Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
File: 3ciCMsB94s3Llur551FVC6pmxYg.mft (raw, json)
Hash identifier: dRDyPtQD09/4V0L1QJi7DVlAclOtH+G9vmNB2qpSSM4=
Subject key identifier: 24:D1:49:50:91:6C:24:E8:D2:CD:7F:24:12:96:97:FE:44:88:07:F4
Authority key identifier: DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88
Certificate issuer: /CN=ddc88232c07de2cdcb96eaf9e751550baa66c588
Certificate serial: 01A0C8FD87DBE0F749114C5F5D3C660BA4E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
Manifest number: 11CA
Signing time: Tue 22 Sep 2026 12:00:53 +0000
Manifest this update: Tue 22 Sep 2026 12:00:53 +0000
Manifest next update: Wed 23 Sep 2026 12:00:53 +0000
Files and hashes: 1: 3ciCMsB94s3Llur551FVC6pmxYg.crl (hash: kDUYLILRjPy1fiEbhvqgVkihDH9rbhitD48x9PYRfCg=)
2: Hfq2hHkukqsFqywTjHsioREmNS4.roa (hash: paBdvdH/DYPPTu1rMzb8b23iJRlSlCeY0XMWLizu13w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fd:87:db:e0:f7:49:11:4c:5f:5d:3c:66:0b:a4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc88232c07de2cdcb96eaf9e751550baa66c588
Validity
Not Before: Sep 22 12:00:53 2026 GMT
Not After : Sep 23 12:00:53 2026 GMT
Subject: CN=24d14950916c24e8d2cd7f24129697fe448807f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:03:f4:7f:62:14:b9:86:06:5e:fc:66:88:c8:
c6:be:2a:2a:84:4b:c2:53:6e:8e:ca:ca:28:0a:af:
c6:10:6f:ea:95:50:a6:eb:cd:09:04:bd:a6:57:21:
5c:60:81:eb:3c:86:75:3d:87:64:63:c5:e4:ed:b9:
9e:2c:bc:e5:55:33:c3:1e:2f:62:03:99:22:ab:e1:
38:e6:37:84:6a:e0:91:5e:70:f9:65:29:d4:4d:ff:
66:96:31:53:d3:25:9f:50:5d:07:fc:e5:48:2a:91:
83:47:ac:a3:10:c5:62:cf:bc:be:8c:ab:31:26:59:
dc:81:6b:76:e7:0d:68:da:9e:73:6a:2c:48:84:38:
0c:f8:db:c5:a9:26:2d:f9:c1:f0:5d:3e:ff:21:50:
ed:93:12:87:4a:3f:23:ee:fe:3e:d5:b8:b7:95:64:
e8:eb:c7:c1:ba:b4:c0:78:78:20:71:57:0d:b6:b8:
6c:e2:57:4a:0b:5c:42:97:02:53:35:41:29:6a:1e:
67:59:02:c6:c8:c9:c3:15:65:04:de:52:b7:0a:9e:
63:94:0e:4f:c5:e2:97:f0:8e:57:1a:0d:fe:1c:24:
e5:33:a3:1b:05:27:80:6e:b0:b0:4f:8c:8c:7f:02:
c1:26:68:f2:9c:18:47:c9:4e:b1:c4:f2:8c:d4:a6:
86:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D1:49:50:91:6C:24:E8:D2:CD:7F:24:12:96:97:FE:44:88:07:F4
X509v3 Authority Key Identifier:
keyid:DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:5c:9d:6f:b6:2e:b1:1a:8c:fd:14:03:22:1d:90:ea:d2:03:
64:39:5f:a7:4f:36:a7:f6:78:7a:c4:9e:03:40:68:a3:4a:11:
f3:42:59:2a:38:d8:b4:e1:0c:4e:62:71:c7:72:b4:db:6f:32:
6f:d5:18:d6:29:a8:6a:47:8f:ca:6a:88:56:69:45:11:54:87:
d9:f8:59:5c:6d:1d:0a:bb:05:13:87:3e:49:99:6c:62:3e:d6:
08:88:df:b4:fd:34:0d:ea:57:af:b5:e0:b3:5c:a2:fa:88:8b:
7e:69:70:27:3e:3c:37:64:46:fa:f9:e7:83:4e:e8:1e:60:f3:
c4:47:fc:76:0a:65:34:36:ed:ab:49:71:9d:11:41:95:8e:4e:
1a:0b:08:be:03:7d:a1:14:83:3f:7a:23:7f:f8:b3:aa:5c:46:
60:1d:3a:f4:b2:66:b7:85:b0:5e:39:51:4a:27:aa:83:50:37:
75:06:e3:1f:e5:89:a1:bd:86:87:7a:0c:02:5f:24:e3:fe:42:
8b:23:56:f0:6d:46:cd:1d:92:d2:1c:4d:94:32:86:03:7d:78:
f3:f2:ca:c1:d3:f8:9d:27:08:de:cc:d6:b2:2c:52:b7:db:2b:
3f:cc:e2:6f:db:30:00:a4:bb:af:35:55:62:e3:ba:bc:7e:7b:
af:4f:b2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:02:15 2026 by rpki-client