Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
File: 3MstX7JThS8YI8ZUNOjydtBOTgw.mft (raw, json)
Hash identifier: c9tVgjy91gVI0ny0WbbgjtD6JknOI4jxW2095WmwG+4=
Subject key identifier: C9:CB:86:41:AC:AE:97:7E:44:40:6E:F9:A2:9D:44:60:A8:FE:A7:4B
Authority key identifier: DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C
Certificate issuer: /CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
Certificate serial: 01A0CCDA181C763438CA9B6F85FB1CD9480D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
Manifest number: 1A79
Signing time: Wed 23 Sep 2026 06:00:40 +0000
Manifest this update: Wed 23 Sep 2026 06:00:40 +0000
Manifest next update: Thu 24 Sep 2026 06:00:40 +0000
Files and hashes: 1: 3MstX7JThS8YI8ZUNOjydtBOTgw.crl (hash: 2zuAtuFEiY095I6JmYgRs4JsZrheVl7/F3Umx/zlggo=)
2: 9zaCEl1SgGOc-A7zIR9SmhOUbCA.roa (hash: eFtzjl4+/9tlA7bC6sKrJsHMLsAxLeLlfmditC5aZTs=)
3: _QaXkGOzguH_3SYFNe1d3y7B2Tw.roa (hash: KztSdz5ODte8K6guWxzrXZlYDG1F2rVO/Vqml3J+Q0o=)
4: fsnKswSMyeM4OK2o8J_ZzwwYiiI.roa (hash: tWk+nFmUcDykdNhoUyVPw1UFkRx/3AJQMBQrLxH1g5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:da:18:1c:76:34:38:ca:9b:6f:85:fb:1c:d9:48:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
Validity
Not Before: Sep 23 06:00:40 2026 GMT
Not After : Sep 24 06:00:40 2026 GMT
Subject: CN=c9cb8641acae977e44406ef9a29d4460a8fea74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:91:58:99:2c:f7:43:7d:13:00:92:1e:24:90:
7d:ca:23:9d:09:13:9a:d6:d7:c5:4d:bc:b2:60:da:
16:62:fc:6d:53:f3:8b:e9:03:eb:0a:f0:65:3d:7a:
92:c5:10:9a:80:cf:d3:0a:12:26:4a:09:7f:8d:2e:
76:17:1e:75:b0:e8:c8:b7:8a:df:ad:03:16:4d:13:
a7:3b:77:2c:75:fb:ad:f9:c2:c3:57:47:99:98:3d:
78:83:4f:a3:62:bd:73:91:d3:68:4f:73:6e:fb:b8:
84:a0:e8:68:97:f8:28:33:f6:03:7c:f0:85:92:a6:
05:12:91:11:2c:72:dc:b4:05:18:c6:f8:df:fb:a6:
c4:b4:1e:50:7b:b9:a2:36:2f:c6:14:5b:54:a3:15:
10:18:34:7e:a4:31:86:d7:ec:d6:88:49:7d:f2:84:
48:aa:fe:e8:ba:ed:bd:26:49:91:83:f9:65:ac:74:
f7:21:0b:d9:8b:b4:2a:a5:74:c3:83:4e:12:43:99:
63:00:68:62:09:09:5c:e5:19:c7:80:a5:00:27:23:
a2:38:ee:85:16:19:5a:7f:12:92:22:41:cb:8c:60:
42:78:a1:b5:12:1c:f3:a8:0a:51:3a:51:d4:f9:5b:
09:40:e3:81:38:4f:ed:ee:2b:fa:cc:96:13:9c:86:
ac:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CB:86:41:AC:AE:97:7E:44:40:6E:F9:A2:9D:44:60:A8:FE:A7:4B
X509v3 Authority Key Identifier:
keyid:DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e6:27:bc:c2:16:8e:1b:46:19:9c:a3:f2:b8:b0:79:98:1f:
1b:52:40:23:fa:50:7c:a4:27:2b:b4:33:60:d5:36:14:1f:6d:
0f:6e:e9:2f:c2:b8:84:65:96:a2:1e:d5:d3:1a:2b:ab:10:93:
a1:1a:0c:f6:c5:d9:be:14:be:d9:1b:52:6a:6c:52:af:04:4d:
43:23:99:a0:32:f2:55:b6:02:82:75:40:b3:8d:d6:6d:5f:d6:
de:86:b0:b8:54:f0:af:79:38:57:63:1d:89:d7:09:9f:b6:df:
bf:b8:70:43:d6:19:74:1c:d5:06:9d:b2:ef:53:bb:57:8d:31:
f7:e6:15:6f:b6:d3:4e:33:e4:ba:11:a5:bc:bb:96:9f:e1:06:
85:09:1f:07:a6:1d:33:5c:3e:fe:4a:0b:89:97:e1:1c:f3:78:
91:36:85:e3:f3:30:97:c4:d4:b7:c4:05:de:d0:cd:1a:c1:82:
5f:06:d1:87:0a:83:31:fc:45:bc:57:3e:2c:75:a2:be:d5:31:
91:6c:30:28:dd:6f:64:d0:8b:19:f3:26:ba:a3:5d:4a:cf:07:
13:b8:da:17:c3:b9:a2:04:c6:af:31:f2:c0:2e:35:15:88:09:
72:9c:73:a7:b9:fa:a5:9e:b5:41:a7:ab:3a:55:e2:03:29:38:
51:21:05:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:42:02 2026 by rpki-client