Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
File: 3o44GHrnDLx77WlXWfDgMpn7swI.mft (raw, json)
Hash identifier: XPwrK99VR06X98V3DVmpPREk7DgthSngCVr8rStI/TY=
Subject key identifier: C6:CE:FE:F5:54:66:36:E1:9B:96:CD:C6:AA:3F:53:05:21:E0:F6:39
Authority key identifier: DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02
Certificate issuer: /CN=de8e38187ae70cbc7bed695759f0e03299fbb302
Certificate serial: 01A0D3B83C2EFB593075DB65B06D73595F79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
Manifest number: 06F6
Signing time: Thu 24 Sep 2026 14:01:01 +0000
Manifest this update: Thu 24 Sep 2026 14:01:01 +0000
Manifest next update: Fri 25 Sep 2026 14:01:01 +0000
Files and hashes: 1: 3o44GHrnDLx77WlXWfDgMpn7swI.crl (hash: cv098OzM0sjr4Ag4QB4WyVR9msOqnRuIHBNg0R5nBIk=)
2: RPnqpd4QiTnwCz1MgHARgUiKRfA.roa (hash: EMQ9uAHdxhy6q4kC92RKeDGjFCm7FDg8EbfwYcj/lNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:3c:2e:fb:59:30:75:db:65:b0:6d:73:59:5f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8e38187ae70cbc7bed695759f0e03299fbb302
Validity
Not Before: Sep 24 14:01:01 2026 GMT
Not After : Sep 25 14:01:01 2026 GMT
Subject: CN=c6cefef5546636e19b96cdc6aa3f530521e0f639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ed:ca:bd:f5:2e:a7:f5:20:34:de:4e:5a:cc:
1a:0e:0e:d2:31:41:77:37:32:6c:b3:de:69:d6:75:
2f:19:07:53:5e:b1:3b:3e:39:c1:83:2c:b0:2b:4e:
38:79:f8:a9:cf:92:d1:58:b5:d9:29:47:5f:34:05:
db:48:44:23:86:30:ed:40:7a:6c:a4:d4:8a:09:fb:
5f:1f:74:6e:90:47:40:5f:ca:e6:44:57:02:30:51:
d8:bb:15:7b:80:bf:14:4f:ca:ea:8d:57:07:62:2f:
1e:43:5a:e6:84:8d:65:75:8b:1e:be:27:b8:04:7a:
6d:0a:1b:a3:48:f4:65:3e:43:36:22:97:87:86:74:
e0:7c:27:dd:90:f1:6c:e5:dc:bb:3c:44:c5:1e:92:
0c:8d:65:58:a6:1c:60:11:ef:f0:c0:1b:cf:b6:fb:
b8:7b:50:f5:4b:32:28:75:13:5e:d9:03:56:92:89:
e4:4b:14:2e:3a:fa:84:41:6e:09:97:b4:51:12:1e:
ed:a6:5c:56:2d:d8:4b:f0:1b:78:cc:a9:02:1f:a3:
9d:f9:bc:1b:99:db:05:59:4d:e4:6c:ec:f1:3e:cd:
6e:4d:2e:3a:d7:d7:ef:65:d3:7c:9d:f2:cf:9c:4a:
2b:82:54:7d:71:26:9c:4c:00:63:fa:55:e0:aa:0b:
03:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:CE:FE:F5:54:66:36:E1:9B:96:CD:C6:AA:3F:53:05:21:E0:F6:39
X509v3 Authority Key Identifier:
keyid:DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:1d:38:c0:ca:9a:cb:14:e6:8a:f2:f9:6d:ac:f2:2b:26:17:
23:a9:ea:02:65:8b:da:9f:51:5b:b8:da:95:34:e0:c4:a1:4f:
9d:47:14:f0:62:60:e6:26:39:a8:7a:03:5e:53:32:d1:e6:a3:
90:46:9f:9d:cc:c1:32:29:d9:ab:0c:6b:53:64:3b:97:2b:95:
06:91:cc:13:8a:93:11:9a:32:9f:46:a5:55:e3:72:08:aa:44:
82:ab:05:90:9c:b1:8b:0e:28:ac:1f:a5:92:55:78:54:80:b7:
4f:69:b9:48:4e:4f:08:86:e1:b0:84:45:48:f2:16:64:9d:f7:
6a:d6:b2:1f:17:58:5c:ba:e4:86:64:2e:3a:47:b9:e0:9e:7d:
aa:23:47:d3:86:1e:dc:54:1a:14:47:a1:4f:5b:72:e5:b7:d2:
84:f0:87:07:9b:c2:34:f2:61:f1:32:d2:ab:2e:98:e0:da:99:
d6:a6:6e:8e:94:74:54:33:eb:e0:5c:b2:94:1e:78:0e:26:b0:
f0:24:f2:d7:c7:73:f6:69:0c:1b:a7:48:fa:42:39:05:62:29:
51:00:42:9a:75:77:1e:27:2b:11:46:32:d2:4b:fd:79:63:97:
69:26:00:90:25:ef:3d:6a:f1:0e:d9:b8:a2:6d:a9:ad:bd:2d:
19:4d:92:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:44:00 2026 by rpki-client