Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
File: 3l428Vn1dpiPtOUdQQG7hdDQyYM.mft (raw, json)
Hash identifier: sa+KLSw3OrFPNFis4eH2ADsvLqkZp9EUwrfZaIUiELc=
Subject key identifier: AA:31:B4:29:88:B4:CA:18:95:CF:0A:96:20:55:BD:4F:D0:D2:88:A8
Authority key identifier: DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83
Certificate issuer: /CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
Certificate serial: 01A0C6D7CF7921227DA49691F5BF749F12BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
Manifest number: 146B
Signing time: Tue 22 Sep 2026 02:00:27 +0000
Manifest this update: Tue 22 Sep 2026 02:00:27 +0000
Manifest next update: Wed 23 Sep 2026 02:00:27 +0000
Files and hashes: 1: 3l428Vn1dpiPtOUdQQG7hdDQyYM.crl (hash: MaMm6CYcvV1WnF7eU2mfTqHbIkdk8oSiZVfvwoytPGk=)
2: CnP7xic-J3ZlsEiL_ErvWxwtjH4.roa (hash: 5VuIA/sliXJSN13FjulNtyBF4Z5iaCwmwNeqLvTqwQc=)
3: zaVYapWVUgBMhU_JcYYvFP47i24.asa (hash: 8XrhcCbLyvo7InAuEJRmE6i6/OkGN5+Zgg9NXl4qux4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d7:cf:79:21:22:7d:a4:96:91:f5:bf:74:9f:12:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
Validity
Not Before: Sep 22 02:00:27 2026 GMT
Not After : Sep 23 02:00:27 2026 GMT
Subject: CN=aa31b42988b4ca1895cf0a962055bd4fd0d288a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6b:95:37:29:96:8a:a0:31:3d:08:4c:d2:35:
07:3d:0c:66:09:fa:20:b7:e9:ed:ea:10:3f:a0:0f:
4d:93:a9:e5:70:bc:ac:65:43:14:19:e5:f8:1c:60:
a5:a0:d2:44:4b:01:5d:d8:e8:49:a7:bf:27:3e:60:
6f:99:15:6c:fa:81:11:ab:0b:fe:21:8f:cd:4f:8e:
68:e4:99:ee:87:f6:51:a8:84:b0:e8:21:a9:18:e2:
67:c0:5c:7b:c6:16:ec:26:19:d4:7b:2d:0e:ef:de:
a5:3f:10:aa:fd:2c:a5:5d:f5:8d:a2:44:78:b3:26:
38:b8:a4:2c:c2:34:ed:32:a5:e5:92:71:84:53:10:
93:76:ba:a8:a0:31:95:69:a2:73:0f:00:60:f0:bb:
93:19:db:79:6a:ea:ce:f4:31:79:59:96:5b:23:14:
92:af:5b:db:42:75:ba:64:7d:73:45:26:7c:dd:15:
5a:32:52:15:64:88:11:88:a2:e5:29:f3:fd:3f:20:
3e:47:8f:cf:9e:72:21:27:ba:bd:98:5a:8b:40:7c:
20:59:db:7a:a1:cf:c6:b2:81:99:81:d2:06:70:bf:
63:a4:17:dc:4c:10:f7:a7:ab:e1:ed:b6:d1:1e:bc:
d5:7b:2d:10:d0:86:c2:34:89:f3:d1:1d:cf:99:01:
88:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:31:B4:29:88:B4:CA:18:95:CF:0A:96:20:55:BD:4F:D0:D2:88:A8
X509v3 Authority Key Identifier:
keyid:DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:67:6d:d6:c6:f5:5d:21:e8:0f:8a:22:55:1f:05:52:0e:8b:
d4:2e:91:fd:66:f7:83:d6:7e:c5:16:b6:78:5b:3e:ca:08:9e:
05:c0:b4:6b:a4:80:e8:5f:06:29:95:7c:ef:a4:98:8c:a8:1f:
9b:f7:b9:66:66:d6:05:bb:6d:06:22:89:e4:6d:a9:d4:9a:7a:
00:26:5a:25:06:38:91:04:76:9f:d7:8d:7f:f2:45:f4:e0:36:
ef:80:a8:37:c3:91:e4:d4:af:96:b0:41:6d:0d:5a:34:80:02:
19:90:31:3a:89:65:a6:35:31:92:fc:c7:f6:cd:7f:1e:df:27:
66:cd:94:46:90:26:08:a4:0d:98:a7:dd:de:39:28:2a:58:a8:
87:77:30:e2:c0:a9:71:7b:ba:bf:82:8c:49:62:df:9b:8e:2f:
a9:81:9a:4b:db:21:14:a1:c3:e7:05:0d:78:6a:31:db:48:cc:
7d:93:a7:0b:95:90:11:81:e4:74:54:8b:10:a2:0b:90:ba:97:
7d:ab:5b:41:87:a5:33:c9:87:30:e0:98:1c:31:48:e1:98:04:
3d:4b:5b:37:84:80:c8:0c:84:2b:b1:a8:0c:9e:68:63:ab:a3:
f6:e5:d8:24:b8:8d:d0:b8:23:10:ea:63:f1:5c:1f:6f:c7:f4:
e2:14:51:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:53:52 2026 by rpki-client