Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
File: r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft (raw, json)
Hash identifier: dYqOTq/li6LYBn11+h9gZQlhMbGwRCTYrIopvM9jBts=
Subject key identifier: 4F:6D:B8:8F:1B:83:02:5F:6E:5B:0B:92:F9:BF:A8:91:ED:0D:DE:97
Authority key identifier: AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26
Certificate issuer: /CN=af73ff1ec55f49296dd734039fa0284cc400eb26
Certificate serial: 01A0D5DE85A1B0158E6F7D731637EC1BC0ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
Manifest number: 1A78
Signing time: Fri 25 Sep 2026 00:02:05 +0000
Manifest this update: Fri 25 Sep 2026 00:02:05 +0000
Manifest next update: Sat 26 Sep 2026 00:02:05 +0000
Files and hashes: 1: 4kICntJgsVWHWkY4JO35N1ABDJY.roa (hash: ENs43kJVz2bXsMKabmKE5DgKXDHmDIJ5VjejvZ/w6lU=)
2: 73PJtfjKOUuf0kYb-3vXjN2jUgI.roa (hash: 1XKicI3n2lKZgBn2j8dKasUw30d/M7iJpq2R4GQkhjQ=)
3: p__Ljf9fbtB14fFLA3bn-BJKRV0.roa (hash: 5UgXfWB96o5m7QwdXIFEVhhiyZqKscYo5S/m82Eg2zo=)
4: r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl (hash: mAjkWNXqL5GD8xrH16EiNwPkYnz+7EZHiVSGMOear5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:85:a1:b0:15:8e:6f:7d:73:16:37:ec:1b:c0:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af73ff1ec55f49296dd734039fa0284cc400eb26
Validity
Not Before: Sep 25 00:02:05 2026 GMT
Not After : Sep 26 00:02:05 2026 GMT
Subject: CN=4f6db88f1b83025f6e5b0b92f9bfa891ed0dde97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:13:1d:40:70:c4:fe:12:93:87:94:0e:90:4e:
8f:b1:96:12:6d:e8:38:b5:38:dd:cf:9d:e1:03:d6:
9a:4a:85:e4:8f:72:58:ec:70:38:82:c1:dd:b1:d2:
c2:1e:c1:92:70:e7:bd:5d:b9:09:8c:48:2e:f2:97:
7e:7f:cb:4c:b1:e2:c9:57:7d:65:ca:30:25:9e:7a:
54:45:52:8b:e4:f8:a8:15:17:e6:64:5d:87:5f:58:
d3:8b:c2:56:26:97:89:a5:e8:e0:ec:3f:e2:2b:97:
a7:9b:2a:db:ba:9c:cb:79:a0:a2:55:45:d5:f0:17:
0c:d6:5f:e5:78:94:66:93:6c:82:ae:bc:4a:46:93:
3e:5e:d4:11:c8:72:3c:04:ff:6d:93:ab:43:b2:31:
f3:d1:33:a0:77:bb:64:cb:de:bc:e9:df:2e:f9:a9:
57:1a:7e:a4:70:da:01:9e:25:96:eb:66:46:5c:cd:
b8:12:f1:f6:61:0f:cd:db:e9:46:44:50:9d:7d:fd:
16:af:07:83:b2:53:fb:fa:56:12:07:18:b6:f6:07:
01:47:11:26:50:3c:b2:f9:e8:d0:8a:5e:c5:cc:c7:
5e:28:93:ea:17:9b:c6:02:bb:5f:30:03:11:ae:60:
a0:18:dc:be:1e:0f:c2:8a:1c:52:81:e4:0c:a5:aa:
d7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6D:B8:8F:1B:83:02:5F:6E:5B:0B:92:F9:BF:A8:91:ED:0D:DE:97
X509v3 Authority Key Identifier:
keyid:AF:73:FF:1E:C5:5F:49:29:6D:D7:34:03:9F:A0:28:4C:C4:00:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3P_HsVfSSlt1zQDn6AoTMQA6yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cea581-5cde-4574-ba0a-2c62de7b3e45/1/r3P_HsVfSSlt1zQDn6AoTMQA6yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:0f:fa:9f:b6:0b:7c:f7:2d:ed:a4:12:62:f4:fa:01:e6:47:
97:4c:8b:c5:d6:a8:92:03:5c:bf:a0:53:af:95:e8:df:df:18:
52:02:9f:9d:4e:b3:34:e3:a3:9e:59:8b:48:34:2e:45:25:14:
f3:58:93:13:1a:e8:70:e3:f3:4a:6d:e5:72:77:4f:cc:87:96:
69:26:c6:f6:46:c0:1a:7c:4e:62:6c:23:41:89:39:ca:26:1f:
de:69:86:5c:1c:21:cd:f7:08:a1:1a:d5:92:91:be:c5:be:6e:
5b:f1:db:54:da:71:b1:71:50:f2:9b:f6:df:90:f5:17:59:6a:
30:ed:6b:38:31:0f:a2:95:bc:b8:24:17:ed:f5:8a:03:c2:f0:
36:60:84:9a:a5:80:d2:61:86:03:67:24:40:ce:83:88:16:16:
32:f8:88:24:b3:cf:ab:90:65:b2:78:aa:b6:1d:00:91:d2:46:
de:d6:46:33:ac:ce:19:5c:bd:32:e9:56:95:42:00:4f:a1:ce:
29:5d:d2:be:f5:d4:50:96:60:6e:37:24:4d:da:3c:42:e6:99:
6e:25:18:85:d3:fa:65:15:7d:04:2b:a0:29:dc:4e:20:df:86:
af:f7:df:d7:3d:99:88:ae:05:8c:8d:41:17:1b:ea:55:54:ad:
ef:be:78:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:02:37 2026 by rpki-client