Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
File: 3wuk9W5vA3clKGA3r8PBTCk7m4I.mft (raw, json)
Hash identifier: 8cgXAqDj0tuLQnuVWYTZVZpXYuvWHdef4rCShlK7ubo=
Subject key identifier: BA:AA:F8:75:64:92:49:42:B2:72:32:72:B9:89:99:FF:26:B8:1B:1B
Authority key identifier: DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
Certificate issuer: /CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Certificate serial: 01A0C10D36A3B3A36A56668FD5C2E9AF9DD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
Manifest number: 1A6A
Signing time: Sun 20 Sep 2026 23:01:03 +0000
Manifest this update: Sun 20 Sep 2026 23:01:03 +0000
Manifest next update: Mon 21 Sep 2026 23:01:03 +0000
Files and hashes: 1: 3wuk9W5vA3clKGA3r8PBTCk7m4I.crl (hash: rW9OSUM+vA1hXqQeUaYuR5ySc+NZKwBtle9oxXt9eMg=)
2: BMMff36mDnqefE-fi1QYcDeaUEk.roa (hash: Yky2cFQCYWcMLt5A2AE8QdQ1eB3p9PDevvqazUFMfX4=)
3: c1k5DpW670XTtOlEvTkIz9kZXlc.roa (hash: Y49a9m/TdUFutVOSA2rIEcmP18u8ki2BwGqjBT3Sy90=)
4: ncKH1YpuJk5-uciMg32syOz5Dh0.roa (hash: 8NVQeOlGQC5ZiQGFRi3sIRfLjXwS5UuTrVhAQo79EFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:0d:36:a3:b3:a3:6a:56:66:8f:d5:c2:e9:af:9d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Validity
Not Before: Sep 20 23:01:03 2026 GMT
Not After : Sep 21 23:01:03 2026 GMT
Subject: CN=baaaf87564924942b2723272b98999ff26b81b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:5d:c6:1a:f6:93:bd:84:89:af:c5:9f:7a:64:
a9:a4:e0:4a:f0:ec:a9:3d:43:ad:26:54:06:59:dd:
0a:fc:03:af:12:91:f6:05:17:d4:75:52:eb:95:76:
b3:5f:a6:60:97:99:8c:4b:84:92:47:6e:18:d3:25:
e0:46:39:20:48:86:0f:27:96:8b:a9:98:b9:4d:18:
4c:ea:71:9b:97:1a:1b:b8:23:83:f8:23:c4:2f:d6:
12:a1:77:37:04:45:92:b3:2c:0d:9c:75:7c:d5:57:
ba:bc:0f:2a:7a:eb:e5:74:13:87:22:d7:87:c2:6b:
0f:d1:27:56:60:3a:f2:45:b9:72:fa:4a:8a:2f:9a:
9a:3d:09:a0:60:d7:bc:e0:a2:c1:a9:36:5b:ba:a3:
24:20:0c:ca:a3:84:a8:15:8e:d2:52:e3:f8:fd:3b:
9e:2b:35:21:a1:e0:86:5d:db:00:03:ef:21:ba:3d:
76:a0:40:76:81:e1:2b:18:96:92:d5:e7:46:cd:3f:
e1:aa:e2:b3:b9:ff:4d:7c:3a:b5:1b:dc:a4:64:84:
40:98:53:ef:3a:58:b8:98:09:d4:7a:df:11:12:2c:
38:66:31:bf:d8:8b:9b:62:eb:b3:f4:de:c1:29:9e:
20:dc:26:35:e5:08:fa:66:f2:33:8f:81:78:a5:49:
9d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AA:F8:75:64:92:49:42:B2:72:32:72:B9:89:99:FF:26:B8:1B:1B
X509v3 Authority Key Identifier:
keyid:DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:43:b9:2f:a1:61:5a:fc:c7:d4:35:e5:0f:a9:38:64:8c:73:
61:8c:01:7a:88:bd:e3:81:0a:52:04:a0:78:a0:0b:6d:1d:49:
55:82:78:62:b6:93:7e:c7:be:0d:b9:dd:02:00:e3:c3:e5:eb:
3a:b7:1a:58:51:69:e8:78:fa:9d:24:e7:e8:a9:0f:4d:f5:b3:
c2:37:a6:d0:c2:55:53:f1:40:9d:6f:e9:d4:b7:31:6d:d8:40:
f1:08:58:3e:65:52:a5:86:3f:cb:0f:27:11:ad:8f:b2:82:65:
cd:cb:64:74:c7:d4:23:27:86:7c:d1:87:f1:fd:95:b0:7b:7c:
22:f0:de:f0:c9:97:7e:36:05:45:48:2a:5c:54:bf:8e:5a:53:
d8:b0:dd:e6:f4:69:77:80:cf:cb:83:0f:fb:1d:b6:1f:71:00:
3e:e6:c0:d5:0c:7c:d9:42:a1:71:55:f1:50:af:7f:10:69:26:
59:8e:17:34:74:8f:7e:68:78:86:e6:7d:8c:cf:e2:fd:37:83:
3e:fb:5d:09:80:5e:39:5c:8e:7c:4b:1b:cf:6c:b4:7f:b1:70:
d1:b3:89:19:49:a5:1a:71:cc:a6:d5:ca:9d:8c:cc:bf:63:ac:
ac:3a:ee:4e:8d:6f:cb:2b:0a:98:8b:5d:d4:7b:9a:59:05:fe:
b5:c0:b6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:12:06 2026 by rpki-client