Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
File: 3mxgNQQsxTJRbrwZaPQb__S4U34.mft (raw, json)
Hash identifier: f42Q+aVz0XgnYMLdmsP+uCPT3VzmvNqZv3BlvqHtPH8=
Subject key identifier: 84:E4:8E:22:23:19:C4:85:3F:1D:D0:A3:02:8A:CF:9A:4F:35:2F:0B
Authority key identifier: DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E
Certificate issuer: /CN=de6c6035042cc532516ebc1968f41bfff4b8537e
Certificate serial: 01A0D1C90135F0F2EA6FF79F268EE3893799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
Manifest number: 16B5
Signing time: Thu 24 Sep 2026 05:00:06 +0000
Manifest this update: Thu 24 Sep 2026 05:00:06 +0000
Manifest next update: Fri 25 Sep 2026 05:00:06 +0000
Files and hashes: 1: 3mxgNQQsxTJRbrwZaPQb__S4U34.crl (hash: JNEd/tLhBfGzT25SxMhS5lHJLhVc3k/+1g/V8kYaQ6Q=)
2: WpRWO2EVlSv_D7W5fcevKIcX17g.roa (hash: dwm8si4Ivv7QjBLEYqxtuHlmWwLaHZym07JUqJNzM8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:01:35:f0:f2:ea:6f:f7:9f:26:8e:e3:89:37:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6c6035042cc532516ebc1968f41bfff4b8537e
Validity
Not Before: Sep 24 05:00:06 2026 GMT
Not After : Sep 25 05:00:06 2026 GMT
Subject: CN=84e48e222319c4853f1dd0a3028acf9a4f352f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:41:10:fd:99:48:90:56:34:35:dc:5f:72:e8:
40:85:79:80:76:55:1f:5d:e1:06:6d:ae:39:1a:5a:
b3:03:50:ce:fd:4a:ac:dd:71:b6:3e:db:29:a9:b5:
f2:30:63:f6:ef:9a:1a:07:f1:a9:ac:52:33:0f:13:
ce:2d:30:34:82:0b:cd:d5:49:cf:02:56:dc:b0:a3:
4e:b4:47:e6:cb:5d:af:1d:f8:f4:59:9f:66:9f:89:
d6:3e:01:e5:8c:8d:67:e8:65:85:0b:5b:50:58:b7:
86:3c:65:54:22:e3:43:d2:ef:e3:0a:80:a0:6a:65:
65:6d:1a:90:2d:70:a6:5d:30:93:e9:41:88:7e:94:
2a:6c:83:0e:12:a2:aa:13:d2:d1:d6:82:1b:36:24:
92:12:56:a4:1f:21:42:25:0a:58:30:69:71:22:9c:
ce:ae:f0:02:f0:cf:1c:39:cf:af:95:75:2c:e9:b4:
08:0a:d5:eb:8f:04:27:fd:cf:4b:bf:19:12:b2:eb:
26:a2:57:74:55:fe:60:72:20:4d:57:01:3d:ff:42:
14:c5:c1:c3:10:ea:fb:44:ed:ce:fb:91:0f:d4:f0:
b2:4c:e8:ba:35:87:3c:69:3e:b5:5f:2f:f4:76:66:
e8:d7:ff:00:40:01:3f:ce:5b:d5:a5:36:9a:04:6b:
2f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E4:8E:22:23:19:C4:85:3F:1D:D0:A3:02:8A:CF:9A:4F:35:2F:0B
X509v3 Authority Key Identifier:
keyid:DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:41:6f:5f:2f:a6:31:65:09:8f:e5:ba:a4:1b:7c:9d:06:cc:
cc:34:f5:62:ee:00:aa:f1:73:ba:af:d3:7d:47:fe:fa:cf:7a:
67:d0:96:0e:54:1c:94:04:b8:e4:86:42:b0:09:73:f7:2c:cc:
8f:f7:ca:d5:79:6c:25:18:ae:b2:56:c3:83:54:7e:07:af:f8:
58:95:62:05:45:60:69:f0:63:38:0b:0a:df:69:59:89:01:da:
3d:54:f5:36:e1:9a:a7:f9:40:04:9a:c8:81:61:d6:e7:f8:63:
fa:c8:11:f4:8f:ee:41:31:f9:a4:fe:41:d4:5b:ff:3d:18:93:
db:4d:93:e3:e2:b3:a0:94:3f:f9:e2:38:26:da:db:28:a0:42:
c8:e3:5f:68:87:a6:47:37:dd:52:05:8a:f4:ac:17:86:1f:e4:
20:0f:4c:7f:c8:c6:d1:83:3f:52:bc:a3:2e:f8:85:53:66:e0:
c3:46:bb:a0:3b:45:be:58:7a:03:fa:85:0a:f9:08:51:fe:3b:
ea:2d:83:e1:24:ca:70:f7:6b:39:0b:70:e3:2f:1b:98:c5:be:
fe:b4:60:73:06:d2:a1:25:b7:40:30:fb:e4:d8:f0:3c:37:a1:
47:e2:fe:0a:8b:45:cd:eb:a5:7b:57:e3:2d:1a:ed:32:b9:ef:
fe:d4:01:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:36:50 2026 by rpki-client