Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
File: 3KonREWCbj15XD7RjCdwDurBymI.mft (raw, json)
Hash identifier: EIaeNy0ophcOUFR5q4jk2MGCD3YzrHALJxX3goNnAU4=
Subject key identifier: 01:09:DD:49:36:E5:41:F8:C7:45:75:E0:79:D1:C4:78:71:78:DC:F3
Authority key identifier: DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
Certificate issuer: /CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Certificate serial: 01A0D200653E0F4DEC40A1D84DE1D284B5A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
Manifest number: 11A8
Signing time: Thu 24 Sep 2026 06:00:36 +0000
Manifest this update: Thu 24 Sep 2026 06:00:36 +0000
Manifest next update: Fri 25 Sep 2026 06:00:36 +0000
Files and hashes: 1: 3KonREWCbj15XD7RjCdwDurBymI.crl (hash: oTYb/uJFk/7J7id+bxhykTFwDYD1rrOYdE6Vd28JKqM=)
2: Bt0xMHy61A7htWo3HwQx0xRHYvM.roa (hash: NFwVkcrwORwq5qtsr2xFeijRYhFUAx9h0rzS5lfRuF4=)
3: td-NlOb4bFlwywB-P4mKtEXzRI0.roa (hash: 24q0c0plzrduo92mY1zavTYuQ8C/sxm4E7FFcgXlk2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:65:3e:0f:4d:ec:40:a1:d8:4d:e1:d2:84:b5:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Validity
Not Before: Sep 24 06:00:36 2026 GMT
Not After : Sep 25 06:00:36 2026 GMT
Subject: CN=0109dd4936e541f8c74575e079d1c4787178dcf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:82:9c:d1:d1:0e:2b:95:17:c5:5b:25:c0:c0:
27:17:95:be:7a:bf:99:2d:64:c7:14:37:e6:32:4b:
e1:4b:0c:ce:03:d0:8c:1b:a4:0c:d5:95:85:7e:a5:
8c:cd:a7:7f:a2:e0:4a:75:19:28:40:42:6d:79:a7:
06:c3:03:21:1b:bd:42:7d:9c:ce:31:bc:22:94:1e:
d2:c1:4b:0b:be:bd:70:b5:49:fe:6a:eb:e4:9f:ea:
75:8b:1c:7f:84:fc:20:55:83:e0:95:6c:a5:53:a9:
4c:7a:4a:b7:89:93:40:40:60:0c:e6:34:8b:43:85:
9e:45:32:cb:34:18:d9:e2:d1:e4:a4:f5:ea:66:88:
7b:a9:39:66:28:d3:66:75:24:b5:67:ea:a9:ba:4a:
7f:4f:86:c0:5c:7c:ee:e0:61:17:63:7a:fd:83:81:
85:36:64:57:1b:99:53:8b:a2:4c:c6:9c:ad:e0:16:
d1:d5:ec:34:9b:68:4d:b6:0a:6f:b1:24:c3:2b:a3:
1e:91:2e:d4:d3:0c:a6:2e:32:9c:99:a6:ba:8e:fc:
0b:5b:e0:a4:23:58:f7:08:8b:75:01:c0:42:ad:9d:
15:e2:c1:fc:64:0f:22:61:9c:ea:20:45:86:ed:8c:
17:42:8c:c7:5c:af:a6:22:d5:07:90:5e:fa:5e:66:
38:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:09:DD:49:36:E5:41:F8:C7:45:75:E0:79:D1:C4:78:71:78:DC:F3
X509v3 Authority Key Identifier:
keyid:DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:5e:77:fe:02:4d:97:de:46:3f:19:6c:1e:3e:56:69:36:e0:
0c:c6:81:c1:dd:1e:0f:e9:f9:9b:01:e3:d2:64:21:cc:90:e5:
a9:51:94:ae:37:ba:f4:25:f4:4c:53:38:d6:f4:ea:28:d6:c8:
25:72:9e:d1:e8:57:b5:c4:60:f2:78:c7:ff:28:0f:e9:a7:9b:
ba:98:d9:e6:f7:b6:b9:e4:d2:73:cd:81:4a:88:29:41:86:d8:
bb:a4:bb:de:7b:8d:3b:2a:20:53:2f:28:b6:50:ef:94:65:e7:
da:9f:66:4e:bd:7f:38:aa:60:17:e8:47:36:65:3c:1f:4d:b2:
9f:44:fa:c7:86:8f:bc:2a:eb:fd:c3:00:fd:76:be:44:a6:89:
ac:d4:41:5e:ad:4b:8d:25:52:f2:8b:28:0e:ac:bc:14:a7:97:
d1:22:89:af:a3:22:5a:5f:44:93:33:73:52:ed:72:6a:3b:fd:
37:78:da:6a:1d:3e:da:73:b8:16:eb:a1:18:58:4c:95:11:61:
5a:93:76:f9:3b:20:5a:26:b6:e0:57:ff:99:3f:58:09:7e:3b:
c7:b5:dd:b1:49:5b:0f:2f:3e:4f:33:ae:b7:aa:10:08:f7:18:
5b:90:5f:5c:ad:71:f6:c0:3f:e2:40:26:3f:fb:d3:ca:23:25:
4b:ac:de:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:27:51 2026 by rpki-client