Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
File: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft (raw, json)
Hash identifier: GSPWwfq3Reu7LsVZRJi9+nKFPHMBqIspV8Wf62dd7OA=
Subject key identifier: B1:8D:F7:61:30:2F:88:AC:EA:AA:BC:F9:82:FF:09:2D:76:C0:51:D7
Authority key identifier: B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
Certificate issuer: /CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Certificate serial: 01A0CB596E8207A922B1900D2E87B8E6FC77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
Manifest number: 1A71
Signing time: Tue 22 Sep 2026 23:00:30 +0000
Manifest this update: Tue 22 Sep 2026 23:00:30 +0000
Manifest next update: Wed 23 Sep 2026 23:00:30 +0000
Files and hashes: 1: QXMTv56aBNAUruAXJC7IVsSmMG8.roa (hash: jId8pBbIUwFi+HQiN7AbLv5/eBeeSyed+4bqRVzluB0=)
2: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl (hash: G031ZCvIczdYAfBvVxu+zmguhmkiv+45ZD97D0bwQuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:6e:82:07:a9:22:b1:90:0d:2e:87:b8:e6:fc:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Validity
Not Before: Sep 22 23:00:30 2026 GMT
Not After : Sep 23 23:00:30 2026 GMT
Subject: CN=b18df761302f88aceaaabcf982ff092d76c051d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4b:04:22:e3:8c:2b:42:28:90:e3:eb:28:03:
6e:3a:c0:26:3c:b1:a3:b4:5f:75:ec:e2:73:2e:aa:
0c:87:b6:f3:74:41:9c:1f:e9:d0:ad:80:11:ee:b6:
01:5d:f3:7b:c1:fd:35:4d:c4:02:4e:ed:86:b9:9a:
98:53:0e:5d:cf:21:75:83:fc:d0:f4:99:4a:6e:e1:
cd:cb:97:eb:5e:b5:52:da:51:6d:b4:63:13:a6:dd:
14:84:85:a4:51:cf:17:0f:87:05:f9:03:f8:2d:d3:
b1:73:38:e9:86:80:fd:ff:8d:9b:67:4b:c9:3a:dd:
f5:3b:0d:36:a6:3a:c5:b8:07:61:91:b1:ab:d4:07:
32:a5:fe:d6:51:9b:4e:28:fd:61:51:46:c2:0b:c0:
9b:42:d1:38:cc:a9:22:5a:52:e2:dd:e8:8f:3a:26:
7e:79:d6:24:7d:16:5f:1f:54:5d:d3:8c:d3:ef:aa:
29:6c:7b:61:b2:1a:20:7c:73:87:8b:30:40:a3:5c:
cd:5c:0d:e6:a0:c3:82:7c:35:e3:93:1a:55:05:7c:
4d:fb:dd:ec:89:c0:22:30:0d:70:f6:de:b1:b7:16:
8a:ea:ba:41:ea:f9:a0:a5:c9:b8:67:36:f8:65:45:
eb:2e:1c:bb:d3:3e:96:5a:81:37:36:92:87:c2:67:
a6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8D:F7:61:30:2F:88:AC:EA:AA:BC:F9:82:FF:09:2D:76:C0:51:D7
X509v3 Authority Key Identifier:
keyid:B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:55:ae:5b:6b:fc:53:0e:fc:14:0f:fe:b9:18:12:63:b1:54:
e5:49:00:6a:b5:bf:dc:cf:f9:c2:70:0d:0e:7a:be:7b:b8:e8:
79:b2:2c:0b:c4:a2:7e:14:35:08:59:64:5f:48:59:35:e4:2f:
59:27:d7:8c:61:e7:fb:70:5f:f1:c4:37:d0:b9:14:f7:c6:d8:
9f:88:a4:0d:24:a9:41:cc:d9:25:b2:f3:ae:e1:40:cd:97:a9:
5f:df:0c:89:b2:16:64:22:b1:6d:26:46:c9:d3:4b:4a:d2:cf:
69:6d:28:d8:8a:80:f5:de:78:af:89:3a:8b:b1:32:42:ca:fb:
01:d8:ef:e7:78:28:37:7f:c0:54:8e:53:6a:e2:1d:4b:03:14:
0c:3b:cb:52:5d:eb:61:80:3a:12:7d:a8:8a:31:7f:be:60:96:
2b:02:3e:73:f0:21:c4:12:1e:de:74:24:b2:bc:44:2a:0a:8e:
ab:22:f3:ef:f0:d5:e3:8f:c8:3f:4a:b1:14:93:df:ef:11:35:
79:49:3e:4c:8a:af:da:fd:3e:45:a7:fc:c8:f8:df:5a:37:1b:
56:d7:da:2b:3f:18:b9:da:92:fa:9c:96:01:c7:c7:58:e2:d1:
fd:4f:63:fc:d8:7c:02:7a:34:8d:29:fb:d9:15:21:0a:be:9e:
c2:8a:75:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:28:47 2026 by rpki-client