Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
File: 3hL5ZansM-LC6HthYb7vuL4obKM.mft (raw, json)
Hash identifier: sTSg0pKZUmTYxlDTJH4j77Wmn/53eM6Lbi3Fl1P2/6g=
Subject key identifier: BC:B5:A5:A0:41:15:6C:EF:17:7F:B5:6C:29:E3:91:3B:15:D9:8C:40
Authority key identifier: DE:12:F9:65:A9:EC:33:E2:C2:E8:7B:61:61:BE:EF:B8:BE:28:6C:A3
Certificate issuer: /CN=de12f965a9ec33e2c2e87b6161beefb8be286ca3
Certificate serial: 01A0D34AB4CAA307F4F855B45B9A43EC8809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
Manifest number: 1891
Signing time: Thu 24 Sep 2026 12:01:23 +0000
Manifest this update: Thu 24 Sep 2026 12:01:23 +0000
Manifest next update: Fri 25 Sep 2026 12:01:23 +0000
Files and hashes: 1: 3hL5ZansM-LC6HthYb7vuL4obKM.crl (hash: 56d06QXAouR1AIXQd0zIaIJK22v9NHA7SSjMYC1e5kY=)
2: dQKWrb4274MA9TnUoPK0iLguRN8.roa (hash: iabYGi8dw6jC4+Zg8izYgwpn552JIuXwr1GRxu62hag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:b4:ca:a3:07:f4:f8:55:b4:5b:9a:43:ec:88:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de12f965a9ec33e2c2e87b6161beefb8be286ca3
Validity
Not Before: Sep 24 12:01:23 2026 GMT
Not After : Sep 25 12:01:23 2026 GMT
Subject: CN=bcb5a5a041156cef177fb56c29e3913b15d98c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cf:78:c0:4e:b1:34:88:26:2b:ff:2a:13:a7:
16:47:da:50:27:28:52:60:1c:b8:08:91:85:35:84:
44:f6:82:84:b5:eb:b5:79:c8:c5:df:cb:2d:7c:34:
40:96:a2:63:6a:f4:b3:ec:67:56:0a:24:08:7e:34:
36:6b:df:7f:25:79:4a:07:a7:bb:86:45:62:bd:20:
aa:ef:64:8a:ff:ae:ad:36:cc:1d:40:0e:83:ef:d7:
9f:5c:10:65:2b:ab:0f:a1:f8:4f:0e:1c:dd:af:a3:
b8:9c:49:1e:ac:9b:2f:e2:be:a1:de:f8:ce:0e:27:
37:fd:b0:36:9e:94:f1:64:3a:d3:5c:1e:cc:77:a5:
e4:90:29:9c:cf:aa:72:01:b2:86:16:c5:6c:bd:0a:
25:1f:1e:b2:fa:7a:32:3c:a6:4b:37:03:0c:b2:28:
e1:eb:58:f8:c8:9e:3e:32:ee:c8:a7:54:1b:5f:9b:
77:86:ab:20:0d:25:74:72:c7:77:b4:f9:78:96:61:
54:da:45:e1:f3:53:21:70:61:51:11:68:38:a8:f8:
9a:bb:cf:fb:db:bf:ae:24:c0:08:a9:07:d8:20:94:
6d:27:ab:ef:87:70:55:e6:f7:0f:ed:ae:d3:25:c7:
bc:08:98:7a:b6:65:2c:62:fa:e1:7e:d6:95:2c:f8:
ec:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B5:A5:A0:41:15:6C:EF:17:7F:B5:6C:29:E3:91:3B:15:D9:8C:40
X509v3 Authority Key Identifier:
keyid:DE:12:F9:65:A9:EC:33:E2:C2:E8:7B:61:61:BE:EF:B8:BE:28:6C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:0c:b0:52:5a:1e:81:bf:21:a8:7d:e9:b3:57:85:8c:19:34:
93:10:aa:2c:30:49:51:ef:2d:58:d0:fa:85:dc:1c:c2:2c:90:
ff:99:37:75:6a:b8:50:47:93:16:0b:2f:65:e5:9d:9f:ab:9e:
83:8e:af:de:66:f7:35:98:43:e2:08:b5:a4:32:93:d5:6c:1a:
9f:bb:3e:cf:a1:41:d5:be:86:2a:21:b2:e7:10:7a:1b:8e:5f:
b8:90:77:2e:b9:25:ca:f2:cc:ad:f1:34:86:0f:f5:5b:14:de:
ef:aa:00:b9:96:b4:1a:3b:6a:2b:89:34:2c:0b:08:ba:09:23:
86:9f:30:f7:a3:da:58:a5:14:50:89:75:b6:14:f8:a4:90:ee:
f0:b2:4e:d1:6d:24:ef:b2:98:c6:47:d6:44:b9:6a:54:3b:37:
c9:57:77:07:a7:39:62:e6:43:9d:b6:0f:8f:32:9f:84:5c:74:
91:76:53:82:f9:26:7c:46:ea:5d:f2:76:34:7c:c0:95:0d:8f:
61:fd:ba:dd:e9:9c:ee:39:ad:e4:c8:0e:c0:27:ad:66:d2:44:
e3:3b:35:4c:37:a3:6c:ea:92:b5:08:1b:65:82:22:1b:e4:d8:
35:30:41:a2:33:ef:7d:8d:2f:3a:e1:cc:91:c0:4b:a8:33:75:
85:ce:43:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:40:54 2026 by rpki-client