Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
File: 3KRrH82StH9PVfrQOMlYE0Cp03A.mft (raw, json)
Hash identifier: mI6w/uEQadd4iPMB8xxuyZRJPFPgi/E3apAkZEXk7O4=
Subject key identifier: B6:E8:C4:8A:8C:66:50:4B:9B:27:22:F4:E0:54:64:13:7E:4F:E5:F2
Authority key identifier: DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
Certificate issuer: /CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Certificate serial: 01A0D2A611FCB57266B63891DB8D6C88AACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
Manifest number: 1A7B
Signing time: Thu 24 Sep 2026 09:01:33 +0000
Manifest this update: Thu 24 Sep 2026 09:01:33 +0000
Manifest next update: Fri 25 Sep 2026 09:01:33 +0000
Files and hashes: 1: 3KRrH82StH9PVfrQOMlYE0Cp03A.crl (hash: kjzGh8eEzAxI1i5ifNq7GgutuaxV1Au5R1/eAWqt1eY=)
2: VfPqQIUYDVEcRMuY0y_1WkG7tNM.roa (hash: jXhdAhn6nzRP7djqjR0wEfaKlgEOeT24wYK6k5lvQMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 09:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a6:11:fc:b5:72:66:b6:38:91:db:8d:6c:88:aa:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Validity
Not Before: Sep 24 09:01:33 2026 GMT
Not After : Sep 25 09:01:33 2026 GMT
Subject: CN=b6e8c48a8c66504b9b2722f4e05464137e4fe5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:34:48:aa:50:ae:cf:c8:b4:74:93:13:4e:79:
50:0b:55:c7:fa:a3:e4:05:f2:62:ec:38:c4:85:3a:
90:b1:88:11:c1:c7:af:b0:ee:d0:35:79:4a:2a:d4:
1b:80:68:65:ef:30:55:a8:b7:13:4d:24:19:d8:47:
55:42:30:09:3d:12:5c:03:f4:d3:8e:e1:6b:e6:16:
4c:e3:0c:d9:f5:d8:c0:85:af:9a:b0:43:a3:5e:93:
5e:2e:be:3e:58:62:a1:42:9d:47:f3:6e:bb:f0:92:
20:1b:20:4a:26:a1:44:d6:1e:9e:ff:f6:92:42:d6:
30:f8:17:94:71:39:27:da:6b:1b:fc:bf:02:67:ef:
ee:97:7b:e1:49:e4:28:2d:ac:62:61:f3:50:97:20:
9d:70:d4:89:8e:34:df:3c:67:2a:d2:dd:c7:00:ac:
43:e2:97:93:f1:2a:44:4a:90:99:3b:e0:b9:a1:ca:
a3:c1:72:50:fc:41:e8:55:d0:f5:09:e0:a1:41:e0:
5f:b6:ac:a4:47:72:59:a2:58:6f:c5:25:5b:7d:2c:
ff:ab:d5:cc:63:a6:d1:4b:20:f8:9d:c8:17:72:59:
5d:d9:c5:32:21:ff:2a:8f:c4:c9:2a:b2:1b:54:dd:
0e:06:5c:2c:d9:92:a9:4b:9a:f7:96:e2:af:bb:ec:
c1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E8:C4:8A:8C:66:50:4B:9B:27:22:F4:E0:54:64:13:7E:4F:E5:F2
X509v3 Authority Key Identifier:
keyid:DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:42:3d:fd:62:89:e2:e6:1a:8a:5f:b2:ae:e8:90:54:b3:b9:
c3:8f:d1:20:05:2b:18:de:cc:b0:6b:a3:0e:a7:e0:a2:5a:c3:
7b:b3:16:60:da:20:47:5b:a4:a2:06:1e:7e:f2:eb:c9:d3:aa:
27:86:db:d5:0b:ed:21:c5:b6:e3:b7:ad:00:82:d4:8d:61:d9:
ed:16:8f:de:3b:f0:65:00:fa:9b:ca:aa:c3:73:07:1e:e5:f2:
cb:bb:82:0e:a2:59:29:84:dd:cb:44:69:0d:e6:69:15:d9:a9:
db:ad:63:1f:3d:ed:a1:3d:eb:f6:86:fd:f0:46:b6:99:44:47:
09:7a:bf:72:ad:e8:d6:0f:5b:a4:ce:fc:46:b3:19:7c:b2:e3:
b6:90:40:8f:9c:6e:d6:a0:e6:4d:a0:ca:46:cc:7d:06:e0:e7:
46:af:cb:d0:9b:25:eb:ff:1e:ff:f1:65:4c:1c:6b:2f:22:6a:
d4:af:5d:13:de:b2:8c:d2:c8:bc:6c:66:79:2a:e8:bc:b5:85:
5f:96:b6:9d:5a:d1:56:2b:df:35:f9:87:d1:b1:f8:c6:42:63:
fc:34:60:57:11:94:e3:c4:0c:a4:c1:9c:df:d7:7f:e8:7b:fa:
4e:2d:2a:34:dc:9a:bb:de:4f:f4:d9:81:7d:18:96:b3:fb:52:
55:1b:8c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:11:33 2026 by rpki-client