Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.mft
File: 3tWhIk7c8ScO8bgGCYWqh9GRq6k.mft (raw, json)
Hash identifier: LeylfBqYMyTV7BsrybIYV1vT0K66jwh+0XhXXUqA86s=
Subject key identifier: 2B:4A:02:5A:30:1A:BE:97:FB:7E:10:17:F2:D0:4C:1E:C0:EF:32:CB
Authority key identifier: DE:D5:A1:22:4E:DC:F1:27:0E:F1:B8:06:09:85:AA:87:D1:91:AB:A9
Certificate issuer: /CN=ded5a1224edcf1270ef1b8060985aa87d191aba9
Certificate serial: 01A0C5C5774A19E54B5597D13511D0998570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tWhIk7c8ScO8bgGCYWqh9GRq6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.mft
Manifest number: 0188
Signing time: Mon 21 Sep 2026 21:00:47 +0000
Manifest this update: Mon 21 Sep 2026 21:00:47 +0000
Manifest next update: Tue 22 Sep 2026 21:00:47 +0000
Files and hashes: 1: 3tWhIk7c8ScO8bgGCYWqh9GRq6k.crl (hash: 6uc5Uj0vCiPdXyOwSlg8gA85Zet/zGScZSDxiweGfOI=)
2: kwUfzWwrFQVASQO2F6UsVOxQr_k.roa (hash: B400R5yaG15mVyOg0wtFtZ9v1gBpdtwEZj5wGIDnL98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tWhIk7c8ScO8bgGCYWqh9GRq6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:77:4a:19:e5:4b:55:97:d1:35:11:d0:99:85:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded5a1224edcf1270ef1b8060985aa87d191aba9
Validity
Not Before: Sep 21 21:00:47 2026 GMT
Not After : Sep 22 21:00:47 2026 GMT
Subject: CN=2b4a025a301abe97fb7e1017f2d04c1ec0ef32cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:65:4b:e5:af:e2:b6:91:b8:c4:dc:42:80:f2:
4c:12:19:17:ee:87:e6:48:42:76:4b:07:39:ae:cc:
04:4d:9e:81:cf:b4:28:f4:73:07:a1:99:00:e6:a4:
6b:08:22:3f:ee:e7:ad:e7:0a:ac:24:b7:8e:22:51:
7d:40:b5:cb:83:4d:72:fd:4a:b4:ed:85:d9:af:58:
39:48:c3:9f:a6:06:06:ce:28:a9:0c:44:4e:71:79:
18:ff:53:5e:8b:ae:8f:9a:20:24:14:0d:c9:20:b3:
5e:34:c6:7a:11:5a:d6:23:6a:b4:b9:46:63:8e:bd:
ae:e0:7c:ce:cc:af:52:f1:89:de:9c:36:1d:e9:b1:
a8:04:58:ed:da:89:c3:ad:ef:59:0b:cd:83:ef:5f:
ab:84:9c:77:91:b8:38:6c:cd:74:99:82:43:2d:3c:
0e:4a:fa:e1:ef:eb:91:7e:a4:31:c9:fc:b9:6a:28:
60:af:6a:18:4a:46:1c:9a:d1:05:60:96:e0:32:2a:
5d:4e:2a:1c:4d:2f:25:ef:ed:a0:db:d9:c5:99:53:
5b:6c:36:b2:94:df:f1:22:dc:c9:73:46:05:fe:07:
a3:d8:dc:82:72:80:8b:9f:34:48:5d:ea:d8:c3:42:
bc:51:c1:66:ab:83:04:bd:b9:fe:77:e7:02:81:88:
bf:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4A:02:5A:30:1A:BE:97:FB:7E:10:17:F2:D0:4C:1E:C0:EF:32:CB
X509v3 Authority Key Identifier:
keyid:DE:D5:A1:22:4E:DC:F1:27:0E:F1:B8:06:09:85:AA:87:D1:91:AB:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tWhIk7c8ScO8bgGCYWqh9GRq6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:d6:87:e2:32:4c:43:04:6c:a5:04:3e:9f:9a:03:5a:11:12:
9d:bf:32:04:4d:fe:fc:db:01:0f:06:27:df:c8:81:7f:8b:4e:
ad:3a:c3:80:d4:78:c5:7c:14:d1:0b:0c:2e:7b:23:ae:7b:7c:
e7:c0:f3:86:27:4c:97:c9:97:ba:43:54:0b:0a:e2:51:15:c9:
c5:56:c8:c6:1d:18:f3:0a:38:95:b1:2c:f0:dd:c6:34:f3:f6:
5e:c8:92:a9:1a:7f:5a:10:78:98:cc:f6:15:e5:a7:c2:46:99:
b0:11:55:4b:63:39:8b:32:b6:8d:e9:e7:6f:df:17:4a:dc:36:
0e:61:7f:07:c8:56:89:84:24:37:65:1a:fd:6e:cc:10:c0:f8:
8d:1f:75:51:b3:41:60:82:2a:dd:07:f3:d0:18:bb:3b:36:0c:
d4:75:4f:a5:83:d8:9b:fb:af:f6:59:8a:73:e6:5d:25:c6:9f:
78:63:44:cd:01:2e:b4:c4:0d:b4:ff:f3:a0:83:e6:5b:a8:b3:
ff:73:1b:a8:51:80:29:64:22:0b:df:53:1f:e7:e9:cc:71:d3:
49:7f:93:87:cc:55:54:06:d9:a6:60:55:88:04:01:ba:1c:10:
ba:09:28:6b:f7:3a:59:c4:39:37:5c:2e:95:ff:4d:e4:e3:bc:
78:02:cc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:09:46 2026 by rpki-client