Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
File: 3RiOwuSayUWFJFtLh0Whu3oc3GY.mft (raw, json)
Hash identifier: 1vAS3oV5M/pFFWGsKmKJl8Ntnuu0R0DR/IMg00L8s4s=
Subject key identifier: 0E:01:EE:73:61:82:16:FF:C6:0C:50:BC:EC:A0:BE:D8:A9:C4:3C:90
Authority key identifier: DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66
Certificate issuer: /CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66
Certificate serial: 01A0D15C17244410DC94B25E83A819AF9BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
Manifest number: 0CDE
Signing time: Thu 24 Sep 2026 03:01:08 +0000
Manifest this update: Thu 24 Sep 2026 03:01:08 +0000
Manifest next update: Fri 25 Sep 2026 03:01:08 +0000
Files and hashes: 1: 3RiOwuSayUWFJFtLh0Whu3oc3GY.crl (hash: O6fb7v66eZyU2JCPRMkbKj0hAZ0vvS6VxJu8yFptS3U=)
2: OJYwyNovCJmIKZF1nk5Dzxd0RYc.roa (hash: WPn0W+4jICl9OeInrEgUZWegwTFzjRsf+1TWPog3Wy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5c:17:24:44:10:dc:94:b2:5e:83:a8:19:af:9b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66
Validity
Not Before: Sep 24 03:01:08 2026 GMT
Not After : Sep 25 03:01:08 2026 GMT
Subject: CN=0e01ee73618216ffc60c50bceca0bed8a9c43c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:48:72:1a:65:f6:bb:12:17:70:34:1a:24:4f:
d0:77:ac:61:28:e3:66:02:f2:c0:12:b3:ed:95:63:
23:95:8f:c4:e6:45:3b:17:1c:16:6d:5e:b8:59:94:
9b:4a:0b:1c:96:62:6d:eb:5f:34:72:cc:f9:11:9d:
47:a9:22:94:73:e1:39:b6:86:e0:c4:ef:15:e8:c0:
3b:51:9c:0b:48:23:76:c7:41:cb:32:0a:00:af:47:
26:64:92:6c:8d:b0:ac:74:59:e4:75:36:ce:42:4e:
79:71:3e:81:50:36:87:f4:14:44:22:db:c0:c0:49:
5e:fe:70:df:5a:7a:29:ee:dc:75:f1:ee:0a:35:c5:
b4:5b:50:27:a7:1a:79:96:cd:da:5f:26:5f:cb:cc:
80:c5:99:8e:30:23:2e:95:b9:b9:1e:5e:4b:87:dd:
79:68:43:59:95:36:49:ad:56:23:12:f8:62:5e:93:
78:7c:16:25:38:63:ed:05:c0:77:b9:bb:83:f7:e0:
69:62:a3:c9:bc:4f:64:7c:dd:7c:7a:52:42:40:cc:
f2:1d:8c:fa:c0:b3:2c:76:dc:4b:31:b9:ee:c2:d8:
ae:26:b8:7d:96:23:4e:3e:4d:dc:62:69:d3:6e:59:
08:60:b9:99:bc:5d:23:33:55:97:fa:e1:55:b5:cb:
09:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:01:EE:73:61:82:16:FF:C6:0C:50:BC:EC:A0:BE:D8:A9:C4:3C:90
X509v3 Authority Key Identifier:
keyid:DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:4a:20:2d:05:88:06:16:d3:8c:00:50:90:74:d7:fd:1d:46:
81:1b:dd:4e:bd:63:e2:34:b0:fa:00:2c:21:65:49:cc:0b:e8:
ea:80:04:d0:69:82:7a:34:0c:0c:7e:a3:19:2f:54:03:33:f0:
40:21:b4:4d:de:12:14:d8:92:54:05:dd:b9:f0:1e:aa:a7:b4:
ac:dd:a0:6b:f1:8e:c8:78:28:13:7f:f4:91:8f:1d:f6:eb:31:
d8:0a:1c:c1:2c:1e:59:67:4b:b4:cf:65:69:07:c3:ed:a5:0a:
19:80:f9:55:a5:66:5b:18:8e:b4:ce:29:d8:10:f5:45:80:04:
c2:d7:3e:36:f3:5f:7e:ee:46:eb:16:54:85:2b:28:45:8f:eb:
22:f2:08:3b:23:86:2c:38:48:65:ee:4e:ad:51:8e:c6:4b:fc:
2a:1a:0e:26:c9:54:b2:be:59:fa:69:fc:18:6e:40:ec:95:e4:
6a:e3:e2:5e:ef:b5:2f:1b:5e:a9:68:55:68:80:47:e2:35:4a:
51:8d:88:ce:51:54:2c:81:32:db:b1:21:cd:07:83:02:90:70:
18:da:6e:65:23:9d:8f:2c:2e:9b:f4:27:28:85:96:28:0c:67:
dd:01:e5:45:f5:77:f7:14:68:d3:27:fa:e9:de:68:35:01:6f:
14:7e:ae:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:28:00 2026 by rpki-client