Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
File: 3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft (raw, json)
Hash identifier: Y+nEwwgOx960fxnBoC0+Vohn1yvT18LGTEh9JALR6TE=
Subject key identifier: F6:BB:48:6C:0E:1D:94:50:0F:E6:5A:74:36:2C:B7:88:39:92:43:67
Authority key identifier: DD:6C:3D:D8:DD:EF:FD:9A:E4:C8:55:C5:F9:48:38:04:7D:C9:AD:71
Certificate issuer: /CN=dd6c3dd8ddeffd9ae4c855c5f94838047dc9ad71
Certificate serial: 01A0D26DD7928D4B789DCA6E2C7D4560CA1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
Manifest number: 0BA8
Signing time: Thu 24 Sep 2026 08:00:08 +0000
Manifest this update: Thu 24 Sep 2026 08:00:08 +0000
Manifest next update: Fri 25 Sep 2026 08:00:08 +0000
Files and hashes: 1: 3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl (hash: VHbjpvwyBBGWK+53fN9bdLfjZ9k477yJx5NJg9+p/Fg=)
2: 40MGzFSmxhQmZ9z9Cr7j9kE1tv8.roa (hash: bavnt0dg+vb1MILd4J2Ncb0MCiwl3VmV6Ojco6sCOTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6d:d7:92:8d:4b:78:9d:ca:6e:2c:7d:45:60:ca:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6c3dd8ddeffd9ae4c855c5f94838047dc9ad71
Validity
Not Before: Sep 24 08:00:08 2026 GMT
Not After : Sep 25 08:00:08 2026 GMT
Subject: CN=f6bb486c0e1d94500fe65a74362cb78839924367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a1:04:96:e1:53:29:ac:ce:74:f8:ff:8d:78:
25:52:21:b1:59:f8:50:56:24:a4:87:39:5b:14:1a:
bf:4a:6f:93:c7:af:28:ae:41:c4:2f:9e:2f:84:a2:
9a:4b:c7:58:bb:9b:f8:2a:7a:8f:26:67:d5:64:72:
21:13:53:c4:9d:61:30:61:06:d1:e2:d6:23:81:e6:
88:0e:66:2c:74:eb:08:e9:b4:d6:8a:36:50:b7:4d:
a0:e9:c0:8c:95:02:53:94:9b:b3:22:66:74:2b:39:
e6:6a:c9:c7:22:4d:d3:9e:15:c2:1b:12:36:73:40:
1b:3c:aa:ac:e2:45:db:d1:81:07:53:77:eb:a0:b5:
80:4c:62:26:8f:29:0f:ce:a8:6a:33:9f:70:44:58:
e4:43:24:98:77:4e:9c:73:c9:8c:9d:db:cc:87:ea:
07:6a:eb:2c:db:b1:46:4a:1b:1c:7b:a2:b2:dd:15:
0a:6c:e6:ed:9e:6d:7e:24:56:83:8c:79:1a:af:b7:
f8:fd:4a:7d:44:fc:16:3a:52:dd:71:5a:11:71:36:
37:d0:7d:27:ef:f8:c5:58:36:6f:49:a2:dc:5c:b2:
e3:e8:5a:f7:1e:2f:22:5e:8f:fb:22:bc:b8:14:65:
7a:11:c2:1b:9c:01:dc:cb:4c:59:2d:36:02:57:53:
bb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BB:48:6C:0E:1D:94:50:0F:E6:5A:74:36:2C:B7:88:39:92:43:67
X509v3 Authority Key Identifier:
keyid:DD:6C:3D:D8:DD:EF:FD:9A:E4:C8:55:C5:F9:48:38:04:7D:C9:AD:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:77:e0:56:eb:83:20:62:6c:52:8b:4d:6b:3e:d1:8e:ab:0a:
44:e2:76:c2:95:c2:f7:d2:02:b5:c9:3b:31:39:52:02:50:cf:
7f:50:e1:2c:75:76:77:f2:b7:61:16:f1:0e:f4:a9:5a:b0:6f:
b6:d6:aa:7c:d3:51:01:70:94:59:42:5f:bc:ce:21:c2:1a:72:
88:f8:87:37:c7:35:1a:84:4b:cb:ae:42:ae:ba:d4:a0:54:5a:
37:48:22:56:f3:0b:1b:f2:ee:86:8a:4a:76:f3:28:1f:f6:6b:
3e:63:56:2f:5c:62:81:cc:57:32:96:fe:d2:14:ec:b0:99:9d:
12:78:dc:dc:3b:28:11:10:65:cf:7e:ab:1e:4a:75:ba:1d:6f:
b4:e2:2d:7d:d2:56:de:8a:4a:63:7b:a7:df:f6:df:0e:37:51:
be:bc:26:c0:ed:4d:20:c5:b7:09:f8:06:00:dc:2a:2a:6e:33:
22:1b:51:7b:6a:23:be:f7:22:7e:f3:df:2b:79:71:21:0a:27:
cb:75:b8:ba:05:76:d2:06:1e:79:e4:f1:c4:35:07:81:34:6d:
46:cf:8e:52:1a:2a:88:45:78:b1:a8:ac:2d:ac:50:f6:2f:64:
ce:2d:68:5f:a7:ad:bb:50:83:5e:61:26:23:b7:fc:33:4e:d9:
89:f8:86:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:02:04 2026 by rpki-client