Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
File: F3m5XYpY_MpqgS53fn72lFP4rJg.mft (raw, json)
Hash identifier: rg3Xs4/K2TjM98m+L/zrMzTXpuDpIxwOC+lj5V9cYaE=
Subject key identifier: 3F:08:5E:3A:36:DB:15:1A:88:03:B8:47:C3:42:B3:19:33:91:12:A7
Authority key identifier: 17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
Certificate issuer: /CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Certificate serial: 01A0FF7EA2AE63882CEE5E4B05A15166D24A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
Manifest number: 12E2
Signing time: Sat 03 Oct 2026 02:01:24 +0000
Manifest this update: Sat 03 Oct 2026 02:01:24 +0000
Manifest next update: Sun 04 Oct 2026 02:01:24 +0000
Files and hashes: 1: 49LVYnP73rA79wdiuJHMdcdFkIQ.roa (hash: WzC9WsaFwOO23usPmJCjxbi0AXme2savY/KQqeCN0+c=)
2: F3m5XYpY_MpqgS53fn72lFP4rJg.crl (hash: 0ukImpwStcI5mJ8QszWBNBySgPeJkSMbOmZ5uwabqxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:7e:a2:ae:63:88:2c:ee:5e:4b:05:a1:51:66:d2:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Validity
Not Before: Oct 3 02:01:24 2026 GMT
Not After : Oct 4 02:01:24 2026 GMT
Subject: CN=3f085e3a36db151a8803b847c342b319339112a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ae:1a:41:23:87:77:ff:32:47:eb:81:ba:ee:
32:fb:7c:8d:29:13:10:d3:e9:37:69:9d:50:28:00:
1e:21:3c:a1:83:75:e5:cb:d5:39:bc:df:18:93:2f:
df:7a:b7:75:61:e4:2f:0b:f2:be:80:3c:d9:21:f2:
ea:e3:a2:01:ad:61:92:ce:4e:39:44:75:dc:56:eb:
6e:30:f8:85:2e:e6:ba:73:6d:0f:f7:10:9f:1a:bc:
17:4c:aa:8e:b5:47:9a:64:bd:db:6f:cd:c7:07:22:
7d:cc:ef:5f:88:d9:05:a6:10:43:76:75:19:79:d0:
7f:1f:47:99:70:52:26:7e:c6:94:ab:c4:57:10:d6:
47:15:b8:f5:55:a2:9c:39:92:28:00:a1:ec:20:f0:
b1:fe:23:fc:ff:78:0c:36:fb:c3:0e:7c:b2:9e:e8:
dd:95:b0:10:ab:b4:52:fc:4e:ec:91:58:1f:92:e1:
fc:8e:61:6f:f9:bc:85:d9:da:14:d3:f2:09:5d:0f:
e8:d0:f1:5a:d1:fc:03:92:2b:6d:87:c0:80:f4:60:
b7:01:74:ff:19:cd:98:d9:91:11:e3:a8:67:b2:fb:
34:0b:79:29:6c:01:f2:65:d3:25:7f:90:e1:8b:89:
d4:77:ec:d5:27:41:71:fc:63:19:31:2b:8e:96:57:
08:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:08:5E:3A:36:DB:15:1A:88:03:B8:47:C3:42:B3:19:33:91:12:A7
X509v3 Authority Key Identifier:
keyid:17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:48:94:b2:6a:74:d6:cb:b9:9d:6d:45:5b:f9:92:d8:ed:28:
71:15:d0:65:23:71:03:0f:03:0e:c2:c7:7b:55:3f:46:84:70:
86:99:21:90:1c:1e:75:9d:ce:5e:e4:07:ff:55:15:8e:17:85:
40:4f:dd:a4:6d:df:91:d3:12:0b:97:42:8c:61:f6:96:83:f8:
0e:f0:e4:2f:f1:b7:7f:9d:b7:52:9e:79:01:cd:e2:62:e8:ac:
fc:5d:47:e8:b2:b2:b6:58:57:b4:49:41:9e:c9:c3:3e:3d:09:
ce:d4:cf:e5:a5:c8:b3:65:fc:3a:0f:b8:f0:25:ef:a9:2a:73:
fd:75:79:4b:47:b3:50:22:1e:48:03:d8:aa:70:6a:2e:86:54:
55:b2:f1:b6:37:bd:38:8c:31:a8:60:e6:3d:dc:c7:fa:91:65:
5c:aa:bc:83:6e:8c:ab:4c:4e:b8:4f:65:f3:70:b4:da:a1:e5:
42:d3:f2:d7:02:e5:50:11:12:6b:26:7f:18:85:12:a9:31:45:
7c:6a:88:17:93:5d:33:14:ad:13:f5:4d:da:6c:c8:e0:7f:62:
6b:05:ae:35:77:95:ec:9a:45:3c:bf:38:78:0f:e2:2e:a0:88:
72:69:4c:17:04:70:66:59:64:ad:d1:e1:7c:90:2e:25:47:7c:
62:f7:33:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:53:49 2026 by rpki-client