Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
File: 3y3kqfK8Uj318Kf15DJJikLFX3A.mft (raw, json)
Hash identifier: Eto1yVNmXs3lX40Apqda82jTaO1VTa79RtOjP8drAG8=
Subject key identifier: A4:F9:E0:A5:49:39:40:02:A1:0A:44:21:95:63:DB:54:8F:1E:46:BD
Authority key identifier: DF:2D:E4:A9:F2:BC:52:3D:F5:F0:A7:F5:E4:32:49:8A:42:C5:5F:70
Certificate issuer: /CN=df2de4a9f2bc523df5f0a7f5e432498a42c55f70
Certificate serial: 01A0D493E064DC67E047DB8A3B7947468152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3y3kqfK8Uj318Kf15DJJikLFX3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
Manifest number: 01C4
Signing time: Thu 24 Sep 2026 18:00:56 +0000
Manifest this update: Thu 24 Sep 2026 18:00:56 +0000
Manifest next update: Fri 25 Sep 2026 18:00:56 +0000
Files and hashes: 1: 3y3kqfK8Uj318Kf15DJJikLFX3A.crl (hash: /aW0IkoAsuwg3oASXyT2xAnj8uQE6M4XQgpgscauRJU=)
2: 8XebNTiumaUWcLbgsrPRqEK7yJk.roa (hash: wIkMYGUwRkloiGV8zcV817/8WXtvc8qz+eDzExEQl48=)
3: SU9_tB5lwfHPL_4Kt4ROwFHlUMI.asa (hash: wN65KwAJllI0kxcg5tgjkk0Y4QH9uf/hvRTzQ2pTovk=)
4: xtsoV3YrVhm4MKDjfu3IvjG7q1g.roa (hash: qMRfu2o1bzSJ1p0UvgBKjKi65ckvS8nI12aCVQ8a6vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3y3kqfK8Uj318Kf15DJJikLFX3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:93:e0:64:dc:67:e0:47:db:8a:3b:79:47:46:81:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df2de4a9f2bc523df5f0a7f5e432498a42c55f70
Validity
Not Before: Sep 24 18:00:56 2026 GMT
Not After : Sep 25 18:00:56 2026 GMT
Subject: CN=a4f9e0a549394002a10a44219563db548f1e46bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:97:af:51:2c:06:ce:4b:0f:c3:e0:2d:56:01:
c1:6f:03:50:7f:ea:f3:bc:51:76:24:03:b4:2e:fc:
75:fa:f1:37:f0:78:d7:1e:47:92:8f:dc:05:d8:ca:
6e:ac:05:bc:df:1a:28:2a:97:d0:90:bf:83:b8:63:
b8:8a:62:a4:7a:1a:78:1b:86:41:47:ed:a9:77:1e:
d2:c8:04:78:04:77:dc:0c:e1:63:3e:88:cb:69:c6:
76:3c:16:2c:00:94:cb:1a:dd:fd:7a:2f:41:88:8a:
bf:91:8a:82:03:da:9f:17:66:3b:39:dd:96:54:03:
4c:84:fd:b5:aa:f7:6a:31:16:37:f0:7d:49:80:3d:
75:18:bf:86:23:25:70:9e:c3:9d:8d:2d:9c:e2:df:
a0:42:4e:c1:16:11:22:61:16:1a:bc:63:15:32:b9:
96:5a:27:57:fe:0e:df:93:e8:c7:c8:68:14:5e:df:
31:4c:b2:d0:9f:1f:76:e8:6c:32:30:6f:94:15:1b:
92:94:03:a2:55:e0:28:b9:0e:d8:44:46:d1:75:38:
5c:b7:bd:1e:50:b8:fa:6d:ea:59:53:7c:a2:cb:9f:
bb:95:95:59:ec:65:74:bf:d9:4c:af:ef:3d:4e:a6:
8d:d7:04:fc:5d:c9:da:f2:46:f7:16:41:e8:96:e3:
52:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F9:E0:A5:49:39:40:02:A1:0A:44:21:95:63:DB:54:8F:1E:46:BD
X509v3 Authority Key Identifier:
keyid:DF:2D:E4:A9:F2:BC:52:3D:F5:F0:A7:F5:E4:32:49:8A:42:C5:5F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3y3kqfK8Uj318Kf15DJJikLFX3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:97:45:90:43:ac:dd:3c:f2:2f:12:ea:91:dc:a0:6c:bc:f0:
8a:f3:37:08:72:e0:d6:52:70:2a:cc:ce:16:76:e8:c2:3c:a8:
43:3d:7f:21:d1:03:7c:e9:12:1c:3a:b5:b8:b5:bb:8d:a7:ec:
55:c0:d0:2d:a7:06:95:ab:43:53:6e:c1:a4:53:bf:25:05:90:
e6:c7:17:a2:79:34:80:a5:ab:50:a5:3b:55:dc:76:4f:9a:05:
16:b1:6d:d1:28:d8:11:52:3a:33:5c:f5:3a:ef:54:2c:34:78:
35:be:e3:17:96:31:da:5e:a2:d4:89:0c:3d:65:a1:9d:ce:c7:
db:eb:4a:10:4b:86:1f:2c:55:30:ee:c2:40:64:bb:da:e5:2e:
c5:c9:b2:36:02:fb:f1:22:58:68:50:48:64:13:dc:40:fe:7f:
36:56:03:f7:1b:e9:1f:c5:40:3f:70:04:cf:94:79:d3:d6:b4:
97:0d:7b:bf:6e:4b:a5:7e:22:f3:e5:7f:27:3e:d6:dc:17:f6:
e6:90:13:e1:cf:8f:72:41:ea:f9:7b:0d:8e:b2:95:fc:6f:fa:
04:96:7c:ba:28:08:e9:a2:68:d2:80:55:50:8a:eb:27:9f:f6:
f1:61:42:76:d1:10:60:17:a6:af:f3:47:93:99:e3:a3:dc:a8:
67:cb:e7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:07:22 2026 by rpki-client