
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
File: 3I4FnV63dkn78ZuErzX2iR2cWAc.mft (raw, json)
Hash identifier: sD8YI9c7Z8ah5rbWf5wERBkum3kNsvYikwAxtz9CLuo=
Subject key identifier: 09:86:DA:8F:D1:AB:B2:48:C9:72:D8:31:8D:44:A1:74:D8:FE:8A:45
Authority key identifier: DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
Certificate issuer: /CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807
Certificate serial: 01A0CC35289E2F7F4F16E85673CDA0B70956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
Manifest number: 119A
Signing time: Wed 23 Sep 2026 03:00:30 +0000
Manifest this update: Wed 23 Sep 2026 03:00:30 +0000
Manifest next update: Thu 24 Sep 2026 03:00:30 +0000
Files and hashes: 1: 3I4FnV63dkn78ZuErzX2iR2cWAc.crl (hash: ulgzVLzVp4Mh7Ut/nrad6FIQrn/0xGK7NGpHy4t35Q8=)
2: TmN-dr45oTfR8pksVoCNgmVOGLU.roa (hash: vnALMBgUiF5Ge/N8pDhGThN8hB7OAP8KLzkie3WI7N8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:35:28:9e:2f:7f:4f:16:e8:56:73:cd:a0:b7:09:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807
Validity
Not Before: Sep 23 03:00:30 2026 GMT
Not After : Sep 24 03:00:30 2026 GMT
Subject: CN=0986da8fd1abb248c972d8318d44a174d8fe8a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6d:c2:27:d7:c1:e4:9e:ba:1d:5a:bb:1e:66:
e0:c7:8f:03:da:ea:e4:d9:86:18:66:40:ee:42:ba:
f9:7e:f3:9a:27:46:f8:8a:17:48:a8:5e:fc:96:b0:
f3:9c:7a:b1:12:2b:37:cf:64:ba:96:89:65:e9:95:
c2:92:15:97:4b:3b:38:cd:5e:68:b9:f1:38:b6:8f:
25:c6:da:59:4f:2f:09:6d:14:25:06:3e:7e:e8:3a:
cb:ad:ca:4b:6d:fd:ef:41:53:23:c7:2f:b4:34:77:
00:f1:77:65:50:85:0b:8b:a2:be:30:1f:3b:cd:63:
0c:9e:3d:f4:b7:77:41:52:b1:eb:10:7e:d1:db:b3:
cf:e3:96:fb:88:3a:ba:cf:ab:e6:ab:0d:c9:71:c6:
9a:41:7a:9e:4d:2d:57:6a:a3:44:af:5c:ed:41:ca:
b0:20:0f:55:96:e8:ba:86:68:7c:93:a7:39:48:42:
82:67:71:71:bb:9c:eb:35:93:6c:32:8d:40:59:db:
97:b7:f1:22:3a:1c:1e:82:ce:a6:21:e0:8d:f1:36:
79:a3:44:a8:49:48:25:8b:69:57:87:c2:cf:5b:bf:
07:9f:e1:11:5c:99:86:9c:57:18:a7:53:7a:45:dd:
88:7d:29:e5:8e:ac:79:bf:3b:f0:da:82:98:af:2c:
05:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:86:DA:8F:D1:AB:B2:48:C9:72:D8:31:8D:44:A1:74:D8:FE:8A:45
X509v3 Authority Key Identifier:
keyid:DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f3:92:a7:22:a9:99:c2:ab:57:7e:74:d0:81:d4:eb:d7:e8:
51:2f:01:6f:89:61:f5:94:e7:b7:b7:96:7c:a3:f2:ee:3a:93:
df:6f:cd:98:c9:f5:0d:16:60:11:03:4d:9a:0d:9b:21:ca:6c:
d2:79:7e:35:96:4a:df:56:77:43:28:4c:4b:c2:3c:82:96:1b:
24:47:53:8c:09:35:b6:e5:d9:84:14:87:93:eb:f5:a0:a0:41:
4e:3e:a0:aa:a4:3b:5c:f8:d9:df:ed:03:67:53:4c:af:21:80:
19:8f:e2:06:f0:35:09:96:23:67:13:d5:ac:b9:f1:5b:a3:46:
af:88:46:2b:b0:d1:00:55:ff:de:87:83:55:a0:f9:c6:20:a6:
4d:cd:75:ea:7f:54:1d:57:51:43:e4:a9:0c:71:37:57:3a:cc:
59:2c:ad:d8:6f:6c:6d:54:47:ea:6e:a2:6c:5a:82:2d:44:3e:
d3:9d:b9:9c:23:5f:a6:f1:13:4d:0a:cf:ed:2e:0a:b9:27:bb:
30:e3:70:31:c2:a3:7c:63:58:ba:ab:8e:70:c1:1f:3e:7b:7b:
f7:94:6b:5f:54:62:d6:9e:d6:16:8c:70:e4:8d:cb:95:18:2f:
32:91:48:4f:3d:6b:e4:2f:7d:03:1c:c3:db:0e:53:90:f9:5f:
3b:a4:64:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:38:05 2026 by rpki-client