Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
File: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft (raw, json)
Hash identifier: 3nlob2gP5XliJaICALHi0qGXWMmaSDtrfDYzx/hB2Mw=
Subject key identifier: 60:26:95:61:1C:A1:E6:F7:47:E9:78:9E:3D:AF:CA:01:28:96:3F:6C
Authority key identifier: DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
Certificate issuer: /CN=dda5a222acb99ab2398439eded7770a65ee66de6
Certificate serial: 01A0D0B6DAAE61F6E6E8F92368C24D535564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
Manifest number: 1068
Signing time: Thu 24 Sep 2026 00:00:39 +0000
Manifest this update: Thu 24 Sep 2026 00:00:39 +0000
Manifest next update: Fri 25 Sep 2026 00:00:39 +0000
Files and hashes: 1: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl (hash: 01HbNjNFCBY8jpk70hLgcipLtbyjbN/fq33OI85qsLQ=)
2: wnLAy32iYG4i-ODs-rBRdtaa9Ss.roa (hash: zyR18oxh6Lhv0Acyg819Q0tTDooFJ+wpThACkE37g/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:da:ae:61:f6:e6:e8:f9:23:68:c2:4d:53:55:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dda5a222acb99ab2398439eded7770a65ee66de6
Validity
Not Before: Sep 24 00:00:39 2026 GMT
Not After : Sep 25 00:00:39 2026 GMT
Subject: CN=602695611ca1e6f747e9789e3dafca0128963f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:66:2e:47:b3:70:53:90:07:fd:64:45:58:40:
43:7e:3a:fe:3c:86:35:f8:7c:93:e7:80:2d:cb:14:
5a:37:eb:d5:ca:c5:07:0a:f5:e8:b6:61:4b:48:b6:
98:8d:da:d4:d6:f1:ea:94:71:72:68:5e:13:cb:81:
ae:7e:7f:8d:fd:20:4b:ac:82:59:46:6c:5f:36:e4:
13:b2:f4:b2:4f:cc:2d:dd:8e:93:b3:87:fc:b0:43:
6b:2e:23:02:4b:46:9b:31:40:6b:20:c2:03:05:be:
3e:a5:85:4e:06:1c:93:b1:3e:a8:85:54:9c:d0:7d:
aa:a9:a5:cb:37:46:d5:9e:30:0c:ed:49:bb:54:bf:
68:75:53:54:3c:4d:f5:39:09:83:b4:df:19:ad:9e:
a5:f9:3f:31:11:17:fd:e4:1b:58:02:e7:f9:37:d9:
f3:c1:f6:ff:45:79:7c:9d:54:29:16:76:2e:91:41:
3c:79:73:93:db:82:55:b5:78:73:49:a2:42:83:e8:
31:75:00:40:8b:75:91:b2:41:00:29:51:ba:e2:e7:
15:9b:56:c4:a7:38:0b:0e:6b:43:2b:2f:45:e1:f9:
4f:c4:fb:9b:c5:9f:bf:ca:61:e2:c2:ab:e3:83:50:
92:4a:75:60:f3:bd:66:06:66:2e:cd:98:88:74:dc:
e5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:26:95:61:1C:A1:E6:F7:47:E9:78:9E:3D:AF:CA:01:28:96:3F:6C
X509v3 Authority Key Identifier:
keyid:DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:46:d0:71:00:9d:76:1d:50:27:b0:47:a3:f4:86:13:d5:a5:
43:98:26:c5:60:e3:ae:2b:2b:5a:16:70:c5:ef:c9:9b:1c:e5:
21:82:11:12:8a:9c:41:95:4c:22:1c:1c:92:e3:b7:5c:d4:3c:
a1:2a:d9:6b:7e:7f:51:69:9d:d0:e4:75:02:05:d3:6c:cc:58:
0d:f0:1b:e1:ff:d2:03:42:33:ed:b8:6d:90:2a:07:b7:49:e5:
f5:a4:20:42:0b:31:8f:8f:e9:a8:62:df:c7:39:56:60:2a:59:
27:c6:30:31:09:8f:5e:88:d0:46:a5:97:99:37:5c:cf:a1:58:
08:db:a9:12:d1:66:a0:5d:c4:f1:c2:89:e7:08:70:50:b2:eb:
d4:ff:05:21:ef:16:f9:34:ce:98:3a:ec:6e:bf:c6:76:2d:85:
0a:85:2e:42:77:6f:e9:9d:1a:2f:25:60:12:c8:c5:ce:5d:d9:
c3:33:7e:ce:45:78:1a:95:22:10:2f:03:b9:83:da:cd:72:e3:
70:60:26:5b:e0:71:c3:0d:4f:5e:ef:ff:6d:3d:3b:ba:90:fb:
75:f3:9c:23:32:6a:cf:db:95:c8:b0:cb:7c:2b:59:11:69:5f:
7a:ec:2f:24:c0:23:74:a9:1a:5a:46:77:95:7d:1f:ab:bd:d1:
b1:a9:3c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:32:38 2026 by rpki-client