Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/2a1d35-6e31-40e6-94b4-4ac856a8182d/1/3YXca2FDoX_rSYIOpSAEiVj0itw.mft
File: 3YXca2FDoX_rSYIOpSAEiVj0itw.mft (raw, json)
Hash identifier: ztUYDhuPFfwJz4CxXvX3q6PlcOa64Vxd0Pzds/+sZXA=
Subject key identifier: EA:15:A8:D4:C6:B4:62:5F:B6:0E:E2:29:3A:FE:60:23:1A:EF:09:E2
Authority key identifier: DD:85:DC:6B:61:43:A1:7F:EB:49:82:0E:A5:20:04:89:58:F4:8A:DC
Certificate issuer: /CN=dd85dc6b6143a17feb49820ea520048958f48adc
Certificate serial: 01A0C2FB775AAB8E2054EA8CC4B87CBEBA19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YXca2FDoX_rSYIOpSAEiVj0itw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/2a1d35-6e31-40e6-94b4-4ac856a8182d/1/3YXca2FDoX_rSYIOpSAEiVj0itw.mft
Manifest number: 14FF
Signing time: Mon 21 Sep 2026 08:00:55 +0000
Manifest this update: Mon 21 Sep 2026 08:00:55 +0000
Manifest next update: Tue 22 Sep 2026 08:00:55 +0000
Files and hashes: 1: 3YXca2FDoX_rSYIOpSAEiVj0itw.crl (hash: JO2tJqzYvhDCMG4qAz3AoLtvwIbTKM1sY/sGqh/4ops=)
2: BsyNzVaxxAwnI04Dd9aOhMe6ucE.roa (hash: 0aNXoEKl0ws+Toia/ObhW+i07V56stDq9dLrY8oS6mU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/2a1d35-6e31-40e6-94b4-4ac856a8182d/1/3YXca2FDoX_rSYIOpSAEiVj0itw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/2a1d35-6e31-40e6-94b4-4ac856a8182d/1/3YXca2FDoX_rSYIOpSAEiVj0itw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3YXca2FDoX_rSYIOpSAEiVj0itw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:77:5a:ab:8e:20:54:ea:8c:c4:b8:7c:be:ba:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd85dc6b6143a17feb49820ea520048958f48adc
Validity
Not Before: Sep 21 08:00:55 2026 GMT
Not After : Sep 22 08:00:55 2026 GMT
Subject: CN=ea15a8d4c6b4625fb60ee2293afe60231aef09e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3d:66:20:eb:5b:8c:9f:65:8b:e7:cf:31:9b:
63:c1:e4:e8:97:28:14:66:18:7b:fe:78:9a:16:5c:
46:55:b4:2f:1a:cd:b2:c8:cb:7a:55:92:8b:db:2e:
15:c4:af:0c:0f:28:d2:5a:bd:91:55:0a:e0:d3:be:
e0:9f:b7:d0:40:ee:60:26:dc:b4:ab:1b:5c:ff:9d:
98:4b:6d:8d:9c:41:a0:91:05:cc:39:bf:eb:84:52:
bc:47:cb:e1:0e:ca:25:16:c8:d6:4b:06:67:fd:4c:
86:1d:29:ae:73:05:26:9a:ad:4a:ae:97:01:0e:39:
07:2a:f0:c5:1b:81:02:c2:27:65:68:18:81:84:c0:
1f:d8:da:d1:5f:bc:0f:d5:98:e4:7a:cc:45:42:a6:
2a:cf:61:3a:f9:0c:73:be:7a:1e:b4:a1:ac:ba:e6:
70:0e:04:c2:95:3b:44:96:8d:f0:37:08:94:b5:1a:
a1:13:57:20:11:e8:c2:ab:84:a8:be:9b:6e:dd:b4:
74:ed:00:c0:fb:17:79:f1:0e:a3:88:88:76:01:00:
80:86:79:b0:09:2b:85:23:dd:cd:d2:94:70:a5:7f:
f3:e4:e8:88:48:80:1b:d8:97:c7:20:49:59:f7:40:
9a:23:bb:ed:51:d8:56:b0:15:ae:66:70:83:2b:b7:
4a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:15:A8:D4:C6:B4:62:5F:B6:0E:E2:29:3A:FE:60:23:1A:EF:09:E2
X509v3 Authority Key Identifier:
keyid:DD:85:DC:6B:61:43:A1:7F:EB:49:82:0E:A5:20:04:89:58:F4:8A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YXca2FDoX_rSYIOpSAEiVj0itw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2a1d35-6e31-40e6-94b4-4ac856a8182d/1/3YXca2FDoX_rSYIOpSAEiVj0itw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2a1d35-6e31-40e6-94b4-4ac856a8182d/1/3YXca2FDoX_rSYIOpSAEiVj0itw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:8d:57:31:27:12:63:01:3e:7e:79:c1:b8:b6:22:19:3d:28:
7f:9f:22:22:92:3b:56:c3:2f:ab:0d:6b:60:2c:0d:00:9f:9c:
4e:fc:ae:9e:21:81:4a:fa:df:fc:86:3e:99:0d:92:df:51:d8:
c7:3d:c4:60:2a:5d:b9:e1:50:65:52:4b:c5:70:ab:6c:af:6b:
69:a6:ad:bd:76:37:93:9e:87:79:27:24:26:6d:24:7d:8b:b2:
b7:71:ab:6a:51:29:89:1a:a6:a3:8e:0a:03:bb:83:5e:c3:75:
7b:71:76:22:0a:70:9f:c1:36:b9:bb:57:6b:fb:6c:84:2b:fb:
ee:41:01:89:e0:a1:c2:89:1d:d8:f0:ab:8c:db:cd:6d:0a:a0:
15:4d:a2:6f:58:1e:3e:1f:98:b6:08:cb:5a:a6:89:4e:ff:43:
27:02:11:b3:d1:4b:43:7b:94:d6:d7:62:cf:80:62:8d:e0:82:
3e:b2:22:79:be:b8:63:4c:45:4a:bf:b1:c0:22:5c:99:e8:31:
13:ff:9b:f2:eb:31:2e:cd:27:99:1a:0e:9f:64:9c:be:9a:e2:
18:aa:9e:d2:16:d4:7a:e0:bf:0a:d3:da:e8:64:94:a0:b4:3b:
9d:90:7a:07:7b:f9:e0:fd:4a:d6:3c:cc:e2:96:0e:1f:72:52:
f0:ff:be:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:42:17 2026 by rpki-client