Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
File: rRfnAW-VOg5izKRWb_nRBSww8lo.mft (raw, json)
Hash identifier: Hptz2uc4PERoS3kjRqzF1WvqOF961T77QdWw/XT/LYM=
Subject key identifier: 3A:40:05:30:5F:F2:94:83:8D:52:57:78:62:16:03:20:91:1D:06:9C
Authority key identifier: AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
Certificate issuer: /CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Certificate serial: 01A0D3B8C7278AA3B58FBE129CF82BF599B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
Manifest number: 09A3
Signing time: Thu 24 Sep 2026 14:01:37 +0000
Manifest this update: Thu 24 Sep 2026 14:01:37 +0000
Manifest next update: Fri 25 Sep 2026 14:01:37 +0000
Files and hashes: 1: 69yOYQhcSzVteXbmSSuXjdooyOA.roa (hash: 2ZA47QSgmHPBZuYu1sYyxVw+wEl4vjMSOZuQJyxjjcA=)
2: DaNzl7w617W61WMkK2mhl8jN5wU.roa (hash: KfPIGqY3EVhRc2Ytnf57ChmISLtMr8fTABQiZHidkaM=)
3: rRfnAW-VOg5izKRWb_nRBSww8lo.crl (hash: VTTScAT7mDxdqktsDMzNB/m0KPaOf/C6NmeKaZaAcqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:c7:27:8a:a3:b5:8f:be:12:9c:f8:2b:f5:99:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Validity
Not Before: Sep 24 14:01:37 2026 GMT
Not After : Sep 25 14:01:37 2026 GMT
Subject: CN=3a4005305ff294838d52577862160320911d069c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0d:80:98:c3:47:c0:6f:6d:f7:01:43:70:2a:
55:c7:71:99:bf:71:7f:03:8c:3b:f4:18:3b:ee:d6:
23:ab:a4:1d:dc:51:e2:a9:80:8c:87:12:76:2f:f8:
6f:10:76:2f:5c:b0:ad:a0:80:03:7d:05:52:e7:94:
11:c7:16:e8:40:3c:09:f9:6d:9d:d8:56:d7:d0:d2:
23:89:83:ce:50:83:12:61:84:f7:5d:9c:13:cc:b5:
81:2f:60:3c:44:2e:1b:07:cd:99:8e:d9:5f:6b:e7:
b7:c7:fd:98:3f:54:62:18:dd:7d:2f:67:6c:38:54:
5d:2f:3c:97:1d:93:1d:a4:91:d0:56:70:3b:b4:05:
b9:30:cd:ca:0c:ad:93:72:7d:60:60:86:7a:0a:c9:
1b:3e:3c:25:bf:a5:99:64:b0:22:54:e7:37:5e:4e:
01:7a:3f:01:3c:86:f0:5a:71:90:5f:59:f6:63:fa:
b4:7d:f3:c4:01:9d:5a:71:90:16:91:1a:86:a8:6e:
a0:04:96:08:1e:8b:9a:cc:11:1d:b1:2d:cf:2a:ca:
e8:b2:92:9e:19:75:87:ff:5b:5b:e3:32:a8:04:38:
55:c4:6b:5f:f8:8f:e7:20:4b:d9:3b:8b:db:6f:40:
a4:0d:2c:36:b9:98:27:a1:ff:7b:2b:0c:a5:25:27:
46:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:40:05:30:5F:F2:94:83:8D:52:57:78:62:16:03:20:91:1D:06:9C
X509v3 Authority Key Identifier:
keyid:AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:77:c3:ea:20:1d:16:9a:6c:12:86:d0:07:97:fc:36:19:cf:
c8:d9:61:1d:e9:31:fd:1d:80:4c:8e:09:61:4b:05:2e:cf:65:
a9:74:7c:7a:af:f2:65:e7:7e:cb:86:03:48:2e:85:e2:ab:2b:
c6:ef:1e:f2:05:ea:9f:1a:b3:00:5d:f4:3d:77:c7:55:2b:98:
8a:ec:9c:21:73:2c:1b:03:e1:3c:35:aa:5f:95:c4:88:d3:e3:
e4:53:26:b0:f3:86:96:fa:ea:47:2a:c8:3a:29:8d:1f:db:56:
27:4b:b6:05:07:25:34:e1:f4:9c:ba:94:ee:21:72:c7:e7:13:
8a:eb:d8:dc:30:d0:c8:1b:69:c3:98:ae:87:57:d6:59:62:ca:
5b:c3:88:76:be:4f:1c:4e:ba:c4:85:03:0a:ae:1d:b8:ae:9f:
cc:21:b7:fe:28:77:38:a1:a0:9f:5c:0c:5e:35:a8:d9:e7:e3:
be:0b:11:c2:58:75:d3:0e:b0:58:61:b3:73:3a:b0:0e:6d:78:
a0:21:6a:ac:32:16:9e:d8:dd:be:3c:53:1d:be:9c:ff:59:cb:
fd:74:a4:77:1e:63:8b:6c:ad:1a:b6:e3:4b:e2:58:3c:f6:5c:
1f:05:3e:64:39:60:ee:3b:a0:9d:43:df:c2:45:d5:91:41:f9:
a6:98:6f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:35:49 2026 by rpki-client