Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
File: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft (raw, json)
Hash identifier: xA2CxS11lMqkB03buPekoMjbRvuNpABjYmDgUT6lRLw=
Subject key identifier: 51:88:B3:E2:78:D8:32:BA:FD:5C:86:75:24:7B:57:0C:5D:62:74:15
Authority key identifier: DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
Certificate issuer: /CN=dec756af77dafebca10684d68556baacd7173617
Certificate serial: 01A0CA4717881ED9DA2D9D3CD1449BB3F354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
Manifest number: 0F8F
Signing time: Tue 22 Sep 2026 18:00:51 +0000
Manifest this update: Tue 22 Sep 2026 18:00:51 +0000
Manifest next update: Wed 23 Sep 2026 18:00:51 +0000
Files and hashes: 1: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl (hash: nTT8FzY5OmcJPMACNk/U97TaEqwuisHwcV2QL/6dtV4=)
2: KUy8l_kE9Ez8yOXsZsPg_xu8U88.roa (hash: Q8NXv7/aGohuJqdBeBqSqaYcBq21Vr5wijgoX0wzMFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:17:88:1e:d9:da:2d:9d:3c:d1:44:9b:b3:f3:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec756af77dafebca10684d68556baacd7173617
Validity
Not Before: Sep 22 18:00:51 2026 GMT
Not After : Sep 23 18:00:51 2026 GMT
Subject: CN=5188b3e278d832bafd5c8675247b570c5d627415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:21:9f:75:df:02:56:f9:11:eb:e6:ea:55:22:
93:01:bf:e9:e4:e0:a8:e2:1b:99:d5:44:4f:c3:ef:
5d:16:ea:22:9b:8a:12:c9:75:8d:64:1a:7b:30:d9:
3c:7c:41:82:7b:77:c4:02:79:3a:22:ad:c0:0e:31:
83:8d:d6:9c:4d:1e:ac:9c:9d:82:c2:78:55:a6:aa:
76:93:cc:f5:ee:3f:5a:0d:83:11:d2:bd:87:da:61:
ea:d1:21:41:42:de:05:5f:4e:c0:20:4c:4d:35:28:
de:be:1e:93:29:b6:55:6a:f1:41:0f:65:4e:0e:41:
d8:d4:33:c3:b3:1e:06:9d:3d:0c:bf:eb:24:61:25:
6e:29:39:ba:61:92:9b:05:a3:66:98:5e:5f:75:38:
f1:8a:d3:95:ea:ad:e0:e4:ed:e5:aa:30:cb:8f:97:
85:2e:b6:ff:cd:4d:55:40:c3:f9:6e:ef:02:61:33:
b8:0b:c9:13:17:92:e4:66:06:ed:4e:1a:a7:02:7e:
f5:22:e1:cb:84:d0:33:85:c1:6d:87:fb:9c:b6:23:
1a:22:00:25:18:be:66:e8:ad:80:07:f1:5f:0c:6c:
76:5a:6c:4b:cf:a6:c4:9f:82:80:14:ec:97:17:2b:
37:be:16:03:5a:28:c3:89:a1:f2:9e:21:6a:84:94:
5c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:88:B3:E2:78:D8:32:BA:FD:5C:86:75:24:7B:57:0C:5D:62:74:15
X509v3 Authority Key Identifier:
keyid:DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b8:ad:43:79:78:cd:59:9c:a4:55:36:93:84:6a:4b:d9:8a:
ab:6d:b1:c7:69:ee:8c:b2:8b:d2:85:83:f7:fb:c7:d9:19:22:
9e:49:1f:55:89:99:1e:33:2d:72:10:dc:78:c0:cb:63:c3:2b:
2a:45:bf:d6:6d:c7:5a:1d:43:db:05:cd:f4:f5:5c:05:f5:4c:
db:8a:c8:67:5c:4d:f9:cf:39:bf:9d:a0:45:6c:1c:3c:95:44:
2d:12:af:be:9d:2a:0f:d2:a5:95:8a:92:0d:c0:76:a8:cf:f8:
5b:68:f4:a3:41:b9:f7:2d:78:5f:c1:a4:cc:9d:d7:43:af:47:
5e:b2:01:f8:13:1d:62:86:fd:03:45:2e:ed:ad:9c:ee:9d:6d:
62:b3:c3:d8:ea:86:17:9f:82:76:20:6e:a7:4d:42:88:80:d1:
a3:2b:f4:03:a8:79:c6:b2:72:ce:3b:f3:7b:32:ad:b0:ce:7c:
29:88:31:cd:cf:1a:08:96:5a:3b:1b:d4:9f:eb:c6:92:6d:e5:
68:7f:13:5d:38:ca:36:01:50:dc:73:89:0f:f6:80:32:92:27:
ec:6f:5f:b0:41:50:67:5b:9e:6c:5a:02:51:41:df:14:e5:37:
99:7f:4f:4a:94:15:13:63:7c:f1:2e:5e:93:20:8c:3b:47:24:
46:30:5a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:23:56 2026 by rpki-client