Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/3ikhmJ19kMZOuzVliDH-ao9JyTg.mft
File: 3ikhmJ19kMZOuzVliDH-ao9JyTg.mft (raw, json)
Hash identifier: 5GE24OoJck92hY00hf4bRnHB3chlk1zxFTrXEjgXTMs=
Subject key identifier: A6:22:C2:73:C8:60:1F:BD:E9:62:20:B7:E3:F1:05:C4:4D:CA:ED:15
Authority key identifier: DE:29:21:98:9D:7D:90:C6:4E:BB:35:65:88:31:FE:6A:8F:49:C9:38
Certificate issuer: /CN=de2921989d7d90c64ebb35658831fe6a8f49c938
Certificate serial: 01A0E1E1A55A39338337249BEEF147A4FAD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ikhmJ19kMZOuzVliDH-ao9JyTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/3ikhmJ19kMZOuzVliDH-ao9JyTg.mft
Manifest number: 0EE6
Signing time: Sun 27 Sep 2026 08:00:56 +0000
Manifest this update: Sun 27 Sep 2026 08:00:56 +0000
Manifest next update: Mon 28 Sep 2026 08:00:56 +0000
Files and hashes: 1: 3ikhmJ19kMZOuzVliDH-ao9JyTg.crl (hash: feqD6jQFQkWSG/rw5gJqseV8Ias2phojXmusfxBNj80=)
2: _ioUT6ot6spKYeitBH6WHig08aI.roa (hash: lPf90VagjG9YZhFPp1sns8p7TmON2JIuqMSkRErr21k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/3ikhmJ19kMZOuzVliDH-ao9JyTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/3ikhmJ19kMZOuzVliDH-ao9JyTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ikhmJ19kMZOuzVliDH-ao9JyTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:e1:a5:5a:39:33:83:37:24:9b:ee:f1:47:a4:fa:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2921989d7d90c64ebb35658831fe6a8f49c938
Validity
Not Before: Sep 27 08:00:56 2026 GMT
Not After : Sep 28 08:00:56 2026 GMT
Subject: CN=a622c273c8601fbde96220b7e3f105c44dcaed15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d8:91:b8:35:c8:51:c2:9b:88:53:fb:55:c1:
d5:3f:94:40:95:00:19:e3:cf:dd:eb:9a:af:28:d6:
3a:1b:6d:09:6b:68:2f:bd:9e:46:7d:90:13:4b:bc:
68:00:ea:16:61:ff:26:15:42:f3:dd:e5:31:f4:5f:
a5:be:ad:7e:44:53:5e:cc:7f:99:fb:60:44:ad:2f:
fe:46:07:65:cd:f0:05:fe:68:93:47:98:20:73:d6:
08:88:7d:2b:2f:af:3b:26:c2:43:ea:24:bb:85:25:
a7:f8:87:ba:32:60:c0:da:fc:63:69:e7:28:92:30:
87:50:e6:82:14:b1:36:69:16:06:4d:41:5b:03:ec:
e3:21:47:f9:17:f1:30:74:dc:fc:f4:64:02:61:56:
93:93:ae:7a:81:49:6e:fe:68:1d:ca:3f:84:34:80:
a3:90:53:d3:93:19:96:91:f7:78:7f:21:74:17:48:
87:1a:6d:a6:d3:69:1d:0d:aa:d1:ed:5d:51:a0:ef:
d6:95:1b:6b:86:6a:97:16:69:9f:6b:2e:a8:3d:43:
87:36:bd:74:c4:4b:26:ce:94:b9:b3:bf:75:7f:d9:
c4:e0:06:00:45:6a:ca:7a:39:7b:1a:5b:ad:cc:3b:
52:b6:51:f0:0d:35:6a:a5:06:70:64:9e:28:56:73:
40:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:22:C2:73:C8:60:1F:BD:E9:62:20:B7:E3:F1:05:C4:4D:CA:ED:15
X509v3 Authority Key Identifier:
keyid:DE:29:21:98:9D:7D:90:C6:4E:BB:35:65:88:31:FE:6A:8F:49:C9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ikhmJ19kMZOuzVliDH-ao9JyTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/3ikhmJ19kMZOuzVliDH-ao9JyTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/3ikhmJ19kMZOuzVliDH-ao9JyTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:16:fb:cb:8f:cf:37:7d:6b:f3:a9:5b:36:94:16:89:b4:2b:
d8:af:8d:bb:5f:6f:e0:c6:1c:10:e2:68:e0:70:df:9b:77:d9:
d8:1f:f8:71:85:31:7a:5a:9d:1b:01:e5:56:96:b8:78:b2:c6:
d1:db:52:ed:99:55:50:95:05:e0:88:c7:2d:d4:65:b3:43:17:
7d:bb:b7:36:3f:47:c3:da:b3:93:f5:14:48:89:b8:ef:46:be:
e8:14:be:12:d0:b8:1b:b2:dd:57:8a:45:bf:8e:35:81:8d:6a:
7a:5e:ce:30:cf:31:09:b3:e5:58:4d:79:fa:15:aa:94:a5:41:
3f:40:a6:a1:9b:9e:45:0c:e2:ff:fb:17:9d:26:11:ce:31:35:
09:e1:97:81:62:4a:d9:87:be:95:d7:70:74:43:d0:c3:8a:4b:
02:9d:f5:ea:e7:bb:48:f2:f6:9f:7c:1d:15:f0:5b:4d:72:cd:
14:8e:0e:99:33:e3:45:9e:63:c3:b5:05:3c:31:16:be:97:2e:
8d:08:58:2a:34:ed:8c:74:a8:47:77:12:86:57:92:33:36:96:
00:1a:67:35:11:21:22:20:f5:5d:8c:2a:49:f0:e6:c6:fd:82:
f9:2b:5c:d3:40:33:33:7d:9f:b0:22:f1:7a:87:c9:e4:50:6a:
8b:32:e5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:34:16 2026 by rpki-client