Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/68ab12-dd52-481e-86a6-5b88bde528ff/1/_RuNPQUHZm87sDyaWGV9xSl1fZc.mft
File: _RuNPQUHZm87sDyaWGV9xSl1fZc.mft (raw, json)
Hash identifier: Yu1d/6p3n9esT8Jyrx923CrlG3VNr/wHX6zGq2kWGbg=
Subject key identifier: A7:C1:23:8A:70:B8:82:D2:E8:36:94:23:E8:04:59:E5:F2:0A:A7:3F
Authority key identifier: FD:1B:8D:3D:05:07:66:6F:3B:B0:3C:9A:58:65:7D:C5:29:75:7D:97
Certificate issuer: /CN=fd1b8d3d0507666f3bb03c9a58657dc529757d97
Certificate serial: 01A0EDAF063C6D3636BE29CC74BA225AD8BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RuNPQUHZm87sDyaWGV9xSl1fZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/68ab12-dd52-481e-86a6-5b88bde528ff/1/_RuNPQUHZm87sDyaWGV9xSl1fZc.mft
Manifest number: A3
Signing time: Tue 29 Sep 2026 15:01:05 +0000
Manifest this update: Tue 29 Sep 2026 15:01:05 +0000
Manifest next update: Wed 30 Sep 2026 15:01:05 +0000
Files and hashes: 1: RvRvHV0x6ysxbxULvf_1qstGWqs.roa (hash: s2EDZjdZarn3X1PV3ipDQ4y//AUVQJ/pruUyN3ZV/wo=)
2: YzbLZF0ToPAtbjdb8tZtZBy88eM.asa (hash: JTDOa4hjtdL8/oyK4yg0Bv7JcRJT+zrdH0ws+s0/EA8=)
3: _RuNPQUHZm87sDyaWGV9xSl1fZc.crl (hash: m+ywyaBQJGVdxFfO105CCMR0PWAkjk7hX4tMDRNlx+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/68ab12-dd52-481e-86a6-5b88bde528ff/1/_RuNPQUHZm87sDyaWGV9xSl1fZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/68ab12-dd52-481e-86a6-5b88bde528ff/1/_RuNPQUHZm87sDyaWGV9xSl1fZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_RuNPQUHZm87sDyaWGV9xSl1fZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:af:06:3c:6d:36:36:be:29:cc:74:ba:22:5a:d8:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd1b8d3d0507666f3bb03c9a58657dc529757d97
Validity
Not Before: Sep 29 15:01:05 2026 GMT
Not After : Sep 30 15:01:05 2026 GMT
Subject: CN=a7c1238a70b882d2e8369423e80459e5f20aa73f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bf:d6:70:50:b1:a5:01:6a:c8:b2:c2:36:5a:
79:21:44:18:25:8d:1c:ff:a0:38:4d:a1:a3:b2:14:
e6:09:57:a7:4d:47:7b:c7:f7:0c:36:1a:e9:bb:a4:
41:70:cc:f8:5e:a8:32:73:25:84:11:db:ba:24:63:
19:27:bd:35:53:a4:f7:03:4b:f1:41:be:04:02:d9:
05:57:94:d3:e6:8e:ff:04:19:d6:39:52:f8:40:b1:
a1:5f:6b:bc:1b:51:e0:89:2c:88:c2:d4:6e:e4:51:
44:5a:c7:ce:cd:e4:7c:47:3e:54:30:a1:cd:2f:29:
28:12:73:c1:58:54:4b:a1:7f:6c:f3:ae:8a:f4:1e:
81:25:16:09:44:b4:89:40:c8:d7:5d:62:ee:38:9b:
4a:63:9a:90:d7:89:4e:f2:32:0d:cb:6c:7d:dc:9f:
b8:e0:5b:82:70:8d:34:b3:a5:0f:6f:8b:b6:03:87:
3e:3d:45:f6:2d:fb:6d:30:30:60:e3:3e:43:4e:36:
a9:97:91:bb:3c:46:cf:f6:85:38:0a:c8:5e:6e:d4:
b8:13:8f:16:0c:4d:12:1b:b0:d8:c9:1b:4d:1b:cf:
5f:43:d8:90:75:3c:db:62:66:db:ac:21:40:13:35:
bc:b8:4e:98:ce:37:0a:a4:e8:28:c9:91:28:54:53:
53:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C1:23:8A:70:B8:82:D2:E8:36:94:23:E8:04:59:E5:F2:0A:A7:3F
X509v3 Authority Key Identifier:
keyid:FD:1B:8D:3D:05:07:66:6F:3B:B0:3C:9A:58:65:7D:C5:29:75:7D:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RuNPQUHZm87sDyaWGV9xSl1fZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68ab12-dd52-481e-86a6-5b88bde528ff/1/_RuNPQUHZm87sDyaWGV9xSl1fZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68ab12-dd52-481e-86a6-5b88bde528ff/1/_RuNPQUHZm87sDyaWGV9xSl1fZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c7:4c:97:70:c1:52:c2:e3:99:8d:dd:d5:df:e3:72:d3:fd:
25:0b:f4:c0:4c:47:cc:20:b4:d5:bd:74:54:57:91:29:76:03:
d5:b9:f0:ff:c6:e8:fd:46:23:c7:ef:bf:4d:92:11:35:38:27:
43:e8:c9:a3:7e:58:e5:d7:6f:b4:ac:e9:2d:2e:ac:67:10:5e:
3e:fc:37:36:3a:e2:ea:01:2c:23:65:57:44:bf:65:59:41:e7:
21:96:bc:c1:82:9c:c5:c3:f3:ce:d1:92:64:13:af:32:93:8f:
72:9d:d0:ac:9a:a6:67:e7:bc:8d:73:90:3c:17:c0:7b:07:b3:
3f:c8:8f:67:ee:2f:a6:ab:f3:7f:0a:d3:04:f4:d1:cc:93:00:
a7:f7:4a:32:48:ac:5b:6f:75:21:37:4c:df:3a:b1:1c:27:79:
12:74:69:79:8a:42:74:ac:1e:01:46:47:5c:a5:a6:cf:e2:cc:
a8:62:7b:9f:53:e6:84:f3:06:ef:23:8c:f2:ef:70:a8:00:db:
40:f5:59:53:88:fa:a0:77:14:cd:56:72:43:65:69:05:48:4e:
7a:a7:08:47:8c:15:7a:39:b9:5a:cd:aa:ed:e5:4e:60:bf:7c:
e4:dc:e5:24:22:37:d3:10:d4:57:bf:0c:84:2d:f7:28:32:17:
26:d8:ee:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 01:54:17 2026 by rpki-client