Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
File: 3-4r9D8hqBxJLG5qn8bwdNLwohc.mft (raw, json)
Hash identifier: BwOxv7DE4FptX2qnSAPz+nqBTM0hL86+9bQGTtTZS0k=
Subject key identifier: 45:FC:D6:B5:41:96:AC:E5:93:81:BD:84:12:91:55:FB:B0:F2:D3:E7
Authority key identifier: DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
Certificate issuer: /CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Certificate serial: 01A0DC170E94C4A4D7AACD0D9A8B9DBB71D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
Manifest number: 1A81
Signing time: Sat 26 Sep 2026 05:01:33 +0000
Manifest this update: Sat 26 Sep 2026 05:01:33 +0000
Manifest next update: Sun 27 Sep 2026 05:01:33 +0000
Files and hashes: 1: 1fQajHTJp0S8KUunDd6YeyFtENM.roa (hash: mmAzmTwR/ELzJWO/mTGxkNnXnKiWntSSUF9kf4/Kzb4=)
2: 3-4r9D8hqBxJLG5qn8bwdNLwohc.crl (hash: BwISgEraxv3ZkHENpfY9VJwqKrTC2W1LGBOl2kXW7Jw=)
3: 6I-aggcE89s528aMt_8CuZqJ61A.roa (hash: 1l0d6AnGSzNrEZie8Z3fZ9Fg7c3oqYcQ4vM6hMLN2Xk=)
4: F4SS2nAtZGfBCcizniZNF8kbqKM.roa (hash: HKR9CN00lz/+opq5i3oKemga0jRQrkicKz4E2CgkRB4=)
5: SnPwDc-0nTqJfXka4bMItiAxnag.roa (hash: FsxQK4FiALmdR7pjWtArDyIp4Te0b42AEfI8eyP5E4A=)
6: kvP2mI40vax4nF6kVjBW7CPEusk.roa (hash: XQESmT9q2hkU8SLAW++EjKoLyZosWL6LnbGsHkaVg6M=)
7: rrxhY0T34NFm8dBURFOGg9BvJjw.roa (hash: CAUMQZvZz6QKlQgRUZEx4oRHdyyDBXGnUQ6HYMNXgDk=)
8: ts1pF9IuOtsG6MORS9TxN4ZUynY.roa (hash: qnP47gtGKaM8m6t6aMvd42h7A8nkD9mykwqjLsAUTYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:17:0e:94:c4:a4:d7:aa:cd:0d:9a:8b:9d:bb:71:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Validity
Not Before: Sep 26 05:01:33 2026 GMT
Not After : Sep 27 05:01:33 2026 GMT
Subject: CN=45fcd6b54196ace59381bd84129155fbb0f2d3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bc:47:5d:b0:31:1d:34:ff:76:8a:3a:03:50:
fa:de:cc:e3:d5:8e:be:36:9a:27:25:e4:b2:2f:c0:
b7:a1:a1:11:0b:af:07:38:05:95:b4:3c:80:c5:5c:
d8:0c:5a:a9:7a:de:a1:84:03:25:e7:0a:6b:e3:a6:
f3:4c:df:ad:6f:e4:09:37:5c:a4:07:26:45:58:ee:
73:d8:74:47:e0:c9:77:cf:f6:50:86:34:f3:27:65:
c9:f0:31:85:e5:0c:39:e3:18:41:de:a7:d7:7c:d1:
bf:1d:30:a3:fb:ea:f8:2e:6d:52:d3:d0:09:07:0b:
96:b7:6b:7f:52:10:d9:04:69:d7:c8:66:4e:d5:de:
35:b3:e8:6a:33:ee:b3:c2:1b:ef:39:c8:78:ba:30:
b1:9e:9e:23:fe:c1:7d:90:0f:7e:b3:84:8b:2c:09:
05:0c:a9:a8:e5:c7:a2:a4:41:cc:2a:11:b9:33:75:
fb:fb:9a:ed:a4:76:f7:aa:26:f2:68:04:38:b6:8c:
f7:b8:3e:9b:4a:b8:2e:77:d7:60:5a:e5:31:42:d5:
21:42:86:9d:d8:50:72:ba:09:c5:f8:3b:60:10:8b:
f9:5a:ac:63:55:59:c9:13:2c:09:e7:6e:04:e9:7e:
9f:5f:c2:0d:8c:98:06:39:ae:9a:9e:d6:5f:3c:be:
23:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FC:D6:B5:41:96:AC:E5:93:81:BD:84:12:91:55:FB:B0:F2:D3:E7
X509v3 Authority Key Identifier:
keyid:DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:52:a3:99:00:74:b4:90:b9:66:aa:3b:b6:14:87:b0:8b:b3:
06:26:d2:6e:38:16:71:11:4e:4d:37:6f:ca:7d:ea:c9:3c:8d:
9f:82:ed:fe:f5:c0:44:b7:92:2f:1b:a2:38:b0:5e:b5:c0:08:
95:73:0a:d3:96:87:e4:43:6a:d8:e4:72:45:35:41:ca:8b:1a:
6b:9e:d2:6d:ad:a7:3f:9f:1a:9e:89:14:b2:d2:47:4e:12:69:
39:1a:f9:35:67:2f:bc:52:be:2a:f5:93:32:c4:cf:4a:cf:8e:
1c:8a:0a:ad:9e:50:2a:10:74:18:5d:ff:43:9f:b5:1b:88:a2:
eb:e8:46:a2:48:cb:14:c0:31:47:55:3c:00:3c:f8:42:8b:14:
aa:03:84:a0:12:7f:94:39:9b:17:b3:e9:fe:66:f6:c8:b2:19:
b3:e3:51:d1:aa:2e:32:11:13:ad:12:b7:72:39:78:30:da:db:
40:c6:75:ae:f5:b6:27:8e:c6:db:c7:6b:a1:5f:8a:c8:ed:8a:
2e:3c:9a:49:f7:5a:68:78:a6:d4:30:66:df:7b:7b:76:9f:f2:
2e:0c:b6:26:4e:4d:bb:e5:a7:6e:40:8e:bd:4b:28:f6:49:91:
c3:a7:97:ed:0f:5e:53:a7:18:87:5e:f3:51:7e:c5:ce:3e:e1:
10:46:11:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:19:18 2026 by rpki-client