Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/8d4107-3c59-44d4-816f-3a4e8b9da5be/1/3f20crHtWewvNw8g-rSHlDnFMY8.mft
File: 3f20crHtWewvNw8g-rSHlDnFMY8.mft (raw, json)
Hash identifier: Mv9aNRV3sTvho4ywYUJD5YTOPEj0KdNDuY7oh248S48=
Subject key identifier: 76:B2:1E:9E:92:4A:98:33:28:1A:B9:E4:55:03:94:48:AD:18:C8:9B
Authority key identifier: DD:FD:B4:72:B1:ED:59:EC:2F:37:0F:20:FA:B4:87:94:39:C5:31:8F
Certificate issuer: /CN=ddfdb472b1ed59ec2f370f20fab4879439c5318f
Certificate serial: 01A0C030CC5951A23CF0FC3133731239EF49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3f20crHtWewvNw8g-rSHlDnFMY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/8d4107-3c59-44d4-816f-3a4e8b9da5be/1/3f20crHtWewvNw8g-rSHlDnFMY8.mft
Manifest number: 027B
Signing time: Sun 20 Sep 2026 19:00:18 +0000
Manifest this update: Sun 20 Sep 2026 19:00:18 +0000
Manifest next update: Mon 21 Sep 2026 19:00:18 +0000
Files and hashes: 1: 3f20crHtWewvNw8g-rSHlDnFMY8.crl (hash: B4ERxcHDF5zubqn69K6yZEuN3fph8eTCfl8PaIxXbYU=)
2: ZMQkud9K3mvXdpjh-yoqav-Fm2A.roa (hash: rezLl6nocyRRaT4FpZnJ5CHwHhiv5ot72qwHgOZEFQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/8d4107-3c59-44d4-816f-3a4e8b9da5be/1/3f20crHtWewvNw8g-rSHlDnFMY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/8d4107-3c59-44d4-816f-3a4e8b9da5be/1/3f20crHtWewvNw8g-rSHlDnFMY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3f20crHtWewvNw8g-rSHlDnFMY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:30:cc:59:51:a2:3c:f0:fc:31:33:73:12:39:ef:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfdb472b1ed59ec2f370f20fab4879439c5318f
Validity
Not Before: Sep 20 19:00:18 2026 GMT
Not After : Sep 21 19:00:18 2026 GMT
Subject: CN=76b21e9e924a9833281ab9e455039448ad18c89b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:51:fc:99:e1:d6:d9:c1:b3:74:86:26:1a:f8:
1d:28:28:c5:35:a7:57:9c:80:04:73:de:18:17:ee:
93:64:e8:f6:f4:7a:8b:69:28:ad:f1:03:4c:2f:f0:
e4:34:ff:66:69:dc:4a:67:b4:10:f6:5c:47:24:87:
06:6b:ab:a1:0f:01:93:6f:97:cc:3d:af:3c:11:0f:
f8:33:8a:ed:76:90:4b:a6:49:c6:9a:f8:34:ae:9d:
79:a7:fc:b0:26:a2:c9:e6:05:b7:13:21:0c:13:e8:
de:23:0d:39:36:94:22:ea:39:ea:ae:78:f2:79:de:
05:71:61:03:78:d2:e3:ae:3b:41:16:a6:98:26:f7:
5a:25:b1:4a:12:9e:94:0a:b5:71:59:cd:13:52:35:
7d:40:d3:d3:0b:90:c9:2e:8b:de:c4:d8:6b:69:d4:
4d:40:61:30:d6:48:24:c2:3a:ba:34:0e:56:5b:14:
39:d1:53:cc:16:c6:ce:da:f9:ec:c1:46:13:b7:d3:
9c:b3:ad:ff:da:7d:e2:49:da:05:fd:67:26:e0:d0:
d8:4c:7e:27:6d:6a:a3:54:b0:95:d0:8c:3c:97:c5:
5d:40:5c:ac:9a:6a:41:0f:24:1a:56:ab:b4:48:66:
fc:a9:f2:5e:17:ed:d5:c8:0d:de:10:5a:61:11:fc:
cb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B2:1E:9E:92:4A:98:33:28:1A:B9:E4:55:03:94:48:AD:18:C8:9B
X509v3 Authority Key Identifier:
keyid:DD:FD:B4:72:B1:ED:59:EC:2F:37:0F:20:FA:B4:87:94:39:C5:31:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f20crHtWewvNw8g-rSHlDnFMY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8d4107-3c59-44d4-816f-3a4e8b9da5be/1/3f20crHtWewvNw8g-rSHlDnFMY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8d4107-3c59-44d4-816f-3a4e8b9da5be/1/3f20crHtWewvNw8g-rSHlDnFMY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e3:07:f0:36:5c:6f:45:2f:60:45:b8:13:fe:61:de:7b:34:
18:7f:b5:4c:b6:9a:4e:5a:b1:b5:02:bb:cb:4c:21:cc:7d:83:
4e:98:34:90:07:fc:f4:f1:a6:58:17:12:43:bf:2e:de:52:c1:
7a:c1:8d:0c:84:15:ee:9e:67:29:b4:df:c9:c6:07:15:42:f2:
7a:01:17:93:71:b8:a6:23:27:a5:d2:53:77:86:b7:9f:a8:a2:
e2:8e:d6:09:de:81:94:51:2a:ff:9f:bf:d0:8a:51:c1:d4:19:
26:44:81:b8:f5:78:13:fa:76:d0:4c:84:90:21:93:e8:99:55:
0d:cf:db:3d:65:70:11:28:1f:6d:d0:6d:2f:db:30:cc:93:37:
b9:7a:41:42:4d:ae:d5:6e:8d:fe:45:70:bb:02:48:12:5f:a5:
af:f8:ab:40:31:77:f3:23:73:6a:7e:0e:22:27:81:19:24:f0:
41:ba:93:8c:34:f5:39:73:1e:21:6d:f0:33:83:b4:2e:8c:0d:
8e:1c:e1:d9:e8:f0:b0:b7:f1:6b:c4:8a:1a:8a:24:3c:a0:91:
43:6e:f2:31:8c:8c:cc:bd:6d:81:8e:aa:06:6e:ab:a4:b6:e8:
88:de:b0:9d:97:23:ae:25:4a:ba:89:6a:9c:db:af:07:91:2d:
b7:b1:05:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:30:58 2026 by rpki-client