Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
File: _-Q3vK2brPo7drfdBFQTP7TYyz4.mft (raw, json)
Hash identifier: 3aEekDjmvDg38O6tZivmMY763XcAq4q65nFYItYblgg=
Subject key identifier: A5:90:34:CB:E0:3F:AF:AE:9B:58:F3:8D:60:FA:28:99:7A:76:B5:7B
Authority key identifier: FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E
Certificate issuer: /CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e
Certificate serial: 01A0C5205B7EF487F2AC63E5571806A2F556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
Manifest number: 045F
Signing time: Mon 21 Sep 2026 18:00:27 +0000
Manifest this update: Mon 21 Sep 2026 18:00:27 +0000
Manifest next update: Tue 22 Sep 2026 18:00:27 +0000
Files and hashes: 1: _-Q3vK2brPo7drfdBFQTP7TYyz4.crl (hash: h4/M1ykHj4Od9YiaI4/m0XMBMoonZdjVkxIqmVpuAR4=)
2: k9k26h_wk2KwXBbexASmBckIdio.roa (hash: IkgLudWAy48LS7n3a0wG6CHVGFDidThlfHrJKCCT1wM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:20:5b:7e:f4:87:f2:ac:63:e5:57:18:06:a2:f5:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e
Validity
Not Before: Sep 21 18:00:27 2026 GMT
Not After : Sep 22 18:00:27 2026 GMT
Subject: CN=a59034cbe03fafae9b58f38d60fa28997a76b57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a6:00:ff:f3:5f:2e:f3:0f:22:07:ee:e3:9c:
aa:bc:c3:85:a4:33:b2:42:b5:f4:eb:0f:ca:f9:5f:
da:10:c2:cc:27:78:80:0e:4b:ba:d5:e4:47:b6:92:
a6:27:34:8d:6f:5c:f3:71:76:45:62:59:7a:21:ce:
b4:63:c3:10:0d:0f:a6:34:ef:89:92:2a:34:ab:11:
1a:dd:cd:73:c8:dd:75:a7:5b:a8:fd:a8:d0:fd:e3:
1d:7a:ce:b9:ac:fc:04:74:f1:25:09:1e:4d:d8:08:
9b:9a:c2:2e:52:f1:35:cc:50:a6:ed:c5:13:16:b9:
fd:85:ca:15:eb:81:50:44:05:a5:98:3f:02:93:e1:
5b:04:9c:25:7b:5f:43:d4:46:61:de:12:e1:62:7f:
1e:0d:ea:30:3a:14:b7:9c:57:53:e7:4f:b6:76:49:
0e:52:27:e9:a5:57:27:b5:9a:48:3f:fd:ed:7d:41:
65:c1:42:ab:87:0d:4f:3b:38:de:30:5f:c5:81:e5:
25:1e:08:17:f0:2f:7e:81:bf:5b:33:3c:b9:ab:6f:
b7:de:fd:d8:92:31:e8:83:84:2e:ab:82:a1:61:e6:
f7:5d:40:1e:f6:f0:59:84:40:9d:e1:a4:c2:f1:0c:
94:7e:c0:fa:4a:91:d8:45:12:e1:4c:0e:5e:69:9e:
4b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:90:34:CB:E0:3F:AF:AE:9B:58:F3:8D:60:FA:28:99:7A:76:B5:7B
X509v3 Authority Key Identifier:
keyid:FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:00:73:1d:9b:a7:c6:6d:79:84:be:cd:49:1a:d7:e8:c7:c0:
17:bb:68:dc:43:16:b0:91:a9:11:12:23:cc:87:d3:07:75:2a:
15:cc:a1:df:bc:0d:c6:63:d6:aa:d7:7d:7a:19:db:63:bc:1f:
1b:f4:62:e0:85:3d:d8:94:a1:69:bf:54:1c:b3:0a:85:94:1b:
2e:04:69:a7:de:a4:a4:79:ec:d3:d4:ee:f9:57:0c:f8:eb:84:
f5:de:5e:d2:7f:5b:a3:bf:c0:e0:e7:ff:2f:49:75:22:42:d3:
19:91:f4:44:09:ca:c2:f6:89:eb:bd:1e:45:7b:d3:31:79:17:
7f:95:2a:be:b6:cd:ae:89:10:76:ad:3e:4e:fd:16:d2:9b:14:
7e:25:f5:e0:53:07:c8:10:45:55:9f:53:37:cf:95:f2:f2:e8:
fb:ba:f2:c0:68:5f:2a:76:0c:66:c6:e5:20:f6:2b:8b:db:a5:
93:90:af:dc:09:d0:ae:bf:00:49:f6:78:da:67:eb:29:80:d9:
74:d6:83:1d:38:6e:70:6a:6f:6d:a4:35:af:6f:0a:43:d0:80:
56:b5:df:2d:18:bd:2f:18:c4:80:9c:25:55:f7:eb:c5:0e:82:
df:09:e2:cb:8e:a1:64:c5:55:6c:69:0e:b2:ff:9e:74:55:df:
83:76:9f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:01:12 2026 by rpki-client