Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/2DlKenuF5bZ4RbiQcVAoW3HNXpU.mft
File: 2DlKenuF5bZ4RbiQcVAoW3HNXpU.mft (raw, json)
Hash identifier: XMQGl0L2/hDAfDmoDuQdKEXhAJrt93dOGHks6URuAKE=
Subject key identifier: C6:F0:80:D3:2B:5B:B1:AF:C7:CF:8F:B4:1F:72:CE:E2:3E:D5:F8:1D
Authority key identifier: D8:39:4A:7A:7B:85:E5:B6:78:45:B8:90:71:50:28:5B:71:CD:5E:95
Certificate issuer: /CN=d8394a7a7b85e5b67845b8907150285b71cd5e95
Certificate serial: 01A0CC34FFC855C102F7BEAC60A68DF56F19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DlKenuF5bZ4RbiQcVAoW3HNXpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/2DlKenuF5bZ4RbiQcVAoW3HNXpU.mft
Manifest number: E3
Signing time: Wed 23 Sep 2026 03:00:20 +0000
Manifest this update: Wed 23 Sep 2026 03:00:20 +0000
Manifest next update: Thu 24 Sep 2026 03:00:20 +0000
Files and hashes: 1: 2DlKenuF5bZ4RbiQcVAoW3HNXpU.crl (hash: hbYua+fpdbkoa6/27lRSVdAnaUYfQrYa4naJJO+hrVY=)
2: 5Z95gUiSdOG4r_uzAiN80rlQr-Q.roa (hash: 7yWAM4rRw5M/JV2A3HQ3yWCJTTzj2IN/RNPOITjQ4mE=)
3: EycWZ_dfGLG-EqHrgSZrTtUENKs.roa (hash: KJ1RAPm5hecF2qlfjfmX1AbYuEVtEPM/dltRx7gtvV8=)
4: JY1qhMWeHgfaGacafAu9A8pqPOU.roa (hash: vSlOo61MyUjunpp23wCdHaI75o9KFjuwDlia3rSNbp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/2DlKenuF5bZ4RbiQcVAoW3HNXpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/2DlKenuF5bZ4RbiQcVAoW3HNXpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2DlKenuF5bZ4RbiQcVAoW3HNXpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:34:ff:c8:55:c1:02:f7:be:ac:60:a6:8d:f5:6f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8394a7a7b85e5b67845b8907150285b71cd5e95
Validity
Not Before: Sep 23 03:00:20 2026 GMT
Not After : Sep 24 03:00:20 2026 GMT
Subject: CN=c6f080d32b5bb1afc7cf8fb41f72cee23ed5f81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:85:54:56:af:88:36:63:39:50:a7:3a:34:94:
e0:d4:82:c3:52:fb:c8:01:e4:a1:30:b6:34:4a:45:
36:f2:d2:64:86:ec:5d:48:ae:c7:90:4d:58:a1:90:
ba:9a:fb:4b:42:89:e7:89:38:d6:95:00:f0:7f:82:
bf:8c:cf:ae:9c:b9:59:6d:5a:be:3a:a0:19:d1:fa:
b6:b3:15:31:c2:49:ab:b6:f8:27:2b:41:8a:2e:47:
d9:f7:20:d8:a2:8d:bd:56:8b:10:ca:ae:78:ba:6d:
0c:46:15:8f:5f:ee:73:f2:62:8f:94:26:fd:f7:48:
ae:f9:89:e0:70:60:8d:71:8a:99:58:54:a0:6c:dc:
15:08:30:5b:25:76:da:f0:91:aa:29:ee:16:dc:1c:
ce:26:c7:91:34:61:d0:fe:27:c1:17:d5:89:86:8e:
80:12:b0:e9:74:c9:68:c3:c2:23:5c:dd:1a:ec:92:
4a:89:7b:34:36:da:e1:85:9f:03:04:c9:74:73:98:
f6:4b:73:69:56:6d:17:ec:e9:6f:2f:1f:ec:80:79:
bb:b4:f7:f2:21:6d:e6:8f:37:a8:66:cc:e7:cf:15:
3c:80:2a:74:25:b7:f3:2c:a3:e4:44:8f:41:73:10:
25:48:73:3d:03:59:0c:e5:89:0d:68:75:01:95:1d:
e3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F0:80:D3:2B:5B:B1:AF:C7:CF:8F:B4:1F:72:CE:E2:3E:D5:F8:1D
X509v3 Authority Key Identifier:
keyid:D8:39:4A:7A:7B:85:E5:B6:78:45:B8:90:71:50:28:5B:71:CD:5E:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DlKenuF5bZ4RbiQcVAoW3HNXpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/2DlKenuF5bZ4RbiQcVAoW3HNXpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/2DlKenuF5bZ4RbiQcVAoW3HNXpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:7d:0e:bd:ab:f3:03:a8:66:ed:53:16:81:73:60:1d:7c:51:
cc:16:59:36:40:05:ea:e0:41:73:c8:0b:e7:5e:6e:23:a4:13:
bc:f7:9b:90:c5:45:ee:6b:5f:0c:f1:03:56:28:2c:31:a8:e0:
a2:2c:f6:0b:a9:26:40:eb:83:b3:60:41:b5:8c:4a:cf:75:35:
46:69:c2:0a:84:27:64:97:b7:80:77:07:a0:e8:d6:38:3d:2f:
ac:b9:88:ac:ce:a2:b1:b5:b6:ea:d5:69:20:e9:65:65:a7:af:
fb:47:09:bb:9d:db:6e:21:f7:87:c5:5d:38:36:46:e2:7e:65:
36:e8:35:e1:11:49:f1:3b:58:61:9a:af:40:df:cc:ad:09:08:
c1:32:e6:83:fe:8a:ae:b9:13:54:08:bd:2a:f1:1b:7a:bf:33:
bf:95:46:0c:58:e9:bc:e9:d6:29:37:c9:0d:c2:cc:28:ea:9f:
18:2d:59:b1:19:93:fb:09:cc:6a:12:47:4a:21:7f:14:28:45:
3c:cb:cb:fd:09:7b:d5:8a:c0:a5:0e:ab:cc:d7:a2:d0:1a:c3:
77:b0:59:fa:66:24:99:bd:37:f3:88:18:66:44:33:aa:b8:d4:
30:45:9a:fc:ba:63:a2:bb:97:37:af:0d:55:16:1f:e5:fa:00:
b1:a1:bc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:04:10 2026 by rpki-client