Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
File: 3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft (raw, json)
Hash identifier: 5VNSTm1ktw26kOGdjAL31xDhtMLafhN5dCIaOQ/4aeE=
Subject key identifier: 09:7A:6A:76:17:41:33:D1:78:44:E1:C8:2F:54:9E:C7:BD:C0:AD:79
Authority key identifier: DE:5A:EC:BA:10:3B:B3:C0:C0:E8:84:D5:20:EB:38:46:4D:0F:A9:03
Certificate issuer: /CN=de5aecba103bb3c0c0e884d520eb38464d0fa903
Certificate serial: 01A0CCDA21BD6A578E248A577AA84AA69D74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
Manifest number: 12F1
Signing time: Wed 23 Sep 2026 06:00:42 +0000
Manifest this update: Wed 23 Sep 2026 06:00:42 +0000
Manifest next update: Thu 24 Sep 2026 06:00:42 +0000
Files and hashes: 1: 3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl (hash: O4hP47Xpp6o+NMaGYcNVLEnsxGrorICKax7iN7IHZ9g=)
2: dteAII4Iq7XySyzr-x5j1Z9seS4.roa (hash: h1f5SaNN80CBxnaeqEfAaP7RXxTuX9SBPLL5E40G9hI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:da:21:bd:6a:57:8e:24:8a:57:7a:a8:4a:a6:9d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5aecba103bb3c0c0e884d520eb38464d0fa903
Validity
Not Before: Sep 23 06:00:42 2026 GMT
Not After : Sep 24 06:00:42 2026 GMT
Subject: CN=097a6a76174133d17844e1c82f549ec7bdc0ad79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7f:bb:83:90:92:98:ec:a4:d6:31:ef:52:a6:
de:0c:3f:d8:f1:2b:00:61:1f:3a:9f:ee:08:5c:2d:
f0:b6:55:74:c4:53:a4:72:41:20:85:0a:be:b2:cd:
43:d1:d4:0e:a1:b5:66:99:2f:e3:89:8a:0a:30:fe:
4f:dd:36:ae:b4:18:ae:12:e7:cf:c9:96:d9:01:a6:
da:f3:94:02:ff:5d:fe:ae:c9:cc:76:43:31:a8:b2:
df:28:70:cb:4d:7c:83:27:2a:ac:5b:8b:47:d3:48:
91:c2:16:90:4e:56:fc:89:54:df:40:aa:50:05:3a:
f3:fe:30:e8:37:5f:a5:09:02:1d:74:49:65:68:91:
1c:f4:43:a2:65:08:a1:7d:a2:dc:04:d9:5f:1f:a3:
37:0b:d3:af:7c:5b:ee:51:c5:6c:6d:83:52:2c:34:
97:1a:dc:71:f4:39:d1:6d:a7:35:c2:aa:c9:d5:dd:
2d:0c:24:5f:6c:15:51:59:7a:6f:70:26:1b:14:98:
f3:cf:e9:56:e5:7b:de:de:dd:dc:57:e0:de:90:28:
2d:67:91:d2:42:52:81:ea:44:2d:c2:a0:9a:90:78:
34:29:fc:9f:9d:61:15:39:fd:0c:3c:01:c9:fe:06:
3c:65:e3:8f:86:40:6f:a0:e9:9a:0b:83:23:b1:e1:
93:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7A:6A:76:17:41:33:D1:78:44:E1:C8:2F:54:9E:C7:BD:C0:AD:79
X509v3 Authority Key Identifier:
keyid:DE:5A:EC:BA:10:3B:B3:C0:C0:E8:84:D5:20:EB:38:46:4D:0F:A9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/55c1f1-63ab-4145-b156-e6aeb9413f72/1/3lrsuhA7s8DA6ITVIOs4Rk0PqQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a5:ce:08:01:ec:8a:a2:6d:3b:64:d6:91:cb:64:e5:d2:6f:
d8:bd:08:66:0b:67:8c:e2:89:6b:e1:46:38:d6:ba:dd:45:6d:
b1:47:a5:94:e6:08:7d:d7:59:8c:17:ec:68:92:40:a0:8a:ee:
ca:26:99:bf:95:5b:e5:ac:a1:dc:94:d1:cd:0a:5e:27:1f:9c:
90:28:5f:46:9d:95:87:a3:0d:8c:0e:e1:18:9a:7a:7b:aa:fa:
e2:3b:c4:eb:c4:1b:da:7a:a1:72:37:f5:d4:fb:fd:3a:dd:b0:
d9:9b:3c:88:fb:ac:c8:8b:f1:5e:21:c2:a7:4e:46:38:c1:a2:
68:d2:b6:50:96:b5:2a:79:8b:02:22:bb:eb:d3:47:da:19:37:
b1:68:ba:87:f6:86:b4:43:46:9d:ff:05:1f:20:63:39:e7:ec:
61:0a:be:99:e9:64:9f:ba:39:a6:d2:c7:76:f9:d4:4b:b7:35:
f5:6a:45:2f:59:86:c8:03:13:c0:ed:81:9d:57:5e:45:77:f2:
e1:4b:a9:00:ed:0f:f7:03:32:28:1f:23:97:10:7e:c9:85:a1:
b2:39:17:50:d5:93:a1:15:c7:05:15:ab:e8:4b:67:06:64:d4:
58:34:ce:3f:8a:0a:d5:f6:92:c6:ff:e8:c4:50:c2:4d:dc:d8:
e2:ff:0a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:31:25 2026 by rpki-client