53:d6:a3:01:d0:67:d1:a1:f8:22:20:ca:43:d1:8f:14:e7:00:
b5:b2:46:52:7b:82:29:c7:1b:54:fe:c6:4f:eb:c1:6e:df:bf:
a6:04:da:b0:e7:d4:d0:91:a0:9e:9f:65:6b:30:ce:30:20:be:
dd:a8:93:a3:a8:1f:5e:9d:e7:93:63:ab:ec:69:f6:4b:4a:a2:
12:d6:f1:2c:b1:e8:15:48:9c:f4:36:98:d0:34:79:ca:4c:e5:
a2:61:5b:30:31:e6:f7:41:6e:8e:1d:0c:4f:c6:7a:3a:23:85:
10:85:f5:7a:00:7d:49:c9:55:99:4f:d0:fa:af:f7:75:d3:cd:
bb:48:08:22:36:8a:96:f9:67:d7:29:ad:96:e8:cd:67:80:ee:
3d:99:fd:c8:20:65:b9:c1:bc:12:85:26:86:02:3a:fe:1f:a9:
eb:79:89:f3:9e:f3:30:c4:81:e3:60:9f:8a:7d:82:d9:48:0f:
2d:e0:8e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:45:47 2026 by rpki-client