Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
File: CioVfwBRX5W2313A1S6xtdQ_3lw.mft (raw, json)
Hash identifier: m7Hiz9cJUpF153BG2zQqO3wnWouPEbkUoUUqBPlUfd0=
Subject key identifier: D4:62:D7:16:A1:79:36:C3:57:EC:09:4F:69:28:8C:6D:09:86:D5:7D
Authority key identifier: 0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
Certificate issuer: /CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Certificate serial: 01A0CAB491DF73872CA6EED20539D20F39DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 20:00:26 +0000
Manifest this update: Tue 22 Sep 2026 20:00:26 +0000
Manifest next update: Wed 23 Sep 2026 20:00:26 +0000
Files and hashes: 1: CioVfwBRX5W2313A1S6xtdQ_3lw.crl (hash: Q43PKaIO8Rr9+rtbHyq6D/2OhgOZI5EFuwBTX3quxrs=)
2: I3QKFov--NDtK49UPqV2RMA_ZSs.roa (hash: 5bH+Qg+gTHLwp5S4Kx2BVafx6XVTZnjE39jOohvcHdQ=)
3: fl2pyBnIoQ-VEdTa69hXXV6H5mw.roa (hash: EGcyAF9xhaMQ1ne1hnq1kD386OD8JebtGbSKaTIP2q4=)
4: lLkHxJqkE8fba1rru9i3aJf3RMY.roa (hash: s90wIgzsP8JNTbm6DZweEnvciipAvCOC57+xLPE4UUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b4:91:df:73:87:2c:a6:ee:d2:05:39:d2:0f:39:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Validity
Not Before: Sep 22 20:00:26 2026 GMT
Not After : Sep 23 20:00:26 2026 GMT
Subject: CN=d462d716a17936c357ec094f69288c6d0986d57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0e:01:06:d1:02:c3:79:29:f0:f5:66:d8:e8:
b0:9b:fa:83:e4:7c:6a:61:51:4b:4a:06:cb:71:b5:
91:6f:c8:97:4e:4a:4a:a0:e0:22:86:c2:9e:81:40:
45:9c:93:57:1e:71:c9:09:ca:6b:3c:0d:a8:60:cd:
2d:b2:53:80:60:7a:08:8b:ce:7f:d4:c6:32:47:d9:
92:7a:17:1b:5f:35:9d:50:4d:41:79:1d:37:77:26:
f9:09:3d:c4:59:43:75:65:23:6e:cb:55:d4:db:f4:
54:07:6f:32:53:30:25:cf:3a:cb:09:ca:56:24:7b:
5e:ab:95:1d:16:74:23:d3:0d:e6:f6:10:8c:e5:63:
e2:0e:f4:23:bc:d7:fb:33:b5:52:52:6c:b9:6d:6d:
82:67:d7:bd:39:1b:bf:65:ec:33:0e:18:1d:06:8f:
e9:25:b4:86:76:bb:52:bf:cb:07:4d:68:6b:e1:26:
97:04:ab:6e:5f:9d:f6:a1:c9:98:76:85:e1:84:ff:
00:4b:35:8b:31:31:83:28:88:af:b5:20:81:d7:bd:
83:46:fa:a5:7d:1c:5f:96:37:64:14:78:0f:a9:2a:
31:26:bf:80:ab:ab:af:8d:e7:c6:35:53:8f:12:6f:
b4:15:2e:32:fa:b4:6f:99:4a:af:6c:83:46:40:a1:
27:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:62:D7:16:A1:79:36:C3:57:EC:09:4F:69:28:8C:6D:09:86:D5:7D
X509v3 Authority Key Identifier:
keyid:0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:27:43:33:62:98:2a:50:21:e9:f7:54:76:3c:77:46:9a:8a:
76:81:a0:0e:f5:cf:6a:81:74:c6:95:d1:03:8d:e0:9e:03:db:
ae:97:b9:e5:ea:8e:53:f2:3c:45:2e:4f:56:45:3a:4a:72:43:
a9:0a:fb:0c:20:26:a1:73:68:3e:ba:4d:13:d1:d0:df:be:83:
e6:3d:8f:ff:3f:55:45:c6:37:6c:91:2a:65:fc:cb:7d:1e:74:
5c:b7:d2:30:f4:42:19:f7:c7:38:85:93:2f:1b:9f:27:e4:cb:
d7:5a:09:54:61:aa:88:ae:2b:42:8e:55:86:9b:9b:6c:7e:f9:
f3:f4:56:22:ed:ea:22:c9:eb:24:ed:3e:b1:a0:2a:dc:4f:8a:
87:80:1d:c2:c9:c6:4c:4c:a6:9e:3e:37:f1:0a:5c:6b:9f:26:
e9:e6:27:f9:3f:3d:52:fa:f2:bb:3b:0c:1d:64:9e:05:5f:bc:
b1:ac:5d:1b:26:ed:e9:33:ba:ce:80:e3:31:28:a9:11:ac:40:
14:25:b2:48:2e:5a:bb:95:6a:df:b4:d9:88:68:30:db:5e:50:
fa:1d:77:a4:93:5e:4a:dc:bc:ad:81:5f:68:37:86:aa:e4:da:
5f:ab:54:46:b3:6b:42:15:2e:7a:d3:87:be:82:7f:7b:6b:ab:
c9:6f:34:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:27:46 2026 by rpki-client