Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/3gKSn1rIw0n-qYVSnBcU58yVz80.mft
File: 3gKSn1rIw0n-qYVSnBcU58yVz80.mft (raw, json)
Hash identifier: SSeWEoGhnimrp0Al835nwyD5q/9wOVcjMrHavP5WQlU=
Subject key identifier: 30:0E:07:03:57:4E:D3:BE:AF:B5:BA:03:02:7F:8D:92:14:C6:47:C2
Authority key identifier: DE:02:92:9F:5A:C8:C3:49:FE:A9:85:52:9C:17:14:E7:CC:95:CF:CD
Certificate issuer: /CN=de02929f5ac8c349fea985529c1714e7cc95cfcd
Certificate serial: 01A0C66ABE54236B669C848AFA9F3AB9F5EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gKSn1rIw0n-qYVSnBcU58yVz80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/3gKSn1rIw0n-qYVSnBcU58yVz80.mft
Manifest number: E0
Signing time: Tue 22 Sep 2026 00:01:19 +0000
Manifest this update: Tue 22 Sep 2026 00:01:19 +0000
Manifest next update: Wed 23 Sep 2026 00:01:19 +0000
Files and hashes: 1: 3gKSn1rIw0n-qYVSnBcU58yVz80.crl (hash: 1oj4PSOTTwxWJLCbqJHaA2GwXxBxnYP5ZZ/hqXxvYT0=)
2: qt1X8cd4EEdSt0Ko4GKZetgm0U8.roa (hash: QOME3Vz+1BFTr6N1pPVdoLgRzF0h3H4cA0/YeWP3aH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/3gKSn1rIw0n-qYVSnBcU58yVz80.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/3gKSn1rIw0n-qYVSnBcU58yVz80.mft
rsync://rpki.ripe.net/repository/DEFAULT/3gKSn1rIw0n-qYVSnBcU58yVz80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:be:54:23:6b:66:9c:84:8a:fa:9f:3a:b9:f5:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de02929f5ac8c349fea985529c1714e7cc95cfcd
Validity
Not Before: Sep 22 00:01:19 2026 GMT
Not After : Sep 23 00:01:19 2026 GMT
Subject: CN=300e0703574ed3beafb5ba03027f8d9214c647c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e3:67:5a:93:f1:42:cc:2b:1c:e7:ec:b4:d8:
0a:0e:0d:28:5c:36:ac:b6:8c:4c:f9:a1:98:02:31:
65:79:55:37:69:0b:b4:c5:9a:31:be:5f:92:0a:81:
19:64:53:89:4f:92:25:7c:d5:04:62:50:a5:1f:ce:
df:77:6c:d1:b4:5f:44:89:ce:de:c2:dc:46:70:97:
af:af:64:99:5d:f8:38:cc:df:01:43:79:f4:88:b7:
6c:78:9b:59:00:53:4a:88:2a:22:24:0f:17:89:70:
4b:70:87:54:83:fb:64:66:7b:d0:b4:23:3a:58:ae:
4e:50:59:30:7b:6f:0c:b0:1c:2b:6f:50:ba:c0:7a:
fc:53:f9:4a:7a:78:ad:d7:97:3d:f5:cc:c2:aa:45:
e9:39:56:6a:5b:9b:0f:59:68:73:da:13:54:50:b2:
f7:9d:68:cd:65:82:8d:1e:12:30:af:9a:4e:19:ec:
a5:f2:ba:9c:9d:97:14:45:29:f4:ff:e5:28:3f:99:
1f:8e:f9:e2:e6:80:37:03:2f:9b:77:8b:a5:f7:72:
89:3c:a3:95:f9:d8:81:f2:0b:e8:7a:08:e6:ad:4d:
b6:cb:ec:70:a1:7b:fa:ea:e0:10:12:2d:db:05:87:
0d:6c:bc:77:27:6d:e9:30:69:dd:ac:35:7a:bd:9f:
ac:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0E:07:03:57:4E:D3:BE:AF:B5:BA:03:02:7F:8D:92:14:C6:47:C2
X509v3 Authority Key Identifier:
keyid:DE:02:92:9F:5A:C8:C3:49:FE:A9:85:52:9C:17:14:E7:CC:95:CF:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gKSn1rIw0n-qYVSnBcU58yVz80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/3gKSn1rIw0n-qYVSnBcU58yVz80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/3gKSn1rIw0n-qYVSnBcU58yVz80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:92:3e:fb:cc:03:f8:dd:fe:6f:34:06:ee:09:47:21:43:ec:
b4:78:cd:cb:11:da:d1:8c:ef:a4:e7:2c:86:1b:39:cd:91:b2:
c8:2f:b6:64:26:06:83:13:c2:6e:f7:4c:7b:ec:10:a0:30:bb:
16:6f:eb:46:ce:97:fb:40:ad:a4:11:49:ed:87:09:4b:a4:ac:
93:eb:4e:44:f2:54:39:89:84:8c:7d:73:fa:2b:09:16:a2:4d:
2f:b1:40:d6:90:69:69:e9:11:fa:52:32:ee:47:5a:e1:f1:65:
09:1d:d6:f4:59:e7:4a:48:c8:71:4e:28:24:0d:1f:94:51:0f:
8c:2b:62:c5:b1:59:6a:7a:ab:90:62:42:19:28:38:a9:ef:84:
38:d7:dd:3a:84:4c:84:a1:67:b9:7a:9f:a1:22:75:5c:58:ba:
27:9a:2a:49:ef:73:5b:36:9b:9c:ad:da:71:8e:24:d2:80:88:
bd:c7:a6:44:fe:e3:0b:a7:3b:18:47:22:c3:e8:53:0b:b3:e8:
89:de:9a:7c:48:b5:32:11:3e:83:6f:dd:0a:6b:fa:46:1d:40:
f8:8b:e2:d2:ed:02:c9:10:28:74:8b:e2:c4:5a:23:bb:f5:a5:
e7:da:e3:d6:61:3e:1c:0c:29:19:d3:1a:a7:06:08:8f:6e:78:
dd:0f:2d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:08:27 2026 by rpki-client