Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.mft
File: 3ozUdpwybYRex1OmcNo6yptp7hU.mft (raw, json)
Hash identifier: yQqOQBDRpsDboq1qck/F6fyMwRXVQAI14IKVTr6tM4s=
Subject key identifier: 61:0B:0F:36:EE:B9:3A:65:6E:4B:1A:75:41:CA:74:55:2D:23:48:69
Authority key identifier: DE:8C:D4:76:9C:32:6D:84:5E:C7:53:A6:70:DA:3A:CA:9B:69:EE:15
Certificate issuer: /CN=de8cd4769c326d845ec753a670da3aca9b69ee15
Certificate serial: 01A0DC84601BCC102082C9679DDD567D4AAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ozUdpwybYRex1OmcNo6yptp7hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.mft
Manifest number: 04CE
Signing time: Sat 26 Sep 2026 07:00:57 +0000
Manifest this update: Sat 26 Sep 2026 07:00:57 +0000
Manifest next update: Sun 27 Sep 2026 07:00:57 +0000
Files and hashes: 1: 3ozUdpwybYRex1OmcNo6yptp7hU.crl (hash: NpT+OURlTpAUVlUQbD++hDSWw1mTep86gQM7HJybwfs=)
2: BNslYYnyJbQUX-hm0CSR2lkEI-c.roa (hash: ccskpB9Iw7RlPpaSvm887XUkgOImLelHDmM6zJHbDaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ozUdpwybYRex1OmcNo6yptp7hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:84:60:1b:cc:10:20:82:c9:67:9d:dd:56:7d:4a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8cd4769c326d845ec753a670da3aca9b69ee15
Validity
Not Before: Sep 26 07:00:57 2026 GMT
Not After : Sep 27 07:00:57 2026 GMT
Subject: CN=610b0f36eeb93a656e4b1a7541ca74552d234869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:68:7b:a7:d3:d8:f6:84:c6:3f:3d:cb:6f:e0:
37:58:08:14:e9:6d:41:1f:2d:85:e6:e0:9c:7d:0e:
9b:90:ee:c2:77:11:ce:74:23:0a:06:57:c8:01:06:
56:39:42:cc:69:8b:e8:35:9c:67:bd:0e:8e:c5:78:
0a:38:a3:cb:5e:6b:21:8f:88:a9:a2:42:39:88:a9:
f3:b5:8d:38:69:7a:b8:5c:4e:3c:61:d9:29:a0:e2:
8f:8a:81:4f:fa:07:fb:78:60:95:53:81:c3:e4:1c:
16:e5:a4:07:f2:86:e5:fd:ad:e8:d3:9f:6b:c6:70:
ec:da:5b:c1:f4:a1:5f:90:19:a0:c2:1c:30:d4:61:
62:67:46:43:39:b7:d6:fa:3b:8c:57:1f:db:72:75:
2d:93:28:0f:97:94:65:db:bb:b6:27:9c:61:0f:fc:
18:eb:b7:80:bd:6e:3a:57:36:81:a4:c9:6a:80:7f:
a4:7e:d3:7c:fe:f4:b6:e5:dd:9c:a8:e3:59:fd:5a:
93:9c:be:86:04:e2:86:5b:38:35:da:51:6b:e8:4f:
e1:89:d3:61:92:0e:ac:a9:b7:fa:60:44:56:75:42:
44:2e:9e:e0:d6:0d:a4:e6:30:28:9f:30:fd:02:d9:
e1:a1:4a:a1:be:41:f2:3d:c2:77:0d:69:93:e9:cb:
f8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0B:0F:36:EE:B9:3A:65:6E:4B:1A:75:41:CA:74:55:2D:23:48:69
X509v3 Authority Key Identifier:
keyid:DE:8C:D4:76:9C:32:6D:84:5E:C7:53:A6:70:DA:3A:CA:9B:69:EE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ozUdpwybYRex1OmcNo6yptp7hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:5a:df:e7:7a:9c:1c:9f:a3:48:62:d1:bc:4e:bd:cd:e1:6c:
aa:02:46:9a:3c:fd:57:4e:92:f3:43:2d:7b:3b:8f:a9:60:0d:
3a:64:5b:d4:6b:16:23:fc:59:14:98:0d:0c:27:10:42:0b:27:
49:00:b0:83:b3:ce:50:c4:fd:29:6c:fe:fa:87:55:e3:8f:06:
0b:cb:9f:bd:db:f6:0e:13:ce:25:18:a9:88:da:a1:6b:88:16:
d2:1a:d6:da:48:62:ed:d0:e9:38:7a:cc:e7:03:1f:52:ff:96:
0c:1f:34:a7:5f:6e:6e:88:ec:67:9a:fe:03:74:d9:e6:79:d2:
c3:a2:f7:0a:ee:d6:47:ab:6f:d3:8e:b4:13:3f:dc:e9:5a:e5:
47:31:72:63:41:1d:d0:1c:ae:53:ca:29:7e:89:3b:d4:15:0b:
ac:c0:c3:d8:bd:c2:4f:68:d4:c2:ce:61:52:af:5b:ed:cb:cd:
91:c5:83:b8:4a:7a:fd:3c:1d:8f:e3:c4:98:d6:f4:a5:f7:cd:
9c:60:0b:bf:55:cc:de:10:fe:d8:b9:03:1e:e2:3e:bf:d3:2c:
6c:6b:2b:a3:08:ca:26:ee:d3:29:7e:a0:7f:87:d0:f2:3d:ba:
0f:83:75:13:87:92:d4:09:58:c8:89:3b:36:f2:91:c7:84:7d:
f6:00:70:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:41:18 2026 by rpki-client