Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
File: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft (raw, json)
Hash identifier: lBBGQAKFe5AT3zLyTWaec6jSMlU0wHpwQ7xK+hfwYqc=
Subject key identifier: 23:BF:72:38:B2:74:FE:3A:09:AB:DD:5A:83:6A:AB:A2:61:CC:DC:7D
Authority key identifier: DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
Certificate issuer: /CN=dce670a6ed4c78fdd77686792f7e087598906f73
Certificate serial: 01A0E6D2C0F9B783E810DAB0D9D7A6D2D7D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
Manifest number: 1A0B
Signing time: Mon 28 Sep 2026 07:02:46 +0000
Manifest this update: Mon 28 Sep 2026 07:02:46 +0000
Manifest next update: Tue 29 Sep 2026 07:02:46 +0000
Files and hashes: 1: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl (hash: Xri6CW4HrXL5a5BvxJe5CuWhkLB3AbTZTZpVbgM1HGQ=)
2: O-gxnsHzDhdYKwTNHTFr-Ch9dJM.roa (hash: kVKhuC0dJOQWPqNSK7n1W9Bj9SrxDJpJnAeLYtUm8Yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 07:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:d2:c0:f9:b7:83:e8:10:da:b0:d9:d7:a6:d2:d7:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce670a6ed4c78fdd77686792f7e087598906f73
Validity
Not Before: Sep 28 07:02:46 2026 GMT
Not After : Sep 29 07:02:46 2026 GMT
Subject: CN=23bf7238b274fe3a09abdd5a836aaba261ccdc7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:30:3f:d7:d0:5f:d6:e9:a5:c4:86:92:f1:6f:
15:06:49:f1:bf:d4:a6:33:bf:2c:82:60:52:71:19:
1a:03:65:93:b8:b4:52:be:08:08:51:87:d6:c5:a7:
46:6e:c3:1e:61:f3:4d:d1:b1:a6:93:1f:f4:7c:10:
d0:05:67:7a:6b:37:35:86:19:d1:0f:a0:e4:50:d9:
a1:d9:87:cf:21:d0:ce:f0:7c:ee:18:cc:d0:65:ab:
03:77:6e:71:1d:22:bb:16:f2:53:70:51:a4:ba:2f:
11:d9:02:d6:f7:c8:bd:ea:af:b0:6e:79:81:6c:08:
b3:14:92:7f:8d:4d:50:f1:ce:0a:97:43:57:e4:47:
dd:52:fa:c0:44:56:f8:81:6b:5d:dc:e0:dd:46:00:
9d:8b:65:f8:b3:52:31:65:f5:b9:4a:c6:a0:5c:6b:
1f:dd:2c:14:4a:e7:dc:60:87:52:bf:bf:87:0a:f0:
dc:27:a0:c3:33:cb:f8:7a:8f:ea:72:c3:e0:b8:9d:
66:ef:53:0c:e9:5b:c1:2a:0e:35:84:21:23:91:88:
6d:49:1d:ef:f1:0a:51:39:f4:f3:7b:d3:50:97:2e:
c5:1a:3e:72:62:9c:27:a0:4d:ae:fe:bc:1a:9a:7e:
37:5a:67:f4:6a:55:85:ac:77:70:ba:5d:4f:3a:a3:
c5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BF:72:38:B2:74:FE:3A:09:AB:DD:5A:83:6A:AB:A2:61:CC:DC:7D
X509v3 Authority Key Identifier:
keyid:DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b0:c7:ad:7e:5d:89:03:b0:a1:b2:0f:f4:7b:ad:97:e1:67:
b2:c1:0d:dd:b8:88:99:a0:e1:c7:ba:22:24:eb:a3:d6:8e:c0:
83:62:25:74:7e:c5:f9:92:97:9a:8e:e3:50:84:bb:7d:b8:75:
98:66:94:f6:1a:e5:25:31:79:8e:66:28:1d:46:50:46:88:15:
84:42:02:72:8b:a9:e6:be:9d:b9:2f:ab:7d:31:f6:62:56:ee:
2c:34:0e:2d:40:8f:24:5e:64:e4:75:de:a9:80:99:b3:fe:cf:
20:36:2a:d9:a8:c4:86:4b:11:62:1b:55:5d:8e:a0:d5:5c:74:
e7:12:9c:df:49:7e:16:02:c6:6b:0f:aa:0c:40:c9:cd:47:45:
03:1c:47:45:ef:a9:ed:d2:3d:4e:70:ba:0a:c8:1a:f5:62:66:
45:3c:54:dc:ad:1c:38:27:c7:ba:57:cb:38:21:54:ae:36:7e:
c3:4c:a4:f4:f6:31:6f:f7:e2:95:06:5e:32:3c:11:9f:b7:be:
f2:d4:47:5d:3d:e9:ee:6d:2d:bc:23:65:1e:83:15:47:11:43:
f9:44:20:54:a5:e2:66:67:6f:30:a1:78:b0:dd:fd:53:ea:2c:
3b:42:67:98:4f:ef:8e:32:b6:f3:38:57:ee:1c:5e:f6:2b:3e:
06:0f:ed:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 11:10:49 2026 by rpki-client