Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
File: P3lU2IwK4_Y5hpe_38GVanU-g9g.mft (raw, json)
Hash identifier: s39KzQ4baOQf/6zgqORwCRyBwvH8kwVYOaemC6JmlPw=
Subject key identifier: 58:14:C1:A4:0C:D4:29:FF:B8:59:D7:A1:8D:7F:88:F3:C5:3E:44:E0
Authority key identifier: 3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
Certificate issuer: /CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Certificate serial: 01A0CBC722EE9BBB7606EB6286EA7E2D8E96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
Manifest number: 1A44
Signing time: Wed 23 Sep 2026 01:00:20 +0000
Manifest this update: Wed 23 Sep 2026 01:00:20 +0000
Manifest next update: Thu 24 Sep 2026 01:00:20 +0000
Files and hashes: 1: Jj1TbiCR1nmoQFDDhEUp8Nme5jQ.roa (hash: vEZJZ1EhFYSpfGBedYuhl8hXTejG4aUKraQ3lMQVDzY=)
2: O2XFtNMj5F8lYJUMSubzNUa8Fr4.asa (hash: 67is5rgLKuOUXA0v6cE8sl5V36YTQpNm07lUONgLSRE=)
3: P3lU2IwK4_Y5hpe_38GVanU-g9g.crl (hash: JEnD4+JdLH9FD4lN1mTRw3aKoiw+pwU40igbafX4SQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:22:ee:9b:bb:76:06:eb:62:86:ea:7e:2d:8e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Validity
Not Before: Sep 23 01:00:20 2026 GMT
Not After : Sep 24 01:00:20 2026 GMT
Subject: CN=5814c1a40cd429ffb859d7a18d7f88f3c53e44e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:53:9f:2f:26:f1:ad:7e:99:49:7c:e8:15:7f:
01:a6:71:c4:80:18:89:e5:47:86:d6:dc:be:2e:14:
17:aa:40:4d:b3:e4:d8:0a:c8:d9:27:77:22:ef:b7:
f3:bc:c5:73:2d:8a:84:02:ef:8b:88:6a:9e:2b:3a:
81:3c:5b:f1:ec:d4:f9:a4:2b:6d:ff:ae:31:c0:9f:
6d:6c:00:38:a9:51:92:b7:fd:12:84:a6:d6:34:33:
35:7c:62:bb:a5:d5:25:57:cf:72:f6:08:25:b1:01:
80:89:94:05:63:d0:09:a3:6d:09:92:8c:55:74:29:
b3:d9:41:1e:b9:dd:5b:34:e4:53:05:a0:04:4c:64:
b1:64:72:37:7b:23:92:56:47:a9:84:18:5c:7b:dd:
32:79:f4:5a:a5:09:29:d7:0a:03:f2:15:97:2a:ff:
af:03:25:6e:1c:45:7b:ea:d8:2e:a6:ea:71:cc:33:
f9:f4:26:64:bc:71:48:91:a0:db:d9:21:9e:00:33:
40:33:15:97:2c:d8:33:a0:1a:10:66:02:f7:39:a9:
68:77:d8:67:4f:bb:4e:8e:73:9c:6d:94:34:6f:7d:
64:d5:f5:f1:10:1c:5e:82:4d:ba:5f:a9:82:c2:5d:
6c:83:9f:0f:5a:21:79:9b:28:76:6c:68:21:de:b8:
9a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:14:C1:A4:0C:D4:29:FF:B8:59:D7:A1:8D:7F:88:F3:C5:3E:44:E0
X509v3 Authority Key Identifier:
keyid:3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:84:e4:df:2e:fd:ca:a7:a6:b7:8d:2f:f5:cc:0f:d0:db:00:
07:3a:9e:f2:33:9a:42:31:62:ad:93:16:c1:43:7c:4f:04:43:
df:47:0d:82:42:b2:36:00:07:75:60:2d:cf:66:74:78:29:72:
2e:65:fb:7a:8d:72:ef:9a:74:75:6a:e3:9a:31:1c:d6:ca:4e:
a0:59:2e:32:2d:09:a9:e2:4d:05:92:55:9e:97:36:9f:cb:e2:
fe:7a:38:de:96:53:48:8b:3b:1f:78:cd:89:93:2d:14:99:cc:
99:f7:6e:2f:1b:b3:2b:32:47:cf:99:84:46:89:2e:a5:69:cb:
db:d7:34:18:f7:45:ed:94:19:ac:52:71:9b:51:bc:79:ac:9a:
c6:1a:0f:4d:dd:98:f6:da:6e:1b:af:7b:2a:c7:0c:cc:f6:7d:
94:0e:0d:61:c0:d3:65:43:e3:e3:71:5d:59:83:c2:17:3d:ff:
b7:53:ab:47:04:9d:3d:27:07:79:81:3d:db:dd:a3:d2:80:6f:
4b:22:be:4f:c1:d9:4a:a7:f7:87:0f:55:de:61:2b:df:76:60:
77:76:89:31:f5:49:4a:08:4f:e2:8d:5d:97:94:97:fc:1b:14:
bf:0b:94:a6:65:e4:1a:3d:c3:0f:d8:6f:c3:ea:01:59:7c:3f:
fb:17:3e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:35:48 2026 by rpki-client