Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.mft
File: 01VdufbNy92wUqRTSO8Nam1bwcE.mft (raw, json)
Hash identifier: p8As9Ke60EqhwdYLFeRTKrypVMW+0bgNpTVcMCHMBIA=
Subject key identifier: A8:26:B8:8B:D3:A7:5B:14:44:D4:57:E5:46:68:08:09:49:A3:02:A8
Authority key identifier: D3:55:5D:B9:F6:CD:CB:DD:B0:52:A4:53:48:EF:0D:6A:6D:5B:C1:C1
Certificate issuer: /CN=d3555db9f6cdcbddb052a45348ef0d6a6d5bc1c1
Certificate serial: 01A0D011EE988A2A41CDB332F79A70CC7D29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01VdufbNy92wUqRTSO8Nam1bwcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.mft
Manifest number: 01C3
Signing time: Wed 23 Sep 2026 21:00:31 +0000
Manifest this update: Wed 23 Sep 2026 21:00:31 +0000
Manifest next update: Thu 24 Sep 2026 21:00:31 +0000
Files and hashes: 1: 01VdufbNy92wUqRTSO8Nam1bwcE.crl (hash: T4QYxpR1mAd44zKf6V2KAdgelxdkS2lnN2ugsunjkF4=)
2: szLd58h9ss7j2xagBuMXF5WP0yk.roa (hash: 8ob8pb7Gxq2C51p/RiIuL1KyizGRkOlyyDDvo7AtTm0=)
3: uXRaOLAunE2UdEOM1lTRedX_8jQ.asa (hash: 5LEXYsw/l0m4ESugD1zDY5cY+ORuB71qGoxgj35oZFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/01VdufbNy92wUqRTSO8Nam1bwcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:11:ee:98:8a:2a:41:cd:b3:32:f7:9a:70:cc:7d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3555db9f6cdcbddb052a45348ef0d6a6d5bc1c1
Validity
Not Before: Sep 23 21:00:31 2026 GMT
Not After : Sep 24 21:00:31 2026 GMT
Subject: CN=a826b88bd3a75b1444d457e54668080949a302a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:54:2a:41:cb:e3:b0:fb:ae:9d:e7:99:c4:ce:
6b:d7:a6:86:3c:3c:a9:c5:2e:28:14:cb:51:5c:ea:
57:19:7e:2a:15:3a:f9:32:57:a2:33:d7:76:88:fd:
d0:28:db:5b:26:b5:32:14:26:d0:d0:ee:f0:d5:03:
6d:0b:94:17:98:75:60:3a:1b:97:c8:80:71:88:ca:
8a:61:9e:44:f2:0b:d9:ec:77:59:30:8b:04:40:90:
92:89:a3:43:f6:41:05:0a:ff:a8:5c:35:11:55:df:
b9:7a:7f:6a:7f:5a:f2:60:47:cf:55:c7:4c:0b:48:
aa:f9:54:1a:d1:80:34:36:3e:d3:59:80:f9:16:5d:
fd:aa:65:29:36:a0:5c:0c:c2:78:72:1a:34:45:bc:
55:99:77:28:e8:96:bb:72:dd:d9:5e:76:af:a7:af:
82:0b:66:e2:eb:a7:5f:bb:52:6d:ab:29:7f:4d:9a:
89:17:60:16:25:ac:6d:95:8e:e5:0c:1c:53:cb:a0:
de:31:ef:9d:b3:8b:42:ac:1a:61:e9:b5:23:f9:19:
b7:5f:72:df:12:0e:48:c5:83:3d:e2:22:ab:ee:45:
81:d9:86:6c:8c:ba:3c:ab:64:ac:34:67:1a:39:72:
ee:d5:77:9b:2f:14:03:3f:1f:d9:27:5e:46:8f:22:
a1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:26:B8:8B:D3:A7:5B:14:44:D4:57:E5:46:68:08:09:49:A3:02:A8
X509v3 Authority Key Identifier:
keyid:D3:55:5D:B9:F6:CD:CB:DD:B0:52:A4:53:48:EF:0D:6A:6D:5B:C1:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01VdufbNy92wUqRTSO8Nam1bwcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:6a:4f:be:76:c0:24:ec:f4:68:ef:6b:45:2e:a3:02:1b:fb:
36:f4:40:44:c6:79:ad:4f:12:5c:6f:1d:c0:99:bc:40:07:47:
86:1e:38:5c:3c:0a:a4:72:fe:a1:fd:89:aa:af:af:5c:78:59:
d3:2a:12:b2:21:34:7f:bf:2e:2e:21:3e:ee:d6:a1:13:88:ea:
e4:a6:e1:91:a4:fb:25:29:fd:5c:65:20:10:f3:de:37:42:c5:
7b:39:60:99:59:94:c9:7e:f1:cf:05:4d:b2:3c:a3:b1:ca:40:
48:42:b7:44:97:eb:17:fb:0d:de:58:8a:d4:95:d0:ae:1a:46:
d9:f4:5a:9e:20:06:4d:33:88:aa:09:48:00:8b:d9:13:d8:b3:
75:18:35:6c:84:ce:b0:50:2f:59:80:c6:de:06:00:36:bf:06:
bb:3a:88:d1:a8:78:f4:19:07:fc:ed:4a:17:db:cb:1f:95:7b:
81:ae:60:81:4a:eb:57:36:52:bf:4a:0d:85:fe:46:32:41:eb:
f8:4d:93:5c:bc:73:50:cf:1f:96:db:4f:30:0c:16:ca:43:5e:
94:ff:cd:bf:55:6f:ad:61:63:b5:ea:42:c2:a7:4b:60:2f:ad:
c0:03:7f:6f:05:8f:ad:6e:37:a4:db:f6:35:53:7e:dc:96:4d:
8a:e9:f2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:06:53 2026 by rpki-client