Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
File: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft (raw, json)
Hash identifier: PIa+pWtJklUevK9AFicyiklRhuxwR3FJ+PKo3YLx8eE=
Subject key identifier: FF:FB:8D:D6:7C:0A:45:F5:74:4C:70:E9:72:20:0A:94:6B:B5:26:BF
Authority key identifier: DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
Certificate issuer: /CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Certificate serial: 01A0C368ED8C4A391301ADA1E5FD22C7C058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
Manifest number: 137B
Signing time: Mon 21 Sep 2026 10:00:28 +0000
Manifest this update: Mon 21 Sep 2026 10:00:28 +0000
Manifest next update: Tue 22 Sep 2026 10:00:28 +0000
Files and hashes: 1: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl (hash: 3oN+Hzs9hNLITzWUgL6h9q36M06qUeUM6cJwk3/bIAc=)
2: f8-DGeBP35-N3w51zaELLHTWQhA.roa (hash: p45bmNjagtDF3HgTTRtJcWFVXkd0k7P3PfW1B+YfWgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:68:ed:8c:4a:39:13:01:ad:a1:e5:fd:22:c7:c0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Validity
Not Before: Sep 21 10:00:28 2026 GMT
Not After : Sep 22 10:00:28 2026 GMT
Subject: CN=fffb8dd67c0a45f5744c70e972200a946bb526bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4c:39:f9:c6:98:13:52:c6:86:05:60:82:d7:
ca:f1:3c:52:26:9a:4f:f2:4b:e6:75:42:b1:96:c1:
a6:d0:57:0c:35:93:bf:dd:5a:b8:cb:03:cc:6a:ed:
6c:8b:cd:b8:7e:50:c1:a8:b6:95:66:a5:00:e9:61:
d7:c0:8e:2a:6b:3c:a6:1f:16:a8:f5:da:ab:c6:72:
cf:cd:0f:63:df:af:5f:5d:1a:ad:3c:0f:39:4f:71:
7d:9b:02:37:a5:63:99:63:ab:85:b0:3e:a9:a4:43:
f8:c6:66:cd:78:8b:f8:d6:47:84:74:e7:6a:ec:38:
32:f6:a0:f6:5f:65:c3:8e:71:a7:95:64:3a:21:3a:
03:d5:e4:80:78:1b:e3:5b:7a:a9:1a:ed:eb:af:24:
90:14:1a:40:ba:59:42:9c:32:8e:3d:a6:8c:40:f7:
bf:00:be:45:b6:59:34:eb:0f:d4:64:97:fe:ed:0d:
9c:65:4c:03:08:23:35:f7:4b:ac:d0:73:0d:e5:04:
7c:b2:3f:7a:8a:5d:cf:84:08:b5:fb:aa:7f:ef:61:
5d:f0:2f:e4:13:e0:ea:0a:69:fd:ba:03:a6:6e:39:
ea:a1:ba:e6:4d:a0:d3:44:2e:09:9b:d6:0e:14:fc:
59:1c:51:56:94:35:20:1b:13:46:ee:78:00:d5:d2:
f2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FB:8D:D6:7C:0A:45:F5:74:4C:70:E9:72:20:0A:94:6B:B5:26:BF
X509v3 Authority Key Identifier:
keyid:DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:59:21:90:09:23:9e:6d:9e:94:76:34:a6:08:ae:2b:40:41:
7f:12:3f:1e:26:bd:4c:c5:00:3c:28:2f:4f:ae:1e:16:a0:e3:
a9:04:bd:3a:07:83:f6:4d:5c:26:3c:dc:bf:51:5a:0b:bb:a8:
00:e4:19:9e:72:3a:32:f3:6d:34:91:e5:9e:61:3c:f5:5c:d9:
a9:6c:af:c9:9d:c5:35:e0:fc:55:5b:46:ae:01:dc:80:0e:f2:
ac:09:75:62:c9:83:7b:24:65:65:e9:70:5a:d2:12:bd:44:cd:
3d:27:f5:da:8c:8d:7c:bb:b4:3f:bc:9a:5e:fc:85:d7:5b:7b:
fb:2f:33:8f:34:06:ef:2c:0e:7a:b7:74:c2:7c:9b:04:e7:b6:
55:77:aa:fe:e2:0e:e2:27:f5:93:f8:4b:bf:fa:03:a2:b0:71:
88:7c:c7:61:ac:59:08:e8:0b:b6:83:ab:8b:eb:bd:21:00:24:
f3:ef:b6:bc:e7:55:35:97:1a:70:19:48:a3:8a:8f:b6:1e:d2:
80:0e:75:28:85:9f:c8:5f:2e:75:36:e0:cf:eb:a8:c8:d1:92:
18:ec:e3:d7:21:d7:83:1c:89:52:92:db:dc:6d:25:9a:d5:70:
41:2f:7b:e7:28:54:b3:4b:9d:53:f4:d8:41:b8:99:79:d6:03:
66:bd:bf:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:05:54 2026 by rpki-client