Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
File: 3itcv5Z6A0nYiXBLtNYfpSajHW8.mft (raw, json)
Hash identifier: HiUrU2fIJ3JN3HRGcFHxk8mgZD6Mv3db5KaHtk9AlRA=
Subject key identifier: 17:56:D5:67:D1:35:F0:F8:71:05:76:B8:5D:74:DD:D7:C3:5C:58:8F
Authority key identifier: DE:2B:5C:BF:96:7A:03:49:D8:89:70:4B:B4:D6:1F:A5:26:A3:1D:6F
Certificate issuer: /CN=de2b5cbf967a0349d889704bb4d61fa526a31d6f
Certificate serial: 01A0CC3620FEA10473CE0BAE236D4A435803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
Manifest number: 19A9
Signing time: Wed 23 Sep 2026 03:01:34 +0000
Manifest this update: Wed 23 Sep 2026 03:01:34 +0000
Manifest next update: Thu 24 Sep 2026 03:01:34 +0000
Files and hashes: 1: 3itcv5Z6A0nYiXBLtNYfpSajHW8.crl (hash: 4GlR1IXomsbZKG6J25kfUiFU+shmn3vDlWkZM9K7tdU=)
2: xU2EDS3A1kqxHB5fmWawALQua5w.roa (hash: gy/kCjpuCiDHyb5854bh+q6WsJ4/S+45FLFM/o6soug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 03:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:36:20:fe:a1:04:73:ce:0b:ae:23:6d:4a:43:58:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2b5cbf967a0349d889704bb4d61fa526a31d6f
Validity
Not Before: Sep 23 03:01:34 2026 GMT
Not After : Sep 24 03:01:34 2026 GMT
Subject: CN=1756d567d135f0f8710576b85d74ddd7c35c588f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:90:64:4b:e9:4f:33:3f:9c:a2:fb:0b:f6:b6:
4a:01:07:0e:32:38:eb:15:af:02:7c:6a:ab:2d:9e:
e1:8c:75:82:40:92:f2:de:61:d6:c3:88:b4:31:e6:
2e:b8:5f:bd:50:7a:8d:5b:37:8b:3a:e2:75:e7:86:
da:58:bf:ec:0e:8a:79:42:b6:37:e3:87:a0:4f:c7:
91:ee:41:ba:91:e8:ba:67:4e:9b:1c:98:5c:62:cf:
00:38:66:1e:f3:4f:55:d8:cc:da:64:0d:2a:d5:7a:
74:68:55:22:9d:0a:e3:61:8f:46:32:92:e1:02:cf:
6c:bd:c0:fe:33:02:a7:87:b2:51:31:8a:fa:68:b8:
07:0d:2b:6e:8e:f2:e1:b5:96:5c:ed:ec:93:27:2f:
8e:f3:cd:5b:7b:17:c9:9a:8a:f9:ae:28:20:54:22:
bc:46:fd:66:a4:80:a6:e7:1a:e9:35:06:d7:f8:53:
70:32:71:6c:04:60:69:8d:df:ef:1f:f2:2e:e1:28:
b5:c4:f0:8a:e9:87:84:90:d3:b8:77:1f:80:53:0b:
11:9c:55:1e:12:40:f7:ab:d5:d3:c2:94:1b:bd:c2:
55:cf:9f:3a:9a:c5:f5:8f:dd:12:00:2c:4c:83:d4:
e3:12:df:d7:d1:b8:1a:42:54:ef:ab:83:4c:2e:88:
9e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:56:D5:67:D1:35:F0:F8:71:05:76:B8:5D:74:DD:D7:C3:5C:58:8F
X509v3 Authority Key Identifier:
keyid:DE:2B:5C:BF:96:7A:03:49:D8:89:70:4B:B4:D6:1F:A5:26:A3:1D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:05:0d:a1:7a:6a:5e:49:e6:a7:73:4c:5d:c8:e4:83:d8:d0:
cc:1b:33:1a:4c:91:03:05:ac:10:b5:d9:7c:ca:c3:6a:ff:c4:
b7:7d:82:e9:c9:f8:4c:32:b4:43:59:e1:93:fb:5f:81:fb:e3:
ec:f4:0a:21:60:00:9c:e5:8e:a9:f9:91:25:e6:02:ea:f6:de:
c1:bc:d7:1d:77:b7:dd:f6:f5:ea:4f:05:43:93:57:f2:1c:b9:
1f:a2:08:3d:0c:72:d6:d7:11:9f:fc:f1:63:90:2d:d1:b6:29:
29:ea:8b:fe:70:81:95:15:e2:9c:c2:11:af:b3:13:03:68:70:
b0:a6:6a:5b:fb:bd:ce:27:b3:18:97:0a:8f:84:e5:0c:cd:23:
97:5b:98:44:d3:8a:d0:e4:83:cd:c9:4a:2c:4d:1b:75:a2:5f:
06:3d:e6:54:29:1b:50:88:23:1d:a3:a5:44:c6:c2:46:52:35:
0d:df:76:96:80:f5:6e:0f:d2:23:8e:40:3f:34:bc:be:2e:09:
76:75:c9:a0:62:14:bb:aa:44:68:ff:03:f2:14:d3:68:bc:23:
b3:cb:6f:9b:29:5b:a5:10:3d:e3:2b:bb:1a:89:e4:7a:34:41:
32:6d:81:f4:f3:38:80:bb:25:8c:cd:54:66:06:cc:59:7b:23:
d3:84:41:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:38:19 2026 by rpki-client