Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.mft
File: 3bGCpdvRvuhx3lGQAtYBj-4hNnA.mft (raw, json)
Hash identifier: 9dWUZnN4/wnc/s2WRWolkXKXrP7/ZGqEzzyhvqgpnJs=
Subject key identifier: 3B:12:D0:32:88:B3:5E:53:6A:1C:49:2E:03:1F:A2:64:A7:16:94:87
Authority key identifier: DD:B1:82:A5:DB:D1:BE:E8:71:DE:51:90:02:D6:01:8F:EE:21:36:70
Certificate issuer: /CN=ddb182a5dbd1bee871de519002d6018fee213670
Certificate serial: 01A0CA47B311861C4AC3F1752F5E66153FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bGCpdvRvuhx3lGQAtYBj-4hNnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.mft
Manifest number: E2
Signing time: Tue 22 Sep 2026 18:01:31 +0000
Manifest this update: Tue 22 Sep 2026 18:01:31 +0000
Manifest next update: Wed 23 Sep 2026 18:01:31 +0000
Files and hashes: 1: 3bGCpdvRvuhx3lGQAtYBj-4hNnA.crl (hash: Wr5/TGxy/2h0muiC9d6AK4PVYu0aYijVpuhzQnVorUQ=)
2: 63JgYqrtG6KoZuuOrK4W3du1Duo.roa (hash: bCSh6KZ5NQdZdMyFJ085Wh626DTWHoPFQnxoetlXdVU=)
3: tmXRQcCYhINr2gZL0cRubH_ch2k.roa (hash: j7OzX8w8hg3VPQ17U1GWH4ZU5mHgI9S7cGktHlSkmlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3bGCpdvRvuhx3lGQAtYBj-4hNnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:b3:11:86:1c:4a:c3:f1:75:2f:5e:66:15:3f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb182a5dbd1bee871de519002d6018fee213670
Validity
Not Before: Sep 22 18:01:31 2026 GMT
Not After : Sep 23 18:01:31 2026 GMT
Subject: CN=3b12d03288b35e536a1c492e031fa264a7169487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e9:32:c6:9f:fd:c9:c0:04:6e:a7:9e:f3:a7:
29:6d:d5:06:e6:ce:79:6a:f2:1d:0a:a5:16:69:62:
c0:43:c9:b8:f7:7d:bf:02:4e:08:31:47:b2:d0:9a:
64:eb:85:de:c5:2c:7b:f1:f6:f4:bb:1a:ae:7f:e9:
e8:eb:61:81:db:b1:09:93:6b:07:85:19:a8:d9:02:
77:1e:ad:93:7a:fd:39:ba:a7:5e:8f:b1:2d:27:75:
8a:55:73:b3:7f:bd:ed:bd:9a:97:87:b7:20:ca:96:
84:10:47:fb:3a:f1:ba:34:08:50:6c:dd:4e:cc:95:
44:5a:23:82:36:e8:ef:87:b3:57:fc:23:fb:3a:51:
7d:c6:cf:09:a7:86:bc:18:79:d3:42:41:79:48:07:
74:a6:37:1d:b3:ce:87:76:81:99:a9:02:9e:48:64:
0a:68:84:5f:65:8d:ea:90:34:09:a8:fc:d8:0c:c8:
db:d2:79:8d:4d:80:f6:16:4f:c8:35:4f:16:30:a2:
b1:e9:dc:4d:43:dc:5d:5c:06:b5:ee:5a:43:d5:db:
62:78:ce:69:fd:13:d5:24:79:d4:42:90:78:6a:b4:
25:a7:f4:b6:ac:c5:af:43:3a:31:db:5f:b1:31:45:
3d:95:3a:e2:c6:8d:03:ee:6a:5b:5b:7a:82:4b:aa:
e6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:12:D0:32:88:B3:5E:53:6A:1C:49:2E:03:1F:A2:64:A7:16:94:87
X509v3 Authority Key Identifier:
keyid:DD:B1:82:A5:DB:D1:BE:E8:71:DE:51:90:02:D6:01:8F:EE:21:36:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bGCpdvRvuhx3lGQAtYBj-4hNnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:0f:90:f0:00:56:22:0d:37:ee:7a:f3:5e:47:05:68:2b:67:
50:7e:8c:5d:54:b9:f1:55:dd:ee:6f:29:87:3c:89:e0:ac:f7:
05:08:a4:e5:05:68:e3:32:8b:a4:78:9e:7b:1b:87:cf:3d:d2:
14:91:56:e0:3c:3d:e3:a7:dc:ed:fa:73:50:39:0f:fa:df:56:
ae:bf:23:fd:90:43:23:2d:fc:42:20:b0:fd:aa:8d:d7:03:44:
48:cc:9f:c8:e7:fe:b8:6d:a0:c0:30:ff:37:56:54:be:82:01:
15:db:45:4a:88:53:f2:9b:cf:ef:2d:58:fd:fc:d2:1e:2c:c3:
ae:e8:46:a8:09:27:95:24:25:00:08:f6:91:78:2e:2a:43:e7:
31:1f:25:06:29:c0:d8:5d:a2:82:2e:f8:50:c6:b7:61:49:69:
95:61:6e:a9:3f:a5:46:77:b8:87:d4:b9:5f:ef:8a:ce:5b:99:
6d:3f:ef:d9:67:06:1f:af:fe:70:26:7d:58:00:ce:76:02:d3:
2d:4b:d0:2b:ee:58:5b:a8:44:89:54:09:b0:3f:01:9c:70:17:
26:06:4d:27:86:a6:7b:a5:06:12:99:59:aa:4c:49:10:3f:9a:
0a:1e:f6:cc:dd:d0:1e:05:dd:ab:5e:f8:02:85:b5:09:7f:d9:
37:85:28:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 00:33:38 2026 by rpki-client