Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
File: 3ghbDRu_nngbFUsG97kUESnbd18.mft (raw, json)
Hash identifier: 4WDOsQQeXSi3IcDvHIhE08ocxTp3+f9V1kK/aMQ5Rs0=
Subject key identifier: F9:25:EA:37:44:E5:79:51:80:D8:9C:C9:2F:FF:E5:FB:F9:DB:67:9F
Authority key identifier: DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
Certificate issuer: /CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Certificate serial: 01A0CAEBF95C9924788FC06DBC73AFA6BD82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
Manifest number: 1A6B
Signing time: Tue 22 Sep 2026 21:00:57 +0000
Manifest this update: Tue 22 Sep 2026 21:00:57 +0000
Manifest next update: Wed 23 Sep 2026 21:00:57 +0000
Files and hashes: 1: 3ghbDRu_nngbFUsG97kUESnbd18.crl (hash: dk24b0K8h51EPvtR8XgXnm0tAFX2rWB339+Dj0amxkU=)
2: fONXP_fP-K2CxXzPBDLR6f-PrkU.roa (hash: iTe+/A+Cer5fpJpPxyAsGGZIQSIg8X5o4zlL2Zh7qbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:f9:5c:99:24:78:8f:c0:6d:bc:73:af:a6:bd:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Validity
Not Before: Sep 22 21:00:57 2026 GMT
Not After : Sep 23 21:00:57 2026 GMT
Subject: CN=f925ea3744e5795180d89cc92fffe5fbf9db679f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:57:dd:09:7c:6a:93:ea:e9:9e:50:1d:80:c5:
ec:2c:f2:92:e4:9c:b2:37:cb:a7:ab:cd:11:e6:3e:
dd:e8:df:bb:de:50:b8:97:72:40:e8:f9:d5:a1:fd:
20:22:06:52:34:18:98:65:7d:83:0e:6e:17:9d:2e:
fa:40:21:95:d5:ce:39:5f:6c:e5:f3:78:fc:18:d7:
8b:b3:66:c4:2d:5a:d9:33:48:62:3b:19:45:a7:bd:
e8:2e:4c:cf:b7:a8:b3:7e:10:7b:a1:34:d7:03:42:
18:34:24:a8:a0:55:97:6d:05:eb:37:00:ac:dc:69:
62:f2:07:e8:4d:7a:76:34:c0:1a:a9:e1:b3:ed:f4:
52:18:95:20:a1:1d:b2:45:43:ee:2f:a7:58:ac:ac:
85:2f:61:32:b1:e3:8f:d4:85:f1:7e:b2:5f:a7:4c:
44:aa:07:68:51:d5:31:83:2d:f6:b9:43:5c:64:20:
d1:ab:af:26:e5:93:ef:8d:7a:f5:23:da:ef:74:81:
bd:80:d3:1f:a4:bf:70:d5:ca:16:4a:c1:11:9f:0b:
fc:e6:42:48:93:9b:0a:cf:53:fe:5b:f0:a0:f7:19:
e6:9e:98:10:e0:7a:ca:aa:92:eb:c2:26:ff:d5:6d:
66:3b:b7:23:76:df:d6:58:cf:39:27:d4:65:eb:6e:
48:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:25:EA:37:44:E5:79:51:80:D8:9C:C9:2F:FF:E5:FB:F9:DB:67:9F
X509v3 Authority Key Identifier:
keyid:DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:98:ee:11:b4:88:ae:fb:37:e5:9b:69:07:17:cd:c0:29:3b:
14:94:87:6c:b5:5b:98:cf:91:81:30:bd:26:db:72:42:bd:2e:
8f:a4:6d:a3:25:55:49:5c:48:49:3c:70:53:e7:4e:6d:33:44:
32:52:96:71:02:17:9d:50:19:7e:64:70:c7:8e:0d:78:98:e0:
d2:a4:46:6c:d3:8c:49:eb:f9:9c:90:c0:2c:8b:b3:81:35:0a:
d2:99:54:67:6c:dc:ad:26:05:c7:04:38:ec:46:69:8b:ad:f9:
b2:e2:56:35:93:a1:91:30:ee:42:63:6a:a0:1c:84:12:85:f9:
87:d6:a2:ab:26:ba:fd:b5:f7:7a:ba:9a:8b:b8:4f:91:3c:7d:
92:47:15:46:56:9c:a3:99:9a:a2:a3:90:18:0e:c5:08:b1:2b:
af:ce:7d:a4:4d:8a:d6:0a:d9:44:77:3f:e4:00:ea:aa:b9:42:
b1:53:83:95:87:4e:c9:06:8b:2b:59:2b:a8:8f:3d:8f:57:9e:
20:19:e9:3b:79:a0:e5:d1:c2:ca:26:2d:97:a0:d5:36:fc:f8:
69:8c:a1:56:a5:17:d8:a2:d5:2f:d3:6f:a9:e5:8d:a5:ac:db:
08:50:1a:65:29:b3:ed:f4:f6:08:fd:11:8f:e9:41:1f:37:e5:
c9:43:91:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:16:32 2026 by rpki-client