Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
File: 3AOqmk_p1gxc-FOpJIIiafHMdFI.mft (raw, json)
Hash identifier: j9DTeC1jw0FlGMIAhwm41xBWAHmoro3rcHOHnj/9NJo=
Subject key identifier: 66:7C:11:68:4D:C6:C7:C3:48:31:FF:9A:30:C8:61:B9:F2:A5:0F:E6
Authority key identifier: DC:03:AA:9A:4F:E9:D6:0C:5C:F8:53:A9:24:82:22:69:F1:CC:74:52
Certificate issuer: /CN=dc03aa9a4fe9d60c5cf853a924822269f1cc7452
Certificate serial: 01A0CDEC510A147F1954A4EC3E3510D91B09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
Manifest number: 1016
Signing time: Wed 23 Sep 2026 11:00:11 +0000
Manifest this update: Wed 23 Sep 2026 11:00:11 +0000
Manifest next update: Thu 24 Sep 2026 11:00:11 +0000
Files and hashes: 1: 3AOqmk_p1gxc-FOpJIIiafHMdFI.crl (hash: Tj4oiAQJfLfP3zMW3IzZgPUgzl54X7k3xlLguYlQTxc=)
2: 7TZLT2P2zuuPjzUmClw3kX64yXM.roa (hash: fnAcb1tn2nnIoVX24Iibq3Ab9gwSJ7WX+AekjhFSNg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:51:0a:14:7f:19:54:a4:ec:3e:35:10:d9:1b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc03aa9a4fe9d60c5cf853a924822269f1cc7452
Validity
Not Before: Sep 23 11:00:11 2026 GMT
Not After : Sep 24 11:00:11 2026 GMT
Subject: CN=667c11684dc6c7c34831ff9a30c861b9f2a50fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d6:48:70:05:86:3f:39:56:0f:68:3b:f7:1c:
3d:3c:53:9f:1e:43:0f:49:e3:ea:9e:00:c8:45:9e:
ce:e2:27:5d:39:31:62:00:e7:5f:93:b8:e0:da:fb:
8f:11:2f:a8:db:13:1c:b9:0d:9b:15:8a:f0:90:48:
2c:d7:d8:74:a2:7c:40:80:8b:13:be:43:f5:61:10:
cf:0f:af:e9:4c:30:53:11:09:4c:a9:aa:9e:11:56:
ce:35:e6:b9:75:fb:da:88:11:a2:4c:68:61:56:a9:
d2:b0:ae:64:0c:f5:4a:bf:3d:75:5c:8a:bf:67:c6:
7a:95:55:ca:9c:9a:09:73:ee:1d:82:17:aa:b7:b9:
ab:27:97:0d:0c:48:84:20:1f:22:0a:46:e5:e1:6d:
db:5a:4d:d8:57:87:1e:48:e5:a8:28:0a:6b:fd:65:
49:4f:24:6a:d7:0e:45:48:37:5f:0a:b2:bf:18:4e:
bf:78:d1:d3:5a:0e:4b:89:de:2c:eb:b5:81:5d:24:
e1:a6:50:4e:5c:43:ab:f8:5c:88:18:0b:e5:f6:92:
00:2a:26:ec:a5:13:5b:27:49:58:e4:a6:35:87:fe:
1a:0a:f2:d5:7c:df:4e:54:3b:67:41:e1:bf:1a:b9:
cb:56:7a:41:ce:42:ef:cc:c0:b7:46:c8:a7:0c:53:
a0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7C:11:68:4D:C6:C7:C3:48:31:FF:9A:30:C8:61:B9:F2:A5:0F:E6
X509v3 Authority Key Identifier:
keyid:DC:03:AA:9A:4F:E9:D6:0C:5C:F8:53:A9:24:82:22:69:F1:CC:74:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:12:77:b3:f1:3e:88:fa:85:d4:a4:2a:58:66:02:27:23:a1:
e4:1b:a6:4a:d6:d2:52:48:7c:5d:69:a2:40:04:14:59:f3:46:
20:72:84:75:9a:5a:80:0d:75:c4:af:ed:67:a7:a2:c6:44:e2:
28:2c:15:c0:c0:79:85:37:29:86:5d:10:fd:87:a1:5d:c4:62:
1a:77:c9:55:b6:af:ef:c3:31:fc:47:30:b7:b7:c0:8e:9c:23:
a9:27:e5:fb:98:67:c8:24:2b:d9:36:d8:a7:e5:91:07:77:ad:
df:f0:e1:34:10:79:89:d1:8c:a3:b3:a6:ea:2f:08:be:a3:37:
76:83:c5:49:fc:1b:84:1c:d6:23:97:e3:3d:8c:2f:6a:9f:5e:
4f:68:8d:ec:88:8e:e9:3b:42:af:07:59:a2:8c:81:86:13:24:
23:83:93:20:2e:01:25:4c:99:77:ed:80:d7:ce:b4:51:1e:3a:
f5:42:70:90:38:fb:52:90:cd:dd:23:41:69:e3:28:bf:30:e6:
dc:4e:fd:35:dd:c3:24:15:2c:9a:07:34:0d:54:79:cd:b0:c2:
07:9f:85:85:3b:77:ae:78:f5:50:84:f3:d3:bc:86:7a:29:a3:
81:ff:65:26:9e:cf:05:0f:76:74:9e:6c:47:8c:eb:55:d3:77:
e0:6b:01:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:54:00 2026 by rpki-client