Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
File: 3YqroPRrqhRP2wk46RwU-UxhZQw.mft (raw, json)
Hash identifier: PeCC+ukssxhCd46ButKoENU5WB7haag4jiRYXMel1Dg=
Subject key identifier: CB:AB:CE:F9:11:D2:A9:8F:4A:87:97:53:9A:D3:5C:FA:F6:4C:D7:C9
Authority key identifier: DD:8A:AB:A0:F4:6B:AA:14:4F:DB:09:38:E9:1C:14:F9:4C:61:65:0C
Certificate issuer: /CN=dd8aaba0f46baa144fdb0938e91c14f94c61650c
Certificate serial: 01A0E362AC634360AE35E413EEFD5037239C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
Manifest number: 11D6
Signing time: Sun 27 Sep 2026 15:01:29 +0000
Manifest this update: Sun 27 Sep 2026 15:01:29 +0000
Manifest next update: Mon 28 Sep 2026 15:01:29 +0000
Files and hashes: 1: 3YqroPRrqhRP2wk46RwU-UxhZQw.crl (hash: PROupym9sDH8mIj2lGp3aZ/u6gQNsFltQDMgsMf1wCk=)
2: ipwbth9z_kAmFFiQQC69LkO_nQw.roa (hash: NejJVwemsx7RaWRb+qhN37iXZFwIo50zil0wLKpDlFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:62:ac:63:43:60:ae:35:e4:13:ee:fd:50:37:23:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8aaba0f46baa144fdb0938e91c14f94c61650c
Validity
Not Before: Sep 27 15:01:29 2026 GMT
Not After : Sep 28 15:01:29 2026 GMT
Subject: CN=cbabcef911d2a98f4a8797539ad35cfaf64cd7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:12:f9:ce:3a:8b:ad:52:b0:6f:34:a8:10:b2:
87:72:8d:0f:52:04:53:73:39:ac:23:5d:e3:56:64:
80:23:8b:04:9d:0b:26:b0:22:cd:15:ef:44:f6:0f:
43:1f:a9:f8:6b:f1:48:82:f4:d7:10:d1:08:c9:8d:
f4:21:fa:5a:c1:f3:94:80:18:8d:1e:e5:ab:d6:69:
d6:48:31:37:52:72:71:70:04:81:06:ac:07:40:1f:
e6:92:2c:f1:d0:32:16:c0:5f:4a:de:f5:b6:77:14:
a1:e4:a3:d8:00:bd:df:a6:b9:00:6f:9c:21:e2:d0:
78:80:49:a6:99:ff:91:d7:e0:7e:ed:56:20:e8:f5:
24:da:fd:e6:6b:e2:e0:ab:d1:40:37:f4:66:9f:54:
69:e7:7a:75:e3:27:23:c4:3d:96:09:4e:15:d7:ed:
6d:dc:17:7d:1f:66:ae:32:dc:a6:f8:62:72:54:a6:
ab:35:17:ca:b2:cf:24:fe:cd:b9:9a:01:51:2d:87:
27:20:a7:b5:ed:66:89:5b:44:43:3b:26:0e:0d:84:
83:e6:97:3b:d1:bf:98:89:60:60:13:f6:76:5f:ff:
e7:82:b7:e9:68:d9:c6:36:fa:a9:3f:ef:f0:e5:19:
c3:e6:4d:8d:29:b4:ca:87:af:39:0a:5c:3f:93:80:
8f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AB:CE:F9:11:D2:A9:8F:4A:87:97:53:9A:D3:5C:FA:F6:4C:D7:C9
X509v3 Authority Key Identifier:
keyid:DD:8A:AB:A0:F4:6B:AA:14:4F:DB:09:38:E9:1C:14:F9:4C:61:65:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:ed:5e:33:77:96:a0:52:0d:3f:fa:37:d8:27:6b:b9:2d:20:
b3:9a:b6:11:26:ea:08:44:6a:ba:60:13:bd:e4:ee:7a:21:20:
4c:de:fa:df:5b:f8:65:23:a8:37:22:63:e4:47:d1:a0:25:95:
67:92:74:75:c9:0b:3a:26:f0:54:0b:83:86:7c:a0:3a:3a:ef:
24:4c:df:7d:05:7f:93:26:00:92:1c:53:2d:bf:56:3f:2b:ad:
00:35:8e:19:5b:d2:45:ef:d5:00:34:f9:d8:f8:1c:0a:c3:be:
48:60:81:59:93:31:66:57:8f:a6:f9:b9:f7:69:77:ba:08:91:
32:2c:c5:31:10:50:44:4e:4e:38:f3:57:49:42:25:9b:34:ab:
56:90:33:2e:e4:cc:a1:d5:d9:05:44:73:34:b3:64:04:10:3e:
fe:c6:cb:e8:62:9f:31:a0:10:83:55:95:96:6f:8c:7c:b0:fc:
0f:30:e5:fb:c8:90:4d:72:29:49:b2:fb:1d:0e:f7:e9:12:32:
38:21:e8:1c:a4:90:b9:b0:42:70:98:5e:6f:c4:9e:9b:c8:a8:
de:8d:c4:77:32:81:3e:4a:90:8e:60:70:36:a7:46:e6:67:96:
82:d2:50:3a:1c:a1:f3:33:3c:21:18:33:2d:19:93:4c:2b:d7:
9b:e4:21:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:14:52 2026 by rpki-client