Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.mft
File: a3fOhCRDu4qW_CUJDZ66_5Vnol4.mft (raw, json)
Hash identifier: bEdKPl3IyAT39LhCVzCgIgxD+GjVx69w+n7OV0j9qDY=
Subject key identifier: B2:B3:03:D2:74:95:BD:7A:02:56:06:46:E6:1A:FF:A0:D9:A7:2C:E1
Authority key identifier: 6B:77:CE:84:24:43:BB:8A:96:FC:25:09:0D:9E:BA:FF:95:67:A2:5E
Certificate issuer: /CN=6b77ce842443bb8a96fc25090d9ebaff9567a25e
Certificate serial: 01A0EB8A386B1DC987302A1BAA8D9F0BDFD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3fOhCRDu4qW_CUJDZ66_5Vnol4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.mft
Manifest number: 013D
Signing time: Tue 29 Sep 2026 05:01:39 +0000
Manifest this update: Tue 29 Sep 2026 05:01:39 +0000
Manifest next update: Wed 30 Sep 2026 05:01:39 +0000
Files and hashes: 1: AYWssxj1PLbVr_URF-ZIiz6BS4I.roa (hash: 9obR855p0IhaLrIXPPGSL2nYoYCxku1wM9uG/XbR5LA=)
2: a3fOhCRDu4qW_CUJDZ66_5Vnol4.crl (hash: nfKM4uTuG2ANrmG4ZCJfDfOaGZAv17NpDEi09ZLVnk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3fOhCRDu4qW_CUJDZ66_5Vnol4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 05:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:8a:38:6b:1d:c9:87:30:2a:1b:aa:8d:9f:0b:df:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b77ce842443bb8a96fc25090d9ebaff9567a25e
Validity
Not Before: Sep 29 05:01:39 2026 GMT
Not After : Sep 30 05:01:39 2026 GMT
Subject: CN=b2b303d27495bd7a02560646e61affa0d9a72ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:75:d0:e9:60:99:d6:9f:53:16:39:c2:51:b6:
7d:cf:78:b5:4e:71:6b:db:bd:a1:c6:03:02:ae:10:
e6:d7:81:6c:45:53:7f:a5:02:6d:34:bb:b2:b5:b8:
8c:ee:4a:92:14:41:52:18:79:96:64:af:9a:d9:97:
3e:4a:76:c7:c4:7c:b4:bc:f9:5d:5d:7b:ba:52:bc:
63:a7:c0:7c:b6:17:bf:de:5c:a6:51:9e:f3:58:37:
fb:c8:69:76:67:7f:b5:f2:3f:2b:f8:9e:c2:5e:f5:
bb:5b:1e:e6:81:ea:bc:1f:3e:03:95:05:14:84:e9:
c9:c5:90:a9:d3:b0:5b:eb:93:2a:7f:fe:45:e4:26:
57:87:b5:6c:f4:d2:8e:da:4a:f9:54:7e:e8:aa:85:
7f:43:44:e1:f2:42:3b:d4:46:36:f2:6c:de:0a:1a:
46:da:c2:4c:b4:52:19:95:da:00:de:39:ab:bb:c9:
77:8c:e2:ca:24:85:cc:4a:02:f9:4a:fe:b3:12:c7:
8a:9a:93:ed:3c:2b:1a:75:32:f7:2d:f9:51:c9:5b:
a1:79:e4:95:65:97:50:96:2b:63:38:cd:f3:c8:4f:
29:31:3f:ad:a7:40:b9:88:4f:bd:af:25:cc:e6:5d:
cb:e9:ae:a1:4e:49:d2:a8:47:90:7e:20:cf:e4:b9:
1b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B3:03:D2:74:95:BD:7A:02:56:06:46:E6:1A:FF:A0:D9:A7:2C:E1
X509v3 Authority Key Identifier:
keyid:6B:77:CE:84:24:43:BB:8A:96:FC:25:09:0D:9E:BA:FF:95:67:A2:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3fOhCRDu4qW_CUJDZ66_5Vnol4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:5c:16:36:ac:29:a5:9e:8f:41:ab:05:1a:bd:27:c3:b0:a3:
a3:c2:8e:46:9a:73:a0:cc:07:82:cb:0c:56:e8:5d:0f:79:cd:
68:39:26:bd:a4:fe:28:eb:f0:c8:77:24:a8:db:5c:b2:1c:a9:
f5:97:f0:0d:cd:09:36:58:bf:5a:6e:eb:0a:56:95:54:0c:09:
d4:8e:d1:94:04:e0:64:96:8f:1d:fa:08:85:98:d4:45:0f:3c:
5f:ef:81:a3:bf:14:2f:53:13:ba:e0:22:d6:e4:45:92:b1:c6:
79:e1:11:55:d6:12:0d:61:d0:b5:5b:8f:7f:17:88:23:c9:9c:
ba:36:9d:3b:b8:be:bb:b7:86:fd:69:0f:04:36:47:77:f5:c5:
73:4a:cc:34:da:3c:87:3b:a9:32:ba:1f:07:4b:23:e4:42:09:
57:b2:a0:90:d4:73:db:ca:07:fe:b0:af:18:1e:29:48:33:96:
2d:df:b9:f8:d7:0d:1c:5d:d6:a1:8d:51:ab:82:02:5d:10:0e:
f1:72:2a:e7:53:31:c5:51:5f:41:12:11:4a:80:9f:47:ae:a2:
1f:78:69:ef:d4:3b:eb:50:92:49:7e:1e:78:2f:70:8c:27:dd:
11:76:c9:a7:7e:62:bf:46:0c:b5:0a:c9:f6:92:7b:e0:41:47:
0d:bb:64:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:23:31 2026 by rpki-client