Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
File: 3xRM6OjkQV5chqCygEmaOFwU7_I.mft (raw, json)
Hash identifier: jcwQwEZfYwV5eZpXF2jIrkqmB+Czua8HN3g9K24jiss=
Subject key identifier: EA:D5:8E:1F:8B:31:CC:B6:CC:63:EF:19:19:64:77:7F:AF:EC:A3:04
Authority key identifier: DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
Certificate issuer: /CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Certificate serial: 01A0CF35D8B43D123CE11447D55FD873F03D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
Manifest number: 10E3
Signing time: Wed 23 Sep 2026 17:00:07 +0000
Manifest this update: Wed 23 Sep 2026 17:00:07 +0000
Manifest next update: Thu 24 Sep 2026 17:00:07 +0000
Files and hashes: 1: 3xRM6OjkQV5chqCygEmaOFwU7_I.crl (hash: FlCuXU0Y1uOH+49TFahY/OceM+zePtMwoqGoSrLMaaE=)
2: IFcPSJLrXOIb360qpvfjslM8AeU.asa (hash: Uoj3vnQ4WI4zOKZ/VBdpJT4g8J+jbJ0SehrMNsQWEOg=)
3: mN6LPum92-oppYTfVnse9pFdGGY.roa (hash: Az1RSnzhomoH0PRWVFUSJEmI0WtwP1548LAxILCV7N4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:35:d8:b4:3d:12:3c:e1:14:47:d5:5f:d8:73:f0:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Validity
Not Before: Sep 23 17:00:07 2026 GMT
Not After : Sep 24 17:00:07 2026 GMT
Subject: CN=ead58e1f8b31ccb6cc63ef191964777fafeca304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ca:dd:d0:6d:d5:bf:28:8e:be:9b:08:70:05:
5b:4d:26:bb:8e:db:53:8a:d1:db:fc:72:be:a8:ea:
96:0d:53:c5:b5:21:f3:2f:19:bd:4c:3b:8d:21:59:
15:19:c9:a3:a3:7f:a5:73:2b:5d:c0:fb:14:f0:57:
79:f5:1f:cb:27:47:b6:b2:7a:86:63:45:93:f3:d8:
65:c2:b9:a6:60:20:e9:91:a0:ba:00:ad:34:bf:b5:
ff:e4:e9:0a:bd:74:23:4a:ce:64:b2:41:a1:05:80:
1c:2e:21:30:8f:12:b1:37:5d:12:cd:61:d1:7c:5b:
96:7c:81:0e:3d:ce:46:e4:86:17:0a:95:58:3b:b1:
75:31:30:45:67:b7:33:4b:46:51:c4:18:c4:28:a2:
86:05:38:84:37:a7:ee:b0:e6:87:9d:c0:b8:90:a3:
21:81:bc:90:71:a5:04:09:e9:18:c7:4f:31:65:d7:
f8:76:69:76:28:37:32:ae:4d:5b:4c:80:b1:03:5c:
9f:f1:87:39:aa:02:aa:be:f6:9f:ba:72:4e:ef:80:
2d:00:51:c6:86:f3:9f:d7:22:28:74:80:83:4f:4f:
c7:cc:a0:5b:92:4c:cb:11:2a:dd:a0:67:de:87:6e:
8b:22:2d:e8:23:5f:8b:39:d3:9d:b4:69:90:82:ee:
c8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D5:8E:1F:8B:31:CC:B6:CC:63:EF:19:19:64:77:7F:AF:EC:A3:04
X509v3 Authority Key Identifier:
keyid:DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:1d:10:21:a3:a2:26:5e:f7:05:c5:e3:56:72:d9:cc:ab:81:
dc:bf:64:7a:5a:f7:dc:2c:83:42:78:ea:d6:34:8f:11:23:ef:
e6:5a:49:72:ee:4f:ff:f3:b5:ad:a6:8a:f7:ed:b5:07:72:11:
52:1c:8b:21:43:04:d0:3d:1d:8f:f7:71:21:00:3d:26:9a:bb:
20:7e:bc:59:9a:9a:3a:96:bb:6b:3d:38:b2:ff:8f:bd:51:eb:
4c:7a:15:f9:0a:a1:5e:e2:11:e0:47:7b:0c:48:84:f9:5d:33:
c2:87:68:09:58:16:0d:46:b4:8d:ce:73:f3:33:99:56:0b:e9:
04:77:62:82:cf:69:6d:e2:f4:30:0a:21:49:d1:c4:bc:9f:61:
80:8c:d8:47:d9:e8:44:e4:42:64:57:94:32:ec:97:c8:49:9e:
5a:1c:94:53:32:fa:b0:94:7c:cc:c6:00:09:d5:83:fd:50:8a:
4b:f8:36:f6:73:4b:58:57:03:8e:33:bb:95:4e:75:6c:2d:ee:
c0:b6:63:10:e5:3a:39:f7:c4:d0:ce:94:37:e3:4c:82:ca:de:
0d:62:8e:a5:d0:c7:0e:23:e4:f3:8e:10:de:2c:b0:df:c3:01:
1e:f7:ac:cb:8c:7f:13:8b:df:9d:59:38:43:1a:ce:98:d8:a1:
ae:0d:b2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:51:49 2026 by rpki-client