Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
File: 3ILSx-tfpUPjLx7uGc01pWc8-uY.mft (raw, json)
Hash identifier: LdhkVQ/8kVTFX0eheI7tNu7PVUG4Sr8a/fuPzfMaiyY=
Subject key identifier: 72:17:82:20:2A:9E:66:BE:DE:E2:B2:1B:4A:D2:F7:C3:77:C3:D0:DD
Authority key identifier: DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6
Certificate issuer: /CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6
Certificate serial: 01A0D3EF2B61E4617550A74D30E4814E9628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
Manifest number: 0939
Signing time: Thu 24 Sep 2026 15:01:01 +0000
Manifest this update: Thu 24 Sep 2026 15:01:01 +0000
Manifest next update: Fri 25 Sep 2026 15:01:01 +0000
Files and hashes: 1: 3ILSx-tfpUPjLx7uGc01pWc8-uY.crl (hash: RLHDaLWrW61Inj/hhCzQ1YkwExMDjqEBhpROmGjye7g=)
2: U_7zBQWTwyWyUplGTwTnhAD7M1w.roa (hash: qcrvphnrKI926TTY4n+5jtIqzlPgS2kixs/9tqEWP9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:2b:61:e4:61:75:50:a7:4d:30:e4:81:4e:96:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6
Validity
Not Before: Sep 24 15:01:01 2026 GMT
Not After : Sep 25 15:01:01 2026 GMT
Subject: CN=721782202a9e66bedee2b21b4ad2f7c377c3d0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7e:ab:71:d5:67:21:15:3b:db:f0:57:61:79:
69:c4:b1:7c:59:7f:c6:01:ea:5b:98:35:22:58:50:
5a:58:f4:68:83:d9:70:25:d9:f2:6e:11:49:84:b6:
67:5f:91:22:18:d4:ea:ad:58:0f:46:72:c3:61:b2:
9d:b5:58:5a:f4:62:66:c7:8b:12:a9:e6:e5:f0:8d:
0f:a6:1a:af:37:5a:a2:ab:52:ae:5c:4e:84:b3:e7:
6e:a7:c1:a5:10:0f:ff:2c:cb:16:6c:0d:ea:40:a0:
34:7f:ea:42:d9:d8:bd:19:40:da:38:ac:1d:74:b1:
52:48:d3:3d:60:46:84:e2:ec:eb:b5:cb:d8:19:f3:
71:8a:64:8c:68:ba:95:d3:4f:5d:5c:b4:27:e2:ec:
28:d4:fa:1a:b8:5f:06:43:a9:42:51:38:ff:6b:63:
72:10:07:1c:ac:ca:b2:b7:11:44:cc:d1:92:d5:c7:
f7:b1:70:88:eb:95:68:ee:0b:c5:40:b8:72:0f:a9:
cd:89:6c:21:90:e8:a6:f2:1b:8d:16:59:0e:20:4b:
a5:38:16:37:96:81:04:a2:d3:aa:80:c9:aa:14:12:
ab:0f:32:f7:46:76:53:7e:c5:c4:1a:b1:92:b9:ad:
71:41:ea:68:ab:a4:67:74:0c:d4:c5:10:07:ea:c3:
27:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:17:82:20:2A:9E:66:BE:DE:E2:B2:1B:4A:D2:F7:C3:77:C3:D0:DD
X509v3 Authority Key Identifier:
keyid:DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:31:93:ea:b3:e0:e8:68:f0:f8:f5:f4:fc:47:e9:82:84:24:
62:8c:27:4d:0f:ac:f5:7f:92:fb:40:38:aa:0a:0d:a5:42:69:
1b:93:12:a7:42:ee:b3:b7:26:21:cc:72:e2:b8:4b:8f:d0:ad:
4d:23:fc:cf:09:a1:06:55:07:8d:2c:ce:fb:b5:2e:21:46:e1:
e5:30:50:01:94:59:6f:71:89:d3:29:b3:73:40:2c:9f:a9:95:
d0:3c:60:fc:3f:d6:96:30:a2:b4:e8:44:5e:a3:2c:9b:e9:70:
64:90:b3:a6:d3:46:47:3d:ac:2a:c5:3e:94:59:08:3c:ae:16:
02:6c:ed:ed:99:82:1f:ac:74:4c:85:6c:52:b7:91:ff:68:3e:
11:9e:44:a2:bf:85:4b:93:38:24:db:57:07:ce:1c:59:ff:69:
e3:65:8d:27:a9:85:29:5b:37:2d:7f:08:63:63:de:bd:e4:57:
14:59:42:4c:b6:1e:67:6d:79:da:ec:0e:ea:45:a5:da:b0:ec:
42:e2:f9:67:c3:8c:62:9b:6e:8b:17:a6:78:e2:41:9d:2c:ec:
62:d4:e3:27:e2:bc:41:a1:2d:30:21:d2:bc:ec:db:19:48:6b:
b2:5d:ba:5a:71:4c:7c:48:e7:d9:c3:08:a6:ba:a9:d1:17:01:
45:59:72:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:47:14 2026 by rpki-client