Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/3ohLjkYvPsE6QCTWaamdlK8FzbI.mft
File: 3ohLjkYvPsE6QCTWaamdlK8FzbI.mft (raw, json)
Hash identifier: XU9oC0oyHm/3ppD6BYcaeas77se7cdAH+2j8Rn4jSes=
Subject key identifier: 14:88:17:34:03:6B:86:18:8A:AD:BE:08:18:0E:34:1A:07:BB:2C:1D
Authority key identifier: DE:88:4B:8E:46:2F:3E:C1:3A:40:24:D6:69:A9:9D:94:AF:05:CD:B2
Certificate issuer: /CN=de884b8e462f3ec13a4024d669a99d94af05cdb2
Certificate serial: 01A0DFBD1CC35AA89CC672FC12878F1D1DAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ohLjkYvPsE6QCTWaamdlK8FzbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/3ohLjkYvPsE6QCTWaamdlK8FzbI.mft
Manifest number: 0B23
Signing time: Sat 26 Sep 2026 22:01:47 +0000
Manifest this update: Sat 26 Sep 2026 22:01:47 +0000
Manifest next update: Sun 27 Sep 2026 22:01:47 +0000
Files and hashes: 1: 3ohLjkYvPsE6QCTWaamdlK8FzbI.crl (hash: 4NfGaKsh4YwdsktQNZ+m7fwXZbLxbZvVl1my5m7HpSw=)
2: KyIGNZFDdjiF9uvViG3nRW9Bmw8.roa (hash: DzYiLKcYFU2Q0VtZNwQkwth/5N+BuGWGx0hMS551gkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/3ohLjkYvPsE6QCTWaamdlK8FzbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/3ohLjkYvPsE6QCTWaamdlK8FzbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ohLjkYvPsE6QCTWaamdlK8FzbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:bd:1c:c3:5a:a8:9c:c6:72:fc:12:87:8f:1d:1d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de884b8e462f3ec13a4024d669a99d94af05cdb2
Validity
Not Before: Sep 26 22:01:47 2026 GMT
Not After : Sep 27 22:01:47 2026 GMT
Subject: CN=14881734036b86188aadbe08180e341a07bb2c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1e:8d:80:8c:7a:97:40:6d:fa:9d:bc:2d:7d:
45:5c:c5:14:e9:b0:c2:15:f1:14:22:f8:e0:36:06:
bf:b2:5b:f6:63:6c:62:af:bd:2b:1e:4f:30:a6:e5:
c5:ff:1d:a1:a3:62:5e:57:b2:d4:01:b1:dc:d7:d7:
b8:8d:d9:cd:bd:d8:0a:a6:b8:c4:49:96:a0:09:9b:
9c:9e:5d:38:fc:c5:9f:45:be:00:5c:a4:9a:5e:1d:
db:de:1c:72:e2:d2:02:06:c9:d3:de:a5:91:59:ff:
00:78:fe:8e:da:30:5b:e1:8c:eb:d1:e5:35:a3:10:
1a:12:e7:ba:fd:0d:13:93:cf:7c:dc:0e:07:e8:59:
1e:e0:46:55:04:e6:59:2c:20:dd:cc:a0:d5:ae:d2:
8a:78:59:a1:4a:67:07:41:db:dd:bd:ab:a1:ab:66:
e0:05:a6:ff:60:38:99:4d:9c:53:6a:c8:56:f8:b7:
5c:f6:df:86:c1:8c:9c:b0:fd:47:ec:d7:cd:14:2d:
0c:e5:08:1b:2b:e1:3a:63:38:ff:2a:50:29:a4:4d:
6a:9a:a7:31:92:96:dc:13:df:e6:42:05:75:70:6f:
29:81:50:a2:ac:8d:9d:08:8a:69:f9:53:97:e7:d4:
51:de:52:cd:1b:e9:15:31:c4:29:a1:f3:10:0d:04:
d1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:88:17:34:03:6B:86:18:8A:AD:BE:08:18:0E:34:1A:07:BB:2C:1D
X509v3 Authority Key Identifier:
keyid:DE:88:4B:8E:46:2F:3E:C1:3A:40:24:D6:69:A9:9D:94:AF:05:CD:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ohLjkYvPsE6QCTWaamdlK8FzbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/3ohLjkYvPsE6QCTWaamdlK8FzbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/45df56-dd32-433c-b44e-4af70402b270/1/3ohLjkYvPsE6QCTWaamdlK8FzbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:75:47:d8:4e:14:64:b2:39:f4:53:f3:a7:fa:92:5a:ab:e0:
68:21:6f:0b:dd:25:1b:bf:99:34:79:a8:08:35:0f:78:53:71:
16:e4:8b:b6:ca:f8:64:a5:ed:9b:36:d2:94:1c:b5:19:a9:d9:
13:d9:07:8e:87:da:70:ed:60:e6:6c:de:98:5b:1b:e7:aa:31:
9c:7b:9e:a2:3b:70:3e:81:6b:2f:49:17:87:37:38:19:d0:5c:
57:7b:98:8d:f9:7d:82:10:0e:7e:d6:b9:05:71:b8:83:a1:b7:
61:25:97:6e:ce:66:f8:69:10:8a:49:e4:d7:7f:fe:aa:e5:d0:
94:65:c2:60:15:de:d1:3f:21:a2:36:bd:f6:3c:62:9e:a9:68:
12:51:83:5b:55:ff:ea:95:ed:93:eb:5e:c4:8f:38:8f:d0:7b:
de:cc:a9:48:60:8a:b2:e0:20:47:e6:a5:9f:a6:b4:87:ec:3b:
6f:2f:48:07:d9:4f:2f:a9:00:e2:fe:e5:4e:df:90:03:31:35:
74:10:ee:68:5e:53:1b:b4:9f:de:81:61:6a:e4:2b:87:17:55:
c3:bf:36:f0:a3:a6:dc:06:6d:60:88:00:37:ba:a7:bb:9c:df:
33:eb:55:d5:d1:71:fe:ce:86:00:72:0c:c8:7a:f7:40:9b:4a:
4f:27:5f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:51:12 2026 by rpki-client