Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
File: 3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft (raw, json)
Hash identifier: Vtl0U58ECtA2+62tKMw+GHKg8zhRh3phlf9Y/6onzCw=
Subject key identifier: CF:75:42:A4:60:BD:41:72:DA:A9:C3:33:2B:5E:8E:86:0B:E2:0E:32
Authority key identifier: DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43
Certificate issuer: /CN=deb046b6e309e9a866522c2a40c66ffc42fbb843
Certificate serial: 01A0C4449B5389B9E18598354B314BBE5BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 14:00:25 +0000
Manifest this update: Mon 21 Sep 2026 14:00:25 +0000
Manifest next update: Tue 22 Sep 2026 14:00:25 +0000
Files and hashes: 1: 3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl (hash: 5ZTRCHbof87i3fvPeuYYIKbgfwGq01M78s21bxeYkQ4=)
2: cQu8PWE2ED6TGgN91J-oSiBaGLU.roa (hash: FGQyS1Z2RCfk2kbunFiNxKz2rH/BrfGjCFskroiMdcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:9b:53:89:b9:e1:85:98:35:4b:31:4b:be:5b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb046b6e309e9a866522c2a40c66ffc42fbb843
Validity
Not Before: Sep 21 14:00:25 2026 GMT
Not After : Sep 22 14:00:25 2026 GMT
Subject: CN=cf7542a460bd4172daa9c3332b5e8e860be20e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4f:db:41:aa:72:69:56:99:cb:89:6a:27:36:
23:b9:aa:c6:6c:68:90:ab:40:52:ba:68:3a:98:c1:
da:d3:2e:da:ae:99:26:cd:46:8f:75:b0:0f:99:3f:
51:06:b0:b7:49:5e:82:ee:3c:1d:a8:6a:82:a1:a1:
53:99:a0:ee:4d:a3:27:2b:c1:6f:e8:85:ea:05:86:
07:7c:e7:17:3f:2a:fa:12:17:08:56:ba:88:2d:9a:
6b:5d:87:32:b6:b5:8e:66:93:41:96:2f:55:38:94:
fc:71:d1:04:70:c6:a5:83:95:73:1b:df:b3:47:31:
ad:60:41:0b:9f:e7:7d:ce:e1:b1:f6:56:6c:69:01:
47:69:ef:51:f4:6f:ce:f7:f4:35:44:c3:1a:5c:1d:
00:bf:25:30:6e:bd:79:bf:9e:d6:6d:d2:15:cb:2b:
5d:39:e0:a4:22:98:75:3e:02:3d:7a:13:9e:8e:64:
e1:64:be:e0:f4:a4:72:fc:66:37:0f:ee:f9:38:6e:
ef:5d:57:9c:14:61:bc:3f:e6:23:c6:c3:33:6c:f0:
cb:5a:be:2a:05:90:3b:d8:28:f4:e0:e3:74:c9:fe:
89:4b:c7:68:af:16:0f:5c:24:39:78:92:2e:24:e3:
24:d5:8b:0d:06:91:b5:ce:c4:9f:d5:3d:c7:70:6f:
88:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:75:42:A4:60:BD:41:72:DA:A9:C3:33:2B:5E:8E:86:0B:E2:0E:32
X509v3 Authority Key Identifier:
keyid:DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f2:4a:30:32:16:4a:47:32:0a:33:76:46:c0:e0:6a:0a:dc:
d5:6f:3c:2b:c1:28:0f:21:5f:35:4a:f8:47:4f:8a:7c:7e:9a:
aa:bb:d5:de:ea:6b:28:8a:86:26:a4:1b:fd:c2:55:e5:11:bc:
ce:5f:c7:46:4b:73:11:16:a8:11:48:c3:ca:df:33:12:36:89:
99:83:92:b3:c3:6c:15:b5:a9:00:26:b2:57:ea:78:1a:01:07:
89:91:68:48:a6:66:b3:3d:4a:ea:7c:5a:ba:09:57:3c:3a:1b:
a0:45:f4:0e:9d:12:f4:f4:bc:44:0e:85:72:da:80:cd:e9:49:
68:23:d9:e3:4d:37:70:a0:c7:19:82:b6:95:1a:5c:4b:e2:69:
c9:a3:b2:e8:63:f8:f4:79:3f:3e:79:c7:21:2a:a7:d3:6b:cd:
f6:65:29:48:6d:3b:e5:2d:44:96:bc:bd:54:1e:39:f9:59:13:
19:5b:1d:57:b9:2f:65:ed:e1:d8:8e:7c:2e:87:49:f7:9b:0a:
ca:6a:3d:a6:21:23:43:f6:f1:a5:18:ff:a8:ef:4e:ce:0e:b2:
ed:a9:56:fb:7c:61:2e:aa:4d:04:ef:7e:42:00:63:18:67:68:
d1:7e:e4:5a:b4:89:85:fd:ba:7e:b7:ab:cb:97:fc:cf:c3:72:
72:8f:8b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:14:21 2026 by rpki-client