Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft
File: 3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft (raw, json)
Hash identifier: VybTEWCh0bnwNQXXCISisPxIfmxScsZYsss8RVJut3Y=
Subject key identifier: 5E:24:17:0E:B3:54:31:50:E8:AE:42:09:B1:D5:03:CF:13:9D:EB:3E
Authority key identifier: DD:B7:B0:01:9E:19:F1:12:F4:D2:BC:FD:6E:A1:2D:90:81:FC:58:7E
Certificate issuer: /CN=ddb7b0019e19f112f4d2bcfd6ea12d9081fc587e
Certificate serial: 01A0D20050116A2EE02DB6911396341515AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bewAZ4Z8RL00rz9bqEtkIH8WH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft
Manifest number: 1A68
Signing time: Thu 24 Sep 2026 06:00:30 +0000
Manifest this update: Thu 24 Sep 2026 06:00:30 +0000
Manifest next update: Fri 25 Sep 2026 06:00:30 +0000
Files and hashes: 1: 3bewAZ4Z8RL00rz9bqEtkIH8WH4.crl (hash: Hv8+WsxARfIIGj32wzy7D1LvU+auw0Gh8OuepdNvjpA=)
2: QAWM0Lol009j6uKq6lsWaoRBKH0.roa (hash: lK/TjxV7zjq43eORaaonfTSL2oVI9tSkgfqFQO6a0ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3bewAZ4Z8RL00rz9bqEtkIH8WH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:50:11:6a:2e:e0:2d:b6:91:13:96:34:15:15:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb7b0019e19f112f4d2bcfd6ea12d9081fc587e
Validity
Not Before: Sep 24 06:00:30 2026 GMT
Not After : Sep 25 06:00:30 2026 GMT
Subject: CN=5e24170eb3543150e8ae4209b1d503cf139deb3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f3:d8:69:40:22:15:4f:fc:d7:79:b9:95:30:
11:57:87:5f:d0:dd:3d:7a:90:9e:d6:5a:b6:c4:03:
aa:4e:a2:55:5c:76:8b:ea:92:1e:c1:ef:5a:6e:e6:
47:b7:79:0f:2f:da:0e:6f:2c:12:75:c6:c2:27:1a:
d0:1a:b7:1c:87:52:e9:ae:00:56:ba:13:0f:de:8c:
da:6b:7f:6d:f0:c2:10:34:48:ad:6d:7d:65:37:38:
59:21:85:26:63:a7:fe:2f:43:22:5e:00:1d:e7:d8:
89:13:5e:a7:1c:c1:6c:26:d9:8d:ea:95:a1:6e:f8:
98:3f:da:aa:bf:15:d0:f0:b5:fe:45:da:53:db:78:
92:de:33:cf:69:11:c0:a1:79:36:6a:cb:9e:16:0c:
d8:86:bb:07:af:4d:2e:66:6e:15:0c:62:c8:39:b4:
00:d3:9f:67:30:d1:05:48:bf:6c:fa:cb:88:98:67:
87:6f:3a:ba:76:ee:a2:a8:9f:d7:60:93:fd:4d:8e:
96:50:83:c6:d0:4d:8b:70:dc:cd:f5:c6:90:b5:2b:
fc:45:84:be:e7:f3:2a:70:60:b1:f3:7d:55:fe:c1:
65:e4:0a:36:6b:df:17:2b:51:10:0a:a1:34:d9:62:
fc:92:a4:55:72:48:d6:f5:86:8c:fa:a2:59:f1:7b:
0d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:24:17:0E:B3:54:31:50:E8:AE:42:09:B1:D5:03:CF:13:9D:EB:3E
X509v3 Authority Key Identifier:
keyid:DD:B7:B0:01:9E:19:F1:12:F4:D2:BC:FD:6E:A1:2D:90:81:FC:58:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bewAZ4Z8RL00rz9bqEtkIH8WH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/efa3f1-7671-4ce3-9fe1-a86df983a74c/1/3bewAZ4Z8RL00rz9bqEtkIH8WH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:87:06:5d:e9:5c:e3:e5:cf:8e:79:c1:ec:35:1f:5c:36:46:
f8:5f:57:6f:3c:52:13:d2:0d:34:fb:14:a6:10:9e:d7:e1:95:
e3:09:c5:03:f1:c5:7e:5f:89:64:00:48:91:01:ed:69:86:96:
47:c3:a3:6f:d8:d4:30:c0:c1:c7:eb:48:c6:28:4b:68:5e:94:
b1:2c:eb:4e:a5:3a:f2:ec:37:73:81:5e:16:7e:99:35:53:4f:
2f:8b:99:6d:aa:b1:82:4f:09:ae:50:c9:a7:0c:82:47:fe:b8:
d9:2b:f2:e0:0c:5e:19:2f:06:10:2a:16:ee:f8:93:4b:eb:c5:
6b:f9:86:7e:0d:ed:1a:20:4b:d5:00:d7:f5:24:25:ae:23:10:
45:5c:03:0e:ba:e1:81:82:39:fc:72:88:87:a7:cf:5c:7e:4f:
e6:6c:ba:26:63:cc:f2:0c:ba:4a:cd:58:2b:ae:61:2a:a3:89:
6f:b9:0e:0f:17:67:2f:17:11:b5:8c:68:37:58:6e:44:45:ab:
fa:b5:86:1e:59:f4:ba:73:5d:c4:a5:2d:96:ca:20:c5:a8:da:
29:d7:16:69:c4:28:63:cc:ff:e4:79:a4:e0:e3:43:ea:78:41:
7a:b6:39:ff:93:ec:ca:fe:4f:89:f6:20:20:b1:f1:99:e4:a2:
79:3b:c7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:19:03 2026 by rpki-client