Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
File: 3MpSIZb9CbrnOba9IyLl65DaT7k.mft (raw, json)
Hash identifier: 7gJWh8/5orox0OPg8q3koHXpbU4N6fFCHzQWSrwhhUA=
Subject key identifier: 4D:07:4D:3F:43:00:72:9F:38:9C:E0:17:B1:F2:D5:44:22:F6:71:7A
Authority key identifier: DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
Certificate issuer: /CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Certificate serial: 01A0D19246957A0219A264E29E76803D63D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
Manifest number: 1429
Signing time: Thu 24 Sep 2026 04:00:19 +0000
Manifest this update: Thu 24 Sep 2026 04:00:19 +0000
Manifest next update: Fri 25 Sep 2026 04:00:19 +0000
Files and hashes: 1: 3MpSIZb9CbrnOba9IyLl65DaT7k.crl (hash: A1bxsIuv7XBPDRszfM5X0frGt13j9q6XiJf/kug/S+o=)
2: cIxKBh6oU9S_NcB8Ln8qgQPRqMc.roa (hash: qT7a6QcaDtE4QIrrmB5EqTQOJdhXraa8fLtpECGlH+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:46:95:7a:02:19:a2:64:e2:9e:76:80:3d:63:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Validity
Not Before: Sep 24 04:00:19 2026 GMT
Not After : Sep 25 04:00:19 2026 GMT
Subject: CN=4d074d3f4300729f389ce017b1f2d54422f6717a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:26:07:05:c9:57:2e:21:18:52:52:63:79:e9:
be:df:43:c3:20:82:a0:ff:eb:92:38:fc:9c:43:30:
bf:13:c4:29:4e:39:2e:19:02:7a:ff:3b:c2:f8:fb:
c6:30:95:9d:c9:dd:7c:b7:19:a0:76:dc:c7:5d:28:
4c:00:f9:f9:f7:c1:3e:db:f4:69:14:a6:16:6f:ff:
dd:5a:26:bf:56:12:99:9a:bb:30:b1:96:59:b9:83:
ec:8d:82:9b:f2:a8:5e:46:de:de:9f:8c:2c:d9:5d:
f1:04:67:ed:72:bc:38:96:3c:37:01:48:f6:cd:72:
b2:15:66:ba:9c:48:81:24:b5:34:f9:26:7e:cb:8c:
9d:a3:b6:83:4e:2b:87:6f:6c:53:b9:7a:17:b8:34:
cf:3f:0a:c4:4a:bc:63:44:80:99:09:93:4b:77:03:
1b:01:c0:61:0b:32:83:99:e1:b0:0f:fa:06:22:9a:
c2:e3:24:f6:43:20:d7:60:6f:fd:a3:bf:91:ed:7e:
93:ca:c3:12:fe:73:58:f4:f9:ea:f1:37:8c:3c:a3:
0c:aa:9a:36:e2:cd:08:5b:d2:80:12:b9:c3:d0:12:
69:e2:6a:fb:18:3d:4c:42:db:a6:be:1b:11:90:0f:
14:2f:08:7b:fc:46:4f:66:86:32:ce:6d:4a:ff:58:
87:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:07:4D:3F:43:00:72:9F:38:9C:E0:17:B1:F2:D5:44:22:F6:71:7A
X509v3 Authority Key Identifier:
keyid:DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:3f:17:be:05:4d:48:5f:87:e9:5d:64:50:49:0b:49:b4:da:
8d:e5:ea:d0:7a:ec:5a:f0:21:ea:0f:fd:af:44:df:0f:06:8a:
c9:d7:b9:e3:d2:88:f9:3f:7f:ce:79:77:e6:06:e7:b9:81:06:
2a:eb:81:e7:d6:48:19:e8:a7:2d:32:de:fe:5c:24:1b:5a:c9:
0d:fe:30:fe:a0:f0:0e:81:8f:39:04:6c:5a:6f:fb:56:b2:47:
33:a1:ef:30:7f:44:fc:a8:58:1f:12:b4:10:d4:26:ff:3f:13:
51:ee:8f:3c:9f:af:9b:59:92:db:43:26:e0:93:e0:da:39:b5:
8a:8f:82:ef:15:bb:c2:a7:b5:b1:90:d8:bf:db:15:8d:9e:2b:
06:78:5a:7c:68:23:f1:22:5c:9d:4e:31:6b:85:c7:92:30:aa:
35:13:58:75:b6:dc:8e:69:dc:6e:00:9d:b0:a4:fb:e0:0e:9f:
a2:c5:d7:2d:1d:08:8c:c2:aa:5d:77:d2:a5:a7:bb:b1:af:a2:
65:8c:b7:09:d0:69:c7:d7:00:a9:82:1c:8f:ea:54:55:17:f8:
38:64:94:c9:6b:83:09:8f:af:32:9e:a2:eb:51:a3:74:2c:93:
c8:83:c8:e0:d5:f6:ef:04:3c:39:31:22:d1:56:90:a7:6e:c5:
d0:f3:35:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:17:06 2026 by rpki-client