Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
File: 3Os5Sq4INtNDQfetMZSUdlq1awc.mft (raw, json)
Hash identifier: 4OIdTKkatG/Pws1qZFZzq+rjH82fXf2W25vdf3vpRE0=
Subject key identifier: 1F:D2:57:7D:E2:E6:8F:21:00:E4:F9:11:01:18:27:57:61:48:C7:45
Authority key identifier: DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
Certificate issuer: /CN=dceb394aae0836d34341f7ad319494765ab56b07
Certificate serial: 01A0E81D1FD11F6E6E221DB20D06AE85F734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
Manifest number: 061D
Signing time: Mon 28 Sep 2026 13:03:37 +0000
Manifest this update: Mon 28 Sep 2026 13:03:37 +0000
Manifest next update: Tue 29 Sep 2026 13:03:37 +0000
Files and hashes: 1: 3Os5Sq4INtNDQfetMZSUdlq1awc.crl (hash: 5d6H18hchO/4BUOayYnvs6trg2cWzS9Tpsfow5kloyg=)
2: RwZ9F-pdINA65vVgGDGApgyfhto.roa (hash: eZaWhNjBT1qB/UTcePoZ/N6A45ILygXPpUHwGv0YfOw=)
3: SFQQoJg97TGHjrgzii8KpRT8xfc.roa (hash: iv/LMo2P0Oa29pglyapnh+eYTODXjJUku1HA9y8udbA=)
4: sOAijZZYpwie6wu7M4Wlx6kerB4.roa (hash: H5sz+pWO9A1d2Sg5RORtCUGJSuWJhTFvhX/iRzLdtRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 13:03:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:1d:1f:d1:1f:6e:6e:22:1d:b2:0d:06:ae:85:f7:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dceb394aae0836d34341f7ad319494765ab56b07
Validity
Not Before: Sep 28 13:03:37 2026 GMT
Not After : Sep 29 13:03:37 2026 GMT
Subject: CN=1fd2577de2e68f2100e4f911011827576148c745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:42:89:a7:c9:dc:35:22:61:62:7b:4f:b3:df:
91:af:5c:7d:73:29:a5:7c:c4:cb:51:32:a1:1d:96:
e3:be:2b:e3:6f:f0:e8:73:b9:e9:49:25:67:4e:a3:
07:db:c5:8a:68:21:21:f5:3b:3e:90:34:34:04:d1:
ba:17:e4:2d:f0:28:c4:93:ca:6e:d4:c4:0a:84:d8:
f7:af:45:04:d5:31:25:3a:94:8d:f2:d6:fa:42:5e:
b2:a3:31:5a:20:99:39:53:f2:38:5a:ac:18:3a:eb:
ad:27:62:87:89:40:d5:6e:38:2c:4d:e2:6a:8c:97:
2c:5d:58:fa:65:1a:c4:fb:a2:03:86:f7:82:ea:40:
7a:49:a9:94:f5:2d:2d:46:95:e0:66:f9:db:61:89:
38:38:d5:09:2b:b8:24:04:35:07:7e:d8:a9:73:35:
c4:ed:29:bf:ee:5f:f5:e6:ef:32:28:3d:2a:34:67:
1b:4a:c7:50:b3:df:f5:74:be:20:74:99:8e:29:78:
a2:dd:24:bb:bb:17:24:f3:94:e0:0f:c9:cb:0a:21:
83:81:09:d9:d1:9a:ae:39:43:b8:c6:68:45:60:b9:
79:af:6f:a3:c4:59:bd:27:8d:21:9d:ba:2e:43:77:
3e:e8:64:14:7b:5e:0a:0a:98:3c:b3:9e:45:c1:82:
83:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D2:57:7D:E2:E6:8F:21:00:E4:F9:11:01:18:27:57:61:48:C7:45
X509v3 Authority Key Identifier:
keyid:DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f2:06:1a:09:24:2e:84:2d:44:4d:16:40:57:e9:b0:e1:20:
6b:d0:d8:07:a7:f4:3e:e0:5d:bf:ef:2f:3d:12:4e:b5:42:7b:
49:06:0c:9b:56:88:86:0b:35:bc:e0:50:c0:27:b1:36:ba:98:
6e:ed:c2:07:0a:a2:27:1b:d8:a3:dd:b9:d0:62:11:d8:1e:3f:
39:eb:2f:09:4d:a9:34:f7:60:e0:b2:4a:19:e1:5b:56:77:f5:
50:17:1c:25:29:20:0f:ab:71:78:99:1f:f8:eb:8c:dd:d0:18:
43:b2:07:65:b2:a9:2b:51:78:fe:f3:29:1c:3f:83:59:17:ee:
55:72:8c:bc:3f:57:da:55:d4:21:2d:2d:a7:e2:6b:18:55:d4:
f3:ed:3c:a0:e5:e9:dd:d7:70:ac:e6:05:89:e1:c3:f5:4e:c9:
bc:c0:23:a4:44:0a:fb:d2:40:eb:cb:c9:ea:1f:39:4d:86:21:
6c:43:b7:c6:bc:97:6d:d0:ac:0a:84:ea:57:f3:95:51:4e:ed:
9b:a1:79:d1:cf:7f:75:d0:8c:dd:7f:fa:8c:96:dd:85:2d:72:
0a:fa:e3:96:e2:44:64:f4:72:5b:9f:e3:af:7f:5f:0e:c3:fc:
d0:90:3b:b5:77:54:78:87:c2:60:c5:29:d4:a4:38:79:ed:73:
16:b5:6b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:16:46 2026 by rpki-client