Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
File: 3SBri9IhV0yWWSRDGVuQBXacck0.mft (raw, json)
Hash identifier: LUAqox3F8cgqKInusFBUDMOSFWs7FDaNCC44Iy7feIA=
Subject key identifier: C7:EF:B4:68:00:41:4A:BD:4A:00:DB:5F:9C:DA:D3:A0:DE:14:74:C9
Authority key identifier: DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D
Certificate issuer: /CN=dd206b8bd221574c96592443195b9005769c724d
Certificate serial: 01A0CEC89123E5E1F9600D516D7990D4EB01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
Manifest number: 1A69
Signing time: Wed 23 Sep 2026 15:00:45 +0000
Manifest this update: Wed 23 Sep 2026 15:00:45 +0000
Manifest next update: Thu 24 Sep 2026 15:00:45 +0000
Files and hashes: 1: 3SBri9IhV0yWWSRDGVuQBXacck0.crl (hash: E2MkgEyzwsufvRpGxbUa8p8BOwfj+bhfBlaF9WTSm04=)
2: srQhx9sIjZNbQnm0t4UEW3deG1s.roa (hash: cNnh8705CpKhEx6h/I59Oq+zBrL9F/BeoLhEWIh1/Hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:91:23:e5:e1:f9:60:0d:51:6d:79:90:d4:eb:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd206b8bd221574c96592443195b9005769c724d
Validity
Not Before: Sep 23 15:00:45 2026 GMT
Not After : Sep 24 15:00:45 2026 GMT
Subject: CN=c7efb46800414abd4a00db5f9cdad3a0de1474c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e8:f1:b0:f6:c3:31:65:2c:db:70:33:6f:a7:
4b:f2:66:6b:43:8d:d7:5a:af:cd:38:5c:fa:d0:69:
52:7e:9e:58:6d:fd:f8:5d:9d:be:6c:04:e7:e2:ef:
f3:1e:f4:f5:c0:d5:e0:f5:17:c2:d7:c9:7c:46:b8:
11:f4:2f:d6:aa:e5:e1:da:ac:5f:b3:94:ea:b3:01:
4c:b6:99:48:42:45:a0:e7:8a:ef:d1:f6:80:6d:fe:
08:13:00:51:02:ec:a9:07:dc:e7:99:7f:a9:3c:4e:
03:28:53:d7:62:6e:71:02:f7:a1:5c:cf:3a:c8:0f:
81:4d:32:7e:99:7f:3b:20:2e:84:93:23:1b:b6:a1:
17:e5:ec:2e:db:59:52:1c:86:5a:a6:a2:a5:78:5e:
2e:1e:68:d7:ed:2c:de:2a:54:32:d0:a2:20:3d:fd:
bc:9e:ea:8c:b7:61:33:8a:b3:76:16:ed:60:22:0d:
4d:aa:5d:37:35:c9:b8:a3:32:f2:07:01:0c:19:19:
3c:1a:e5:f2:6c:4d:31:95:20:09:4b:40:10:b1:e1:
5c:97:d6:61:15:71:94:a0:d5:9c:2a:44:a0:ef:a8:
25:dd:91:86:c6:b0:4e:5e:34:29:06:ea:2a:71:78:
73:27:b1:e6:00:7d:ed:83:6d:ce:f2:07:0c:63:df:
a1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:EF:B4:68:00:41:4A:BD:4A:00:DB:5F:9C:DA:D3:A0:DE:14:74:C9
X509v3 Authority Key Identifier:
keyid:DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f5:94:37:46:ff:c3:fe:e5:74:d5:7b:fb:4f:ca:ab:18:5f:
3b:4d:bd:8d:be:ad:d8:d3:cb:a7:c1:fe:c9:4b:ff:3b:84:fa:
55:99:3f:77:61:6f:60:3a:65:2d:4f:9b:d3:d7:54:2c:c2:4e:
a1:0a:c3:42:ed:bc:79:22:0a:b3:cb:d4:21:0a:23:ec:fa:f5:
9e:f8:02:76:4f:b5:d9:95:b9:dd:4d:2b:16:21:44:64:3c:94:
e5:64:6d:18:43:f0:8c:cb:2d:02:8b:03:23:f1:b9:2b:8e:0b:
17:97:b6:bf:f9:4e:ca:eb:1c:4b:7a:21:eb:94:61:aa:93:75:
f3:43:2a:b1:59:a8:83:ef:31:23:f3:7a:cf:0a:12:11:37:93:
bd:3d:68:81:10:54:a9:23:02:da:e1:76:e5:dc:6d:74:c2:e4:
8f:a0:3f:c9:88:b2:67:b0:70:a4:93:be:ea:31:05:22:7c:de:
1d:f0:5e:02:dd:04:a3:24:23:b2:b4:09:80:dd:f6:d3:52:a0:
f5:55:04:9c:07:7c:d0:8c:43:30:4f:e8:ba:e3:6f:30:b5:8f:
d0:aa:60:16:1c:ec:b3:33:1c:1b:a8:7e:f2:51:d0:53:76:94:
ca:47:90:ef:d0:aa:41:8f:6b:2f:83:0d:1c:62:7b:74:6e:ac:
1e:26:18:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:13:45 2026 by rpki-client