Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
File: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft (raw, json)
Hash identifier: Ij3U+PQJ/vGh1koUe1FZEgjjGkDfXZP6S8M1ceagnPw=
Subject key identifier: A2:6B:4F:11:B3:61:6A:E8:A9:71:ED:D0:DD:AD:97:15:0E:75:4E:2A
Authority key identifier: DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
Certificate issuer: /CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Certificate serial: 01A0CF6D470E820C50FE8624633A3DF72CF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 18:00:40 +0000
Manifest this update: Wed 23 Sep 2026 18:00:40 +0000
Manifest next update: Thu 24 Sep 2026 18:00:40 +0000
Files and hashes: 1: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl (hash: TxekJX4RRG5ageyJ0U7n3sYfPFxVrKfqBsDoHgvNsIo=)
2: 7DFhLxfNsNdBG7misMM2Gd6pq98.roa (hash: 91BxkeL//UY4lGamLg4LH3uIYXXl6dNvyu0iOuqwroo=)
3: kOLGFIQ68N0t89GXfLW_l-tuaZs.roa (hash: JEbR7GHzj1yo7N6pB32D4eZu3GhxlqvfkdXGhcPXMmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6d:47:0e:82:0c:50:fe:86:24:63:3a:3d:f7:2c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Validity
Not Before: Sep 23 18:00:40 2026 GMT
Not After : Sep 24 18:00:40 2026 GMT
Subject: CN=a26b4f11b3616ae8a971edd0ddad97150e754e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8f:8b:39:96:6f:4c:c0:ed:7e:21:00:d7:3d:
a2:97:25:f9:3a:fe:9b:b1:88:09:1c:f5:f5:bb:79:
45:cf:c5:e0:91:76:44:2f:c8:71:f2:f7:d9:b4:34:
4b:3a:4c:71:07:3d:9b:61:47:81:a6:82:02:d9:1f:
20:76:39:65:95:13:78:43:47:b2:39:45:3e:ec:17:
a2:fe:42:d0:bc:3d:43:30:b9:56:74:d0:0a:f5:96:
a8:a4:bf:67:72:36:27:9e:d8:f3:6e:27:7f:e9:17:
7d:b1:21:00:70:d8:f5:47:b6:cd:32:f7:08:4d:9d:
49:30:54:a6:7a:e3:e4:09:8e:e8:c7:35:14:dd:33:
ce:b6:86:7f:3f:a3:2c:c0:6c:bb:ad:1d:56:65:ff:
21:ad:07:cf:29:f3:64:4e:c9:7c:d9:64:85:21:af:
97:bd:e4:47:de:0f:7d:2b:19:f6:50:72:66:15:d9:
85:0f:1c:16:fc:36:c4:19:66:ef:c3:d0:40:62:cb:
a1:4c:e7:4d:48:b9:9d:a7:0a:5a:95:31:3a:fa:92:
41:ef:f0:72:82:77:0f:07:8d:95:39:89:82:a6:29:
80:b0:29:2d:97:7d:fb:ee:ae:e6:5b:31:d6:ef:d0:
9d:b1:c4:92:d4:0f:0d:df:ce:3a:e4:83:87:de:63:
7c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6B:4F:11:B3:61:6A:E8:A9:71:ED:D0:DD:AD:97:15:0E:75:4E:2A
X509v3 Authority Key Identifier:
keyid:DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ff:6a:4b:d9:eb:78:1a:ed:31:7c:f4:44:a3:26:48:f5:e3:
9b:83:04:ee:39:92:50:96:64:89:1d:4e:b6:cd:51:7b:ce:7a:
70:a2:b6:6e:f4:a8:8f:59:ed:d4:06:c0:5e:6b:bc:91:7c:96:
51:43:a3:0a:9f:48:f2:4a:d0:98:71:c1:25:56:2d:98:96:66:
fd:cb:f1:4c:d4:19:cf:28:ad:8f:c1:18:fe:44:65:66:f1:5f:
80:f8:4c:d6:c4:b1:bf:4e:68:b2:f8:0d:b6:e6:3c:78:7c:2b:
e5:d0:bb:21:4c:a4:ed:f2:19:5d:fb:be:44:bd:04:75:c9:70:
71:d3:d0:d5:ce:1e:d4:d1:2b:76:d1:5b:a2:05:f5:d8:09:14:
87:9b:c6:91:8d:54:54:ae:45:9e:66:79:26:29:54:dd:68:16:
24:12:76:7f:12:6e:6d:1c:e0:5b:00:d2:22:46:cb:4f:30:09:
ed:a9:f2:48:78:0a:91:ee:5d:41:9a:3e:0f:36:8c:0a:d5:77:
2d:e1:a4:38:8f:89:d4:b5:7e:3b:9a:15:42:16:a5:3e:35:ec:
6b:86:d4:81:86:0c:4b:48:9a:a1:51:e3:1f:e4:03:49:a6:cc:
21:09:31:f6:88:0f:e4:5e:17:32:d9:10:b2:f6:15:28:e1:2f:
b3:74:d4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:23:06 2026 by rpki-client