Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
File: 3ye5OZNKLMIG_7przpyQ_cujnHE.mft (raw, json)
Hash identifier: VxTgRMiIsQuu9daWmUfz3/EoeQsvM2yjiR1gBtKLOBI=
Subject key identifier: 81:C8:31:F7:EB:58:85:72:CA:D0:82:24:24:62:65:2B:C4:05:D0:76
Authority key identifier: DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
Certificate issuer: /CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Certificate serial: 01A0CFDB051A147A03AC8BF9EB83962CCAA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
Manifest number: 1A78
Signing time: Wed 23 Sep 2026 20:00:32 +0000
Manifest this update: Wed 23 Sep 2026 20:00:32 +0000
Manifest next update: Thu 24 Sep 2026 20:00:32 +0000
Files and hashes: 1: 3ye5OZNKLMIG_7przpyQ_cujnHE.crl (hash: v7rPzlUclSPsTENCjvRTz48BM6Seab8em7vPI80pMII=)
2: W5GHuBmScEfpIPAhuqgylrz1a6Q.roa (hash: iVf+MqYMn6D3or0TDUJHTOHK/dGQL5UOldNHGxN0jow=)
3: tH4NdKGms5TfcW6T3wq-xPP5lao.roa (hash: RAFP/ByUPYbvzL7CQ6hq0JZ4+gFCb5J71aCNcV4HRvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:db:05:1a:14:7a:03:ac:8b:f9:eb:83:96:2c:ca:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Validity
Not Before: Sep 23 20:00:32 2026 GMT
Not After : Sep 24 20:00:32 2026 GMT
Subject: CN=81c831f7eb588572cad082242462652bc405d076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a2:50:0f:9c:2f:ce:05:46:da:35:80:0b:bf:
73:d6:25:57:05:89:eb:64:97:d0:dc:f8:44:ed:15:
ad:c9:7b:d1:75:9a:aa:08:90:b0:5b:d6:1a:ef:0b:
2c:44:76:c7:ad:c2:96:ae:23:bc:e1:8e:1a:c0:eb:
c8:5e:5a:22:39:f7:a7:8f:96:59:16:2d:a3:9c:b9:
e3:67:3b:f5:8a:49:21:ea:9d:4a:79:08:ad:52:2d:
db:42:85:b2:f8:25:98:ba:3d:b4:3d:dd:43:4b:7e:
e1:a3:9e:f7:a6:9a:e4:c1:ac:99:18:eb:d0:8c:3c:
4c:90:da:81:5a:9f:80:7b:7e:b6:63:79:d0:e7:57:
5c:45:c3:de:fd:1b:9f:d5:df:bf:9d:fb:d8:90:7f:
d6:a1:5a:d7:6e:c3:53:f8:b6:d1:8c:f6:41:f8:89:
92:ac:93:69:ab:fd:4d:80:aa:18:0f:84:22:80:16:
2d:7f:bc:17:00:45:b4:96:1a:19:a9:cc:0e:49:8e:
4f:03:14:c4:7d:54:20:42:30:ad:cd:69:3b:9a:92:
1c:86:14:c7:61:f7:0c:90:af:6f:a8:dd:ff:98:ec:
17:9e:70:57:ed:70:79:2d:bf:35:f2:ca:85:99:24:
eb:11:d5:3c:4f:ef:eb:43:2f:c6:82:4d:e8:ed:fa:
34:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C8:31:F7:EB:58:85:72:CA:D0:82:24:24:62:65:2B:C4:05:D0:76
X509v3 Authority Key Identifier:
keyid:DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e2:7e:8e:3d:15:42:d5:3e:65:2a:4a:89:a0:97:2e:48:a6:
73:f1:80:6a:8e:c1:e0:10:0f:d7:0a:fa:6d:e6:cd:d7:fc:f8:
40:22:8f:e0:46:2f:23:d3:6c:4a:fe:80:37:07:28:09:13:cc:
f9:ae:22:3f:39:84:8c:70:fe:db:89:b5:06:c0:43:49:85:fc:
f1:b5:6d:60:6d:be:bd:20:ec:db:9c:d6:ce:82:2c:e1:e0:ad:
f2:87:ab:bf:5d:38:2c:2e:cc:44:9b:9c:cc:d5:c9:61:ca:03:
85:8f:9c:e6:9b:5d:ce:77:e9:66:9e:02:fd:70:85:45:ff:49:
3b:5e:79:9f:a9:78:df:54:b6:dc:16:55:ca:c4:85:89:2a:cc:
87:c1:4a:20:e4:2d:c3:ef:11:d1:cc:7f:cc:89:f9:3d:7c:46:
ef:00:4a:90:f7:67:85:d4:78:a2:ca:80:f3:13:a4:3c:7f:1e:
73:c9:90:21:13:54:e9:8f:03:6b:91:35:72:be:73:b5:1f:8d:
84:30:21:e4:3d:89:b9:58:59:a0:8c:0e:fe:a7:ab:fd:34:da:
53:84:6a:9d:45:d1:0c:04:5d:88:50:41:4c:46:42:bf:1e:d1:
2d:d0:2b:3f:14:b9:30:2f:0f:80:cb:cb:35:f5:6e:16:3b:c8:
7b:61:a0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:46:35 2026 by rpki-client