Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
File: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft (raw, json)
Hash identifier: 9RLoUfXtLKWIDec5/5TdN9JDB9XXvEzzZJQIy01XHhA=
Subject key identifier: 68:AB:8E:48:C5:67:C0:CB:69:46:6D:AC:7E:FC:DC:69:DB:81:DA:5A
Authority key identifier: DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
Certificate issuer: /CN=de51da32762a6f9c126d63ba705d62c050b8484e
Certificate serial: 01A0C5FCA178CF5D2961A1C3D83D878B46FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 22:01:02 +0000
Manifest this update: Mon 21 Sep 2026 22:01:02 +0000
Manifest next update: Tue 22 Sep 2026 22:01:02 +0000
Files and hashes: 1: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl (hash: bGJqNMayC38VU96FZG37NBelfQ/PqSafAxOCeDdYBG0=)
2: 8J_-hWHGPWEYN0vjZgr-eCklQg4.roa (hash: qBQWLHkgusN1QQCqlJvTYnenuo1KralG8LLl2synFhs=)
3: elKDEgk9yKtQtzq3PdJ4l_cpSZQ.roa (hash: 8uKk6fr9oWkQeVcBDQrXHD0Zpv9/C37D7zWtE6D01OI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fc:a1:78:cf:5d:29:61:a1:c3:d8:3d:87:8b:46:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de51da32762a6f9c126d63ba705d62c050b8484e
Validity
Not Before: Sep 21 22:01:02 2026 GMT
Not After : Sep 22 22:01:02 2026 GMT
Subject: CN=68ab8e48c567c0cb69466dac7efcdc69db81da5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c4:4d:e6:54:b2:c9:d1:11:99:ea:82:8d:e7:
a8:75:82:06:1a:12:7c:37:1f:10:4d:59:bb:c3:22:
90:01:79:db:50:24:0c:85:d1:91:40:5a:a1:7f:c1:
71:b0:2f:ff:2c:46:67:ab:2f:bf:b1:c0:24:1c:2a:
a0:43:8c:63:ea:ba:4a:06:2c:a9:48:9d:03:a4:36:
88:7f:3c:9b:43:0b:d9:ad:d8:df:7e:55:3b:98:44:
b5:49:27:28:a1:1d:7a:3f:2c:40:54:01:6c:56:e7:
96:81:c0:7a:fd:bd:a5:29:5f:6f:f3:bc:28:eb:42:
83:37:ad:8c:eb:53:f3:54:b6:e8:0b:ab:29:bb:4f:
e8:93:7b:2f:7c:5c:2f:92:d2:a5:03:87:6f:7b:09:
f7:69:f4:dc:ab:db:d9:77:51:42:59:59:5f:d8:58:
3c:15:5f:34:59:26:a7:ee:d1:7a:75:8b:c1:00:de:
6d:ac:bd:bb:61:20:53:ad:c3:cb:1e:35:85:ca:c9:
24:51:68:f8:a1:6b:52:49:6b:6a:64:ad:61:e7:fd:
bb:25:13:a2:63:11:89:45:77:ae:23:8b:1c:64:5b:
c6:28:8e:41:82:d7:5c:2e:65:0f:d7:67:04:8f:cc:
17:eb:ab:81:2b:11:e6:3c:3e:7b:a7:2a:fd:0c:8d:
e6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AB:8E:48:C5:67:C0:CB:69:46:6D:AC:7E:FC:DC:69:DB:81:DA:5A
X509v3 Authority Key Identifier:
keyid:DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:20:5b:de:4c:8b:f7:af:94:25:62:ed:55:26:d2:0b:08:5e:
c9:69:73:02:62:4a:ef:97:f2:7f:4f:98:c8:61:d6:18:45:fc:
7c:88:6b:07:f5:bd:08:a1:d8:e6:89:f8:94:1a:08:b6:c6:92:
69:3c:72:fc:51:01:ed:7b:3a:7d:ea:b1:ba:e0:8e:1c:59:d1:
ee:14:25:39:bf:38:04:f8:35:c4:15:ef:66:8a:8c:3b:90:7e:
98:13:9c:05:19:f9:11:e8:24:4c:f8:11:b0:f8:cf:07:e5:2e:
0b:4c:68:c8:6c:63:0a:c0:40:77:3d:a9:cc:e6:ed:44:89:73:
9c:8c:97:8f:3f:71:ea:97:67:89:d0:e4:66:28:f6:1c:7f:cb:
d7:93:b3:bc:86:49:7c:01:91:1c:2c:d3:d7:27:4a:a3:63:b6:
f5:32:e6:8e:f2:9b:85:3f:e0:e0:48:9b:e4:b5:4f:ba:ce:79:
fb:c9:06:f0:ea:f1:17:5e:66:97:4f:e3:b9:56:f3:58:04:37:
4f:e4:7f:47:ee:04:d3:40:3c:bd:2e:7f:a7:c9:e3:88:60:7a:
8b:50:85:cf:76:dc:24:43:85:34:55:96:a2:c7:27:e7:27:cd:
14:2e:a6:e5:0f:66:ab:a3:e5:4e:2e:4a:97:47:ae:ef:72:dd:
7c:6a:e0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:38:27 2026 by rpki-client