Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
File: 3ihtA6NzvWie8EYQocithHPr3a0.mft (raw, json)
Hash identifier: 39au4pA5MuMbcsHVqB4b4Wm1FZDDS7/5nNWLIW7YjRs=
Subject key identifier: AF:84:77:FC:9F:47:85:83:A6:78:D5:EF:FA:B9:C8:D1:91:99:DD:5B
Authority key identifier: DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
Certificate issuer: /CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Certificate serial: 01A0C17AD6502EA0CDB798BA5668FBE78D3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
Manifest number: 15A9
Signing time: Mon 21 Sep 2026 01:00:47 +0000
Manifest this update: Mon 21 Sep 2026 01:00:47 +0000
Manifest next update: Tue 22 Sep 2026 01:00:47 +0000
Files and hashes: 1: 3ihtA6NzvWie8EYQocithHPr3a0.crl (hash: TewQUPDwcNVIhiobbtIrqw4k7zySfeElNy/B41uJfNg=)
2: 6LpMhHmk89Py7vWuBJ8eEXpWnn4.asa (hash: eq0WQCdDBBCmtQF0jQMbbLOLGcIojkIy5NWC9heTYts=)
3: vlBe3oYmjLCyAb6mMX2mR3pkXOU.roa (hash: zOmjl7/VF1REeDK9Kz85f9AKUhU+m9qTE9b+EWBSHrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:7a:d6:50:2e:a0:cd:b7:98:ba:56:68:fb:e7:8d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Validity
Not Before: Sep 21 01:00:47 2026 GMT
Not After : Sep 22 01:00:47 2026 GMT
Subject: CN=af8477fc9f478583a678d5effab9c8d19199dd5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8b:4f:e7:67:f7:5d:0b:74:2a:f9:29:a0:fd:
f6:fb:6d:31:32:a7:6f:35:c0:56:01:5e:48:4e:07:
e1:7a:08:f5:34:44:53:1d:cd:78:70:fb:0e:dd:95:
eb:39:5e:a8:f5:d4:b0:26:a3:ee:07:5a:7c:b9:b6:
07:87:f8:98:df:ee:65:e5:8c:30:ce:dd:bb:ab:fa:
1b:2c:1b:13:9a:c8:49:41:13:c9:5a:48:d6:de:f6:
cf:c0:d1:74:d7:57:a6:c7:ce:7c:dd:62:3c:34:bd:
cb:78:6a:96:cd:ec:6f:fd:6e:a6:f8:95:86:0d:42:
00:13:88:23:df:2a:52:fd:ab:90:31:e2:47:fd:48:
11:de:6c:c5:4d:bc:6b:54:9e:5b:24:d2:b9:48:0c:
42:5d:26:e6:84:be:3b:f8:bf:eb:e5:37:f3:51:fb:
be:d1:a9:9b:5d:3d:b5:ff:cc:f3:53:bc:cd:fd:d5:
67:71:18:ab:57:a2:76:af:1b:78:d2:d1:dc:ac:06:
ac:01:f6:0f:7e:46:a0:9e:5d:7c:e1:a4:3a:da:fa:
fa:94:c8:cd:f2:1e:79:e7:63:5e:c4:cc:31:fe:84:
57:34:c3:c8:43:48:44:79:3f:47:7c:80:94:9d:f7:
af:76:77:5d:90:cb:bf:1e:89:4f:b1:b3:df:bc:a7:
7b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:84:77:FC:9F:47:85:83:A6:78:D5:EF:FA:B9:C8:D1:91:99:DD:5B
X509v3 Authority Key Identifier:
keyid:DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ac:5f:37:f8:42:5f:29:14:16:1b:05:82:12:d7:4d:43:04:
90:60:69:8a:36:cb:45:27:49:1a:ae:1f:3c:84:13:fe:6f:22:
73:04:8b:51:bd:eb:5f:3d:7f:a6:3b:54:76:47:a4:d4:41:a3:
ec:ae:40:8e:a7:e0:f0:bc:a5:93:1d:63:89:bc:82:3a:fc:7f:
94:64:9b:01:39:61:20:b8:b2:8b:62:e3:d0:a5:e8:cf:dc:40:
13:fe:b9:28:68:9a:1f:57:65:f8:cf:bb:d3:a7:1f:fd:2f:dd:
6a:f4:92:02:b1:52:44:f2:9a:50:1f:3b:7b:df:31:41:7b:78:
75:8b:16:4c:29:e7:7c:ae:fc:33:c2:5f:71:9a:22:a7:2b:2b:
29:e8:cb:df:df:95:84:e2:89:a8:17:bd:b5:d5:2b:92:52:7c:
41:0e:7b:33:a8:11:6c:7b:01:88:09:79:f9:31:91:6f:df:6f:
44:a5:a9:d1:cf:e4:b4:5d:f5:c4:48:53:5a:ec:04:a3:8b:6c:
ab:95:23:6f:9d:bd:38:73:65:b7:4c:3e:4d:69:41:b4:8e:5e:
95:3d:6e:4b:16:5e:c3:b8:9e:42:90:7e:d8:8a:aa:5c:64:ba:
67:67:82:d0:07:e3:8a:5c:5a:30:9c:f9:2c:81:38:8e:7e:a5:
7e:da:75:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:35:17 2026 by rpki-client