Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
File: 3EFBHpPiXV7GUJlWmxtcX63Brj0.mft (raw, json)
Hash identifier: szZWrlcIaTncKaWY8hqJTuATK8kGbcnmndSj8WN6ytc=
Subject key identifier: E1:10:44:55:EC:28:10:C2:74:18:F4:38:4C:69:F0:9C:92:EB:5C:E9
Authority key identifier: DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
Certificate issuer: /CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Certificate serial: 01A0CAB4DA28D37EFACC79CC1FA50C0EFD0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
Manifest number: 1633
Signing time: Tue 22 Sep 2026 20:00:44 +0000
Manifest this update: Tue 22 Sep 2026 20:00:44 +0000
Manifest next update: Wed 23 Sep 2026 20:00:44 +0000
Files and hashes: 1: 2uJAkewiUJwsbNaj2yvunQboIco.roa (hash: FFjpTcabKOY4bvHAqUpVIWDG0dv6yHtpa4jSe9dcbIQ=)
2: 3EFBHpPiXV7GUJlWmxtcX63Brj0.crl (hash: 9z/0casCx7yzos9Gg8J8ucYe3jcMyOKoYL+CKXk5OZU=)
3: B1STsfdesV5NfTBKRKCVN2ABrCw.roa (hash: NWB6mpqgZNqK5Ki19/Fr7idV+OhlroMe3Jwdlj+J+M0=)
4: VaQhwNUDpB1f377_pgDC7bKIVs8.roa (hash: yIsP2S+y7+H5E1qVaCf/heokAGlt0wDZeCh1+1PijTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b4:da:28:d3:7e:fa:cc:79:cc:1f:a5:0c:0e:fd:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Validity
Not Before: Sep 22 20:00:44 2026 GMT
Not After : Sep 23 20:00:44 2026 GMT
Subject: CN=e1104455ec2810c27418f4384c69f09c92eb5ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4b:72:16:30:aa:c8:21:00:80:bf:87:e0:67:
1c:3e:a7:15:9d:06:19:4a:b3:6f:98:1b:11:25:0c:
aa:df:9c:fa:14:97:2d:5d:83:00:84:dd:d3:7f:ba:
a8:d9:91:69:65:a6:0d:50:fa:67:44:98:02:b9:22:
9b:7b:74:54:e5:d1:a9:29:0c:bd:95:e8:90:d9:0a:
28:67:75:9a:8a:1c:b5:c4:0e:be:9b:9d:c9:49:94:
0f:88:ff:bc:2b:29:69:0a:23:c9:c1:73:2c:c2:c9:
a5:a1:c4:96:71:55:0c:97:90:24:4f:0c:a4:8e:49:
84:3a:b1:7c:34:20:db:35:51:51:c6:e4:62:d4:d7:
38:66:4e:b5:a6:4a:81:6f:8f:30:21:e9:79:ef:93:
ab:b9:ab:f7:4c:63:85:4c:4b:68:f8:c2:f4:a5:8f:
e6:bc:41:1c:3f:21:22:68:8d:b6:e6:98:bf:62:f5:
67:5b:4d:f0:00:6f:b7:47:a0:f9:d8:f9:d8:02:37:
74:09:94:07:7a:46:6c:f5:cc:c4:a4:e8:50:bc:85:
00:d6:19:24:08:5a:5a:21:cc:74:0d:ba:81:e0:1b:
ec:d6:5c:af:6f:e5:79:64:a3:c4:4c:1d:84:4d:12:
10:0e:a3:98:7f:67:ec:60:00:31:d2:15:54:29:03:
46:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:10:44:55:EC:28:10:C2:74:18:F4:38:4C:69:F0:9C:92:EB:5C:E9
X509v3 Authority Key Identifier:
keyid:DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:83:fa:5d:49:5c:ea:b3:b1:0c:18:71:f7:9d:2e:5a:c3:46:
d8:05:93:68:9b:55:c6:eb:92:6f:86:76:d6:0d:18:63:b1:39:
26:41:da:d7:05:37:d1:20:41:c7:d8:6d:f8:f9:45:32:0e:26:
0b:ad:9c:d4:f2:c3:8f:61:06:35:7f:f1:9b:72:07:68:d0:1b:
b5:3d:b1:54:a3:d2:a4:c9:73:4d:11:0f:66:cf:9d:f2:aa:c5:
8a:f5:6b:27:4c:59:76:cf:26:a9:7c:b6:dd:08:9c:ac:ce:bb:
39:5c:4f:3a:96:90:26:91:d5:e4:1d:49:c2:60:4c:96:b1:19:
c1:ac:c6:a0:3f:99:b7:df:77:f5:d8:58:9c:3e:97:4f:03:cf:
0d:4e:1c:e0:0c:0f:2e:77:37:32:b3:41:7e:b8:5d:a6:56:f1:
91:02:be:60:e0:2f:37:40:17:2d:1e:7d:96:d1:5a:ba:ec:e2:
e5:63:6f:17:63:d2:5c:45:03:ad:51:77:7b:9c:43:f7:95:81:
81:36:af:32:6c:d2:25:38:62:6a:3e:59:3f:bf:df:eb:b7:32:
68:c5:95:ec:d0:7e:cf:6a:c9:69:5a:7e:c4:a6:50:d1:00:56:
66:c2:7d:18:c5:4b:b8:2e:bf:af:07:27:52:1c:4f:48:60:dd:
07:ad:72:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:47:15 2026 by rpki-client