Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
File: 3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft (raw, json)
Hash identifier: RzC+xFUH4k0IoOy/EO/mw/YGEQoso5c18PFQEuq20xA=
Subject key identifier: 5E:C0:DA:54:6B:84:C7:E2:5F:79:91:DE:60:EC:93:B3:38:68:A4:E9
Authority key identifier: DD:2B:C5:40:3A:B3:53:D5:FC:25:E5:AA:DC:E0:93:2B:29:F4:17:6A
Certificate issuer: /CN=dd2bc5403ab353d5fc25e5aadce0932b29f4176a
Certificate serial: 01A0E098B6668628FEEAFCE711725309E532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
Manifest number: 0361
Signing time: Sun 27 Sep 2026 02:01:39 +0000
Manifest this update: Sun 27 Sep 2026 02:01:39 +0000
Manifest next update: Mon 28 Sep 2026 02:01:39 +0000
Files and hashes: 1: 3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl (hash: 77KpyaBANW0vTvH6kE9Lj9LJwe4RBJIZ0txipxcUiJI=)
2: hitJJLRKZoeTjFy1UdVtOKCeU3E.roa (hash: P3W2mUUG6W+rjdD2ot4LgXNOj0ClkdXmzifsh0+3Km0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 02:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:b6:66:86:28:fe:ea:fc:e7:11:72:53:09:e5:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2bc5403ab353d5fc25e5aadce0932b29f4176a
Validity
Not Before: Sep 27 02:01:39 2026 GMT
Not After : Sep 28 02:01:39 2026 GMT
Subject: CN=5ec0da546b84c7e25f7991de60ec93b33868a4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:30:cf:ca:a4:93:45:59:82:af:1e:54:98:dc:
76:cb:c5:a0:00:32:2b:c4:f2:c5:36:c3:ef:ad:5f:
46:2e:13:85:af:23:8d:cd:15:b5:4d:20:da:d7:02:
6d:a8:d2:f1:1e:39:46:ef:0a:ba:11:6a:aa:b6:2b:
da:4c:62:35:1a:0c:0f:2e:18:31:8d:6f:d7:c7:ac:
8f:cd:15:bd:de:2b:6c:43:be:45:c8:d9:67:8f:e4:
20:ac:3f:84:44:5f:36:f0:7c:fa:68:69:e7:a2:d8:
e0:d0:ec:4b:5a:55:66:62:e3:00:e1:99:09:aa:b6:
67:5a:b3:c9:dc:e8:44:17:de:ce:4a:ee:6c:a3:d1:
13:ee:38:ca:70:f1:2d:9a:93:40:aa:00:9a:15:b9:
36:1f:c8:1a:f9:16:9d:3e:cc:d6:c7:59:a6:52:cc:
13:d0:0d:b2:bc:9f:4c:41:88:67:cb:fc:5a:ab:36:
e5:1f:ed:8c:e5:85:79:8f:17:5b:44:83:5a:16:40:
7d:b1:9f:fe:65:4a:e6:50:2f:7f:20:f0:f3:f9:30:
fc:71:b2:32:88:c4:8c:26:67:0f:e3:91:e1:c5:60:
2f:bd:5e:03:6e:3f:2b:61:c4:02:7b:d5:02:23:d5:
6e:ec:9d:10:74:59:43:5f:fc:5a:95:5f:62:1a:91:
54:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C0:DA:54:6B:84:C7:E2:5F:79:91:DE:60:EC:93:B3:38:68:A4:E9
X509v3 Authority Key Identifier:
keyid:DD:2B:C5:40:3A:B3:53:D5:FC:25:E5:AA:DC:E0:93:2B:29:F4:17:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:40:76:52:0d:46:50:b9:f1:97:0d:16:b7:8a:59:ac:f8:c5:
93:c8:7b:f2:dd:e8:41:47:4e:27:7f:df:7e:14:1e:85:d8:0a:
0d:49:8b:55:b2:82:60:27:c9:76:e7:fc:71:f6:db:a2:e8:25:
f4:64:0a:27:73:54:a3:26:5f:2a:02:a5:67:9b:cd:13:97:9c:
c7:78:b8:ca:0c:4f:4f:de:f9:de:0b:b5:a7:f2:f1:3b:0d:5e:
41:6b:0a:a0:0a:ac:b4:8c:9b:4a:d2:31:aa:f8:76:a0:c8:63:
f1:26:b6:4c:81:ff:35:20:23:ba:75:20:84:f1:10:57:ca:be:
54:63:f8:d0:24:84:0c:f9:2e:75:e9:52:aa:e4:2c:d8:d9:c5:
1d:79:12:a2:50:94:74:75:3f:3b:37:f8:64:17:54:af:b7:ea:
ad:19:76:97:a3:01:6a:29:c2:b3:92:a7:7a:0c:68:97:8a:46:
dc:2c:6a:79:39:dd:eb:1e:c9:f8:a9:47:5b:fe:ad:6d:c7:e2:
6e:10:5b:83:86:46:96:7b:8b:be:95:32:41:14:d1:eb:74:dc:
51:4a:33:b3:a5:2a:6f:99:3f:6e:cf:6d:33:aa:16:a9:64:27:
a1:19:b5:27:fb:c5:e1:06:34:3c:0f:19:24:3c:27:34:13:5d:
fc:d1:3e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:54:36 2026 by rpki-client