Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
File: 3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft (raw, json)
Hash identifier: ReusrPv2esmn/k23zpOZ1PuEbj0/TfB9Xslb4+qUrBQ=
Subject key identifier: 23:E6:49:38:34:EE:E7:AD:CF:0F:CB:B2:3C:47:AB:D2:B8:41:07:9A
Authority key identifier: DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D
Certificate issuer: /CN=ddd5708f429adadba1b4a38c94dd77654afaf97d
Certificate serial: 01A0C444F1D99D7D7786BE5D20336EBCB67D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 14:00:47 +0000
Manifest this update: Mon 21 Sep 2026 14:00:47 +0000
Manifest next update: Tue 22 Sep 2026 14:00:47 +0000
Files and hashes: 1: 3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl (hash: b9mfxpcPySdOaK9QA0F8CHaf8MTYVv8H7TAQjtPLKYY=)
2: mgzdOFd8B2ya1Xohy6YCT8xW7b0.roa (hash: /7uRJWT90D6J/lwYKLHfljOz+L9OgupUQYidcbYQ5rU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:f1:d9:9d:7d:77:86:be:5d:20:33:6e:bc:b6:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd5708f429adadba1b4a38c94dd77654afaf97d
Validity
Not Before: Sep 21 14:00:47 2026 GMT
Not After : Sep 22 14:00:47 2026 GMT
Subject: CN=23e6493834eee7adcf0fcbb23c47abd2b841079a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:86:7e:3e:cb:7c:11:33:9e:2f:d4:af:64:ed:
59:70:87:59:ca:ef:02:ee:e3:db:bb:d2:f8:e7:be:
aa:fb:fa:21:ff:28:62:4e:db:c0:fb:9b:2e:77:75:
1b:8d:fc:cb:27:47:9e:f5:a8:4e:98:49:96:86:30:
a3:c5:55:e3:41:e9:fc:97:ac:a1:5e:04:37:e9:5b:
0a:b3:f7:2b:fe:08:de:53:52:9b:6b:20:7e:9f:55:
2d:d8:1c:7f:15:88:85:b0:00:f3:b5:f9:cb:3c:ec:
ab:6f:b6:d4:6a:3a:07:02:be:58:d3:b5:bc:7f:d5:
45:fe:b2:a8:f9:d3:dd:8f:1a:4a:27:d0:5c:1e:f6:
a8:62:cd:bb:42:d4:ff:60:bf:00:96:08:43:0d:ee:
a7:39:42:d1:de:86:87:a1:06:db:47:5d:ed:22:73:
31:01:ba:70:7b:04:02:0b:29:30:a2:53:97:79:02:
6b:98:f6:41:74:9b:cc:37:cc:2d:19:67:7c:ab:86:
d6:96:66:49:bb:6a:a3:54:d5:31:7a:fe:33:06:49:
50:32:06:ce:b6:9b:6d:91:f4:8f:60:d5:19:df:81:
bf:6d:9d:5c:0d:e2:a9:7d:0c:3f:3d:65:68:ca:7c:
39:d1:06:f8:58:d2:d2:2e:8d:9f:4d:eb:fe:c0:7a:
cf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E6:49:38:34:EE:E7:AD:CF:0F:CB:B2:3C:47:AB:D2:B8:41:07:9A
X509v3 Authority Key Identifier:
keyid:DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:73:a9:a2:1d:77:76:3d:c7:c1:bb:7f:ca:b1:73:df:dd:ad:
bf:c0:27:b7:b2:c0:b3:58:27:02:07:69:3e:22:7e:6d:05:a4:
ef:5b:73:69:e8:91:45:d6:0c:72:de:27:fb:b5:97:6b:df:9c:
3d:15:10:3c:b8:01:ba:03:04:bf:87:0e:c8:11:b1:9d:fb:a3:
39:c7:8c:e3:7d:23:f8:59:07:1e:91:8c:40:08:5f:a6:8c:c4:
bf:1d:5e:42:eb:3c:cc:2f:42:a2:6b:4c:c5:a7:d0:5d:c7:b4:
ae:e3:44:a8:ee:41:ce:5c:90:e7:a0:0c:52:ee:ee:f7:1e:0d:
03:4b:70:4f:ce:57:13:16:37:0e:da:43:7b:3c:62:b2:a4:97:
15:ab:80:22:dc:0b:62:5f:32:03:3d:a8:1a:09:ed:2f:68:9b:
9d:7f:ef:b9:4c:61:9d:df:9f:a2:b0:ce:24:95:9c:51:2d:58:
b0:78:46:a4:ea:0f:d9:e5:d7:82:02:04:3a:77:f7:65:67:49:
07:65:c6:1f:87:cc:bc:9b:ca:51:f6:ae:46:e1:e4:58:de:58:
aa:82:87:13:5b:40:6e:13:7e:4d:d9:41:28:57:1a:38:1c:ab:
08:e1:da:99:5a:9b:ea:17:83:ad:aa:db:74:ef:bc:af:c1:fb:
94:c3:9c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:01:36 2026 by rpki-client