Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
File: 3O8ZrfppRVibwtEAFU5aWMRJihQ.mft (raw, json)
Hash identifier: DXWwObSWlwdNj2JxnIe1zcfI9TSEBFZ6RwGRF81Ezn8=
Subject key identifier: B5:21:BE:2D:C1:44:52:3F:43:57:C5:13:02:C8:99:11:A8:94:FF:B3
Authority key identifier: DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
Certificate issuer: /CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Certificate serial: 01A0C557AD0BBDDD1F2B32142DAD20E35404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
Manifest number: 1873
Signing time: Mon 21 Sep 2026 19:00:52 +0000
Manifest this update: Mon 21 Sep 2026 19:00:52 +0000
Manifest next update: Tue 22 Sep 2026 19:00:52 +0000
Files and hashes: 1: 3O8ZrfppRVibwtEAFU5aWMRJihQ.crl (hash: IbK8UgVNEhLZVhLDYP8mHcQt0reY18wzT7gHyQvI/xg=)
2: itoTic7G_-G7jco2XW4Z1NEcbCw.roa (hash: +uznw2maAhBkp9yoIBUiVjV+pSA2CpeiVnSVCi83O3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:ad:0b:bd:dd:1f:2b:32:14:2d:ad:20:e3:54:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Validity
Not Before: Sep 21 19:00:52 2026 GMT
Not After : Sep 22 19:00:52 2026 GMT
Subject: CN=b521be2dc144523f4357c51302c89911a894ffb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fd:41:60:c8:04:64:17:c9:f9:87:9c:8c:cc:
d6:41:cd:86:1d:39:cc:69:d7:c1:e8:17:4c:0c:16:
c6:52:db:5c:29:b3:16:fd:90:a9:37:21:fb:61:02:
67:d2:71:a8:3a:db:fa:44:7f:98:12:be:44:65:ff:
29:f1:9d:22:61:07:54:03:52:f3:0c:de:19:e8:69:
a6:06:0b:cb:54:ff:f0:65:8a:ad:67:23:c5:c9:72:
77:cc:3e:32:ab:90:97:15:a1:f8:c4:ed:69:15:58:
5b:3f:d7:59:04:f2:27:b4:cc:24:2c:06:d3:03:51:
6b:ee:06:08:90:ec:71:62:09:8c:45:c9:1d:bf:bf:
2f:c9:eb:37:2b:c5:0a:ed:17:19:b8:4a:d6:ad:3e:
7e:7c:9a:73:bc:60:41:0b:6a:fa:77:7e:4b:0e:bf:
ad:ed:96:f7:f8:f9:88:cc:7b:01:4e:f4:92:02:2b:
24:c2:b9:f0:25:fd:ca:2c:ed:7e:96:d2:f0:f5:6d:
f8:ce:d0:a4:b9:51:d3:06:3b:97:98:5e:f1:c2:3c:
cc:95:5c:1a:da:7d:1e:58:cc:49:c9:b1:a7:61:9c:
36:b2:49:80:44:d6:74:31:da:50:1d:68:83:a5:be:
df:3b:05:37:cf:d0:02:bc:81:02:5d:a2:20:42:33:
7c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:21:BE:2D:C1:44:52:3F:43:57:C5:13:02:C8:99:11:A8:94:FF:B3
X509v3 Authority Key Identifier:
keyid:DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:4f:99:75:5f:24:fe:b1:20:18:e4:ea:94:86:4f:31:15:64:
04:14:fc:ce:af:a6:bd:41:8a:6c:e5:b7:06:40:d0:42:18:27:
ac:44:eb:7e:0a:34:fc:7c:e3:4c:af:a0:9e:bc:a0:7d:9e:aa:
2d:96:db:4e:7e:f9:0f:48:b3:65:fe:01:98:e6:39:2c:45:a5:
c3:2e:be:4c:41:b2:08:e4:cc:45:e4:79:8e:8e:da:fa:f0:ef:
09:55:04:d5:3f:ed:70:2a:fd:65:64:18:a8:15:ab:8f:d5:41:
0f:0f:fe:06:ce:ea:0e:4d:be:39:ef:42:41:7b:e1:b3:53:d4:
24:a2:8c:55:21:eb:a5:e4:fc:d8:bf:4b:66:6d:74:e3:1b:9a:
a7:45:a6:3d:b0:82:80:bc:dc:34:15:f8:0d:f3:f8:42:9e:d7:
c1:08:d3:af:c8:31:e0:da:38:2e:45:21:97:62:b8:71:57:2a:
cc:e3:c2:69:15:92:f6:28:e8:66:04:23:f0:bc:ef:2c:22:af:
e2:46:b4:48:ea:e4:76:7e:ef:8f:f4:0f:35:12:40:4f:96:b3:
50:cf:87:bb:30:9a:09:07:ff:82:a0:41:35:65:ee:5e:28:4c:
1c:42:52:ba:83:a5:d1:80:f5:a0:68:5d:85:cd:9b:b7:68:2d:
44:07:9f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:28:52 2026 by rpki-client