Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
File: 3UftWIupBpRXoqiY_HoMuXfR-B4.mft (raw, json)
Hash identifier: GFUg+hMjQDYn2ExgSm3TKsRaSILzSSYn4hYJ+BmLP18=
Subject key identifier: 91:D6:18:72:6E:23:AD:5B:51:33:BA:5E:A7:10:4F:CE:6F:BF:F2:E5
Authority key identifier: DD:47:ED:58:8B:A9:06:94:57:A2:A8:98:FC:7A:0C:B9:77:D1:F8:1E
Certificate issuer: /CN=dd47ed588ba9069457a2a898fc7a0cb977d1f81e
Certificate serial: 01A0CB90234D70950004CD19C88F6C514C88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
Manifest number: 1A6E
Signing time: Wed 23 Sep 2026 00:00:16 +0000
Manifest this update: Wed 23 Sep 2026 00:00:16 +0000
Manifest next update: Thu 24 Sep 2026 00:00:16 +0000
Files and hashes: 1: 3UftWIupBpRXoqiY_HoMuXfR-B4.crl (hash: kwaZHPdJHNhAcKZ2ercKJpMF2E5XAD1LfB+Oz3GUXdc=)
2: DX5ooE9ZIZJaF02Q9CvGnKIWcNY.roa (hash: wTDsCt307bisN+gK3/IsNzSToPiLxzeSSNZDltvG+zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:90:23:4d:70:95:00:04:cd:19:c8:8f:6c:51:4c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd47ed588ba9069457a2a898fc7a0cb977d1f81e
Validity
Not Before: Sep 23 00:00:16 2026 GMT
Not After : Sep 24 00:00:16 2026 GMT
Subject: CN=91d618726e23ad5b5133ba5ea7104fce6fbff2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:01:40:23:2f:87:22:02:53:c6:ba:6f:a5:98:
51:ee:dd:36:d3:c6:46:8f:0a:d0:57:47:9b:6c:dc:
12:f3:b7:e0:3f:7d:ae:24:35:af:47:4b:15:39:ae:
5f:53:d2:25:8f:41:d5:2d:3a:14:91:54:59:56:60:
2a:d3:da:5a:0a:16:db:72:4f:15:b6:65:bf:97:00:
cd:d2:37:73:9f:89:1d:8d:3f:92:4e:28:e0:8b:e9:
38:69:14:7d:df:fb:0e:cc:46:f7:29:62:35:2c:fc:
01:ba:e9:f2:e8:64:2a:33:30:c4:05:cc:31:91:88:
3b:cb:f6:67:6b:0c:87:1a:fb:dd:e9:b4:34:38:84:
d0:37:f8:15:46:66:91:7b:85:de:d3:52:47:d1:12:
28:52:32:3b:4c:96:e0:f9:75:c0:aa:e0:d8:dd:2c:
eb:87:e2:df:e5:04:93:ba:cb:ee:ae:fa:b7:bc:64:
8f:87:ef:61:f8:8b:10:0b:64:f6:38:69:48:96:f8:
b3:3a:96:3a:43:28:6e:b5:6c:e7:7d:ad:37:f0:16:
cf:62:00:3c:df:96:47:9a:0a:86:d0:8d:3a:1e:91:
c3:2a:e9:a0:05:b9:f7:de:a7:50:da:2d:bd:78:78:
97:7b:c2:2d:3f:43:59:c5:c3:79:05:f7:27:c3:63:
f8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D6:18:72:6E:23:AD:5B:51:33:BA:5E:A7:10:4F:CE:6F:BF:F2:E5
X509v3 Authority Key Identifier:
keyid:DD:47:ED:58:8B:A9:06:94:57:A2:A8:98:FC:7A:0C:B9:77:D1:F8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:2d:eb:fa:25:f0:51:27:ed:99:54:4e:a3:19:9f:0c:b7:a4:
43:2f:3a:4a:eb:d9:4b:4f:b0:15:9c:d2:46:4b:39:6d:d8:63:
b4:1e:45:f1:cd:a1:d8:84:ff:f5:9b:8b:21:eb:b2:36:4d:e7:
59:cd:0e:8d:c0:09:3b:07:31:aa:06:03:03:df:73:c0:03:48:
a7:eb:a7:74:38:e8:1c:65:94:a2:70:be:48:e6:bb:c8:11:c8:
fe:28:ad:80:78:97:9a:f8:b3:ac:1b:33:a5:06:f9:d5:93:39:
51:cd:38:a6:12:1b:90:6d:87:26:8e:98:b0:75:03:b0:90:92:
dc:87:a2:38:ba:7e:7a:00:87:78:b3:52:8b:21:6d:4a:c6:08:
ed:5b:04:b1:4a:3f:56:36:45:1f:36:26:be:a8:59:fe:ab:df:
f7:7f:b9:83:44:a7:79:21:d5:c0:cf:93:97:b9:03:cb:52:78:
c2:bd:ca:b3:b1:7f:5f:c1:01:e4:b5:d3:ba:6a:f7:3e:d5:b0:
4c:f9:cc:ef:51:df:1b:cf:d5:04:30:36:ff:c3:f7:86:21:0f:
07:b2:13:f7:5a:17:36:35:5a:fe:4a:f5:8c:bb:e5:ec:56:d5:
ad:61:a4:b1:6b:38:ab:67:b9:b9:5f:80:ec:1f:46:c0:c5:a0:
b0:53:0a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:32:22 2026 by rpki-client