Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
File: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft (raw, json)
Hash identifier: LK5AkoOVsX+ws2D+yDNE3RDi6FhazsIYYZKYmbiwTcw=
Subject key identifier: 27:23:9C:75:98:25:65:0D:18:CB:F3:A7:3A:12:13:7D:B5:AE:04:E4
Authority key identifier: FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
Certificate issuer: /CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Certificate serial: 01A0D916DA58E104B14D43196D5A98A0270F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 15:02:28 +0000
Manifest this update: Fri 25 Sep 2026 15:02:28 +0000
Manifest next update: Sat 26 Sep 2026 15:02:28 +0000
Files and hashes: 1: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl (hash: IWTpWuKo5t51487KAxDp18ugMAebQzMro9S99MSxijU=)
2: q2os6H-xLvk9UkRKuFy2kFXrSyk.roa (hash: PRxebSo24ZxSHOEyZVv7K175GUR0r91e11qM7IDM3bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:16:da:58:e1:04:b1:4d:43:19:6d:5a:98:a0:27:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Validity
Not Before: Sep 25 15:02:28 2026 GMT
Not After : Sep 26 15:02:28 2026 GMT
Subject: CN=27239c759825650d18cbf3a73a12137db5ae04e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b1:2b:9b:bd:9a:a0:7b:7b:18:a0:c2:cb:0d:
a1:39:9d:41:fd:b5:46:dc:a3:2e:20:27:3b:6e:e9:
44:a0:cf:4b:c0:b3:89:fb:88:b7:8f:c5:33:92:9a:
f4:58:2e:f5:57:af:37:db:8e:40:c8:b9:bf:16:1c:
60:82:bc:73:de:4e:0b:fb:0f:b0:c1:84:d9:a1:b6:
79:ea:f9:bf:0c:6f:86:49:5f:ad:c9:ef:03:d0:d0:
a1:04:04:85:db:19:80:4e:23:ee:dc:ae:5f:43:07:
68:7a:57:75:a8:25:3a:60:01:1c:7b:fe:a1:67:9b:
9a:ef:95:b8:88:2f:57:03:58:18:21:1e:4e:81:81:
1a:12:07:be:bb:3e:ba:b7:f9:d3:50:1a:20:d9:18:
18:af:27:23:96:da:73:ce:82:ad:c6:03:32:30:f8:
29:da:09:5b:4a:b0:f3:ba:31:1d:93:db:ee:f5:87:
da:06:f0:95:d6:3e:7d:c6:dc:d0:a7:ce:58:88:16:
e7:58:84:2e:c0:75:35:03:86:ab:b5:ac:2c:8f:99:
f5:2f:a3:78:25:4b:fc:b4:8d:4e:9d:23:1e:b7:66:
0a:a0:a9:7a:fc:7d:df:ef:33:81:7f:fa:b4:5d:89:
e0:a7:3a:ad:66:1b:7a:6d:d0:e7:88:f3:e0:7c:79:
ab:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:23:9C:75:98:25:65:0D:18:CB:F3:A7:3A:12:13:7D:B5:AE:04:E4
X509v3 Authority Key Identifier:
keyid:FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:36:35:29:78:2e:0c:a9:8d:28:a7:5f:1c:75:f3:f1:f0:2b:
d2:90:0d:d2:7c:09:28:19:5d:46:c6:a9:cf:87:ac:cc:93:a3:
af:12:b7:9d:9a:36:9a:f2:20:c0:01:0e:31:5c:e6:13:b4:4b:
9a:11:15:37:9b:02:fc:83:68:01:fb:17:4f:b0:01:02:e5:33:
08:1b:8f:f8:3f:6f:69:94:90:9d:1d:89:69:5a:c1:f4:b0:ba:
32:18:74:59:c4:05:16:14:49:dd:c0:56:b3:c7:69:db:16:ed:
78:25:15:0f:42:2f:db:73:fb:67:f2:fa:8f:b8:d2:b7:f8:87:
ab:f8:43:40:ec:c1:4e:8e:b5:03:5e:ca:42:1f:3f:fc:5f:70:
40:e2:55:2e:5b:c1:8d:32:47:a7:1a:0a:69:7b:2d:e5:8d:75:
be:26:39:48:4e:2e:63:2a:68:a4:12:8f:0b:31:77:b0:34:01:
36:5c:7b:09:49:1a:ab:5d:cf:5f:48:bf:88:61:b8:e9:9a:41:
64:fb:24:fc:35:29:02:a5:cc:2e:52:00:4a:b4:87:34:70:da:
80:a6:b9:c6:84:f5:1c:13:7e:54:2e:23:fd:4d:50:d8:74:a1:
ce:63:58:a1:2d:84:c8:1a:7d:a5:a4:97:92:e7:6f:27:e9:6a:
6b:87:4c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:16:19 2026 by rpki-client