Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
File: 3hgnB8REwxBksYmcWX6e_XNDj5I.mft (raw, json)
Hash identifier: xT7Zw+7MpLC0KZxn6MT/7jqFB58bb/WmRky12Q2fPug=
Subject key identifier: A8:D8:AB:5E:4A:CA:8F:B8:CC:E8:FC:15:12:3C:02:EF:8A:82:66:55
Authority key identifier: DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92
Certificate issuer: /CN=de182707c444c31064b1899c597e9efd73438f92
Certificate serial: 01A0D34ADE283A0B62305270FD9EC5A33C55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
Manifest number: 09D6
Signing time: Thu 24 Sep 2026 12:01:34 +0000
Manifest this update: Thu 24 Sep 2026 12:01:34 +0000
Manifest next update: Fri 25 Sep 2026 12:01:34 +0000
Files and hashes: 1: 3hgnB8REwxBksYmcWX6e_XNDj5I.crl (hash: inKp/UjnSrugNHmad82zH6LA7GEECrRKAms/PjBGzWs=)
2: _sKUqr_T2WU5wpJt5pENqGxaGNg.roa (hash: 26WyPtt0JWgZh/PV/eTd/0WIUbfzzYa6z8NjLk7cJ+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:de:28:3a:0b:62:30:52:70:fd:9e:c5:a3:3c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de182707c444c31064b1899c597e9efd73438f92
Validity
Not Before: Sep 24 12:01:34 2026 GMT
Not After : Sep 25 12:01:34 2026 GMT
Subject: CN=a8d8ab5e4aca8fb8cce8fc15123c02ef8a826655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:61:f2:03:7d:6f:2e:48:44:f6:f9:2a:b4:9c:
b7:d4:1b:0b:54:67:99:9a:ca:dc:a1:1f:01:a4:0e:
5a:53:f0:dd:b0:44:1c:b8:2c:47:7d:72:22:73:d8:
e5:08:40:26:96:3f:36:f3:7d:ed:ac:c6:c7:f5:87:
94:5e:8a:3c:83:1d:58:3d:d8:84:52:c2:40:50:7b:
bd:55:1e:1f:7d:67:c3:d3:3c:df:42:15:8c:4c:9e:
2b:20:35:8c:1e:e4:75:13:86:48:74:60:78:fd:64:
70:7d:9b:fd:c7:3a:75:01:52:fb:74:15:5c:60:09:
74:9f:50:13:9d:b9:2c:00:b6:c6:b9:dc:06:ad:fb:
b2:0a:ec:4e:80:f1:6e:1c:c9:c9:9e:97:1f:4f:ee:
47:bd:30:3f:db:41:e5:d8:07:04:8c:14:60:55:05:
1c:4b:44:84:39:f3:fd:f7:2a:5d:c2:90:7a:82:bd:
0a:df:ba:a0:a1:91:d7:66:24:7a:35:43:2e:00:9e:
36:d3:91:23:db:e7:ac:d3:10:7c:92:59:a5:96:bd:
53:f5:91:92:94:b2:99:70:77:e6:59:bb:c4:8e:0d:
b3:49:4b:a2:5e:ba:6d:8d:92:b8:57:04:ad:4d:17:
5c:d4:4f:28:ae:5d:c0:6f:c2:e5:bb:dc:df:e7:3c:
3e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D8:AB:5E:4A:CA:8F:B8:CC:E8:FC:15:12:3C:02:EF:8A:82:66:55
X509v3 Authority Key Identifier:
keyid:DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:73:50:b4:b2:86:e4:ed:fd:67:0a:c4:30:14:01:5e:0a:2c:
d2:44:e1:e9:57:0a:da:4d:b7:7f:60:1e:59:0a:b7:48:57:52:
78:c7:42:02:8b:e4:56:10:a2:35:87:a1:2b:c7:44:f2:a9:55:
c1:5e:ec:c7:2e:97:89:23:60:21:dd:29:16:5e:d2:d2:fc:50:
3c:e3:5f:c6:0b:64:b6:5f:ff:d3:84:4d:8b:f1:78:3c:30:09:
31:73:b4:f1:7c:cb:bb:8e:58:ca:40:f5:66:b2:86:f4:84:1e:
74:30:2d:8f:8e:20:60:34:d5:74:41:d8:2c:8b:c5:4f:bd:ca:
1f:59:26:d2:21:f6:08:aa:e3:80:34:55:87:6d:43:06:32:15:
77:8f:ce:7a:ca:a5:fa:b6:d6:90:08:b5:ee:8b:e5:1a:0c:07:
82:5c:0a:c9:e4:f8:7f:92:db:7b:fc:ee:74:ba:11:b6:f8:03:
ef:f3:4f:f1:7b:bc:6a:0e:34:c8:94:b6:58:09:a4:45:ef:e8:
01:11:f0:05:6b:ba:1f:d6:0e:44:9b:3f:6b:88:57:a5:f6:2f:
8d:72:dd:4b:35:73:2c:9c:d1:ba:30:56:f4:49:a0:d4:98:1f:
a1:d5:cb:44:71:6f:ab:36:c1:94:6f:bc:fb:b3:f0:06:2a:d7:
6e:db:a2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:26:14 2026 by rpki-client