Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.mft
File: 3XGhKciwiZWUIZnqbRsigmU1DQs.mft (raw, json)
Hash identifier: G14tVzqUeS9WAGXgPfKzMx93DCBDaAESGtJ20fhzoOc=
Subject key identifier: 11:BE:EB:36:7F:B3:C6:85:FC:F9:A8:36:35:97:BE:1F:03:49:52:29
Authority key identifier: DD:71:A1:29:C8:B0:89:95:94:21:99:EA:6D:1B:22:82:65:35:0D:0B
Certificate issuer: /CN=dd71a129c8b08995942199ea6d1b228265350d0b
Certificate serial: 01A0D314EE8E5E3E4074F0C56BBA0E4DBA0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XGhKciwiZWUIZnqbRsigmU1DQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.mft
Manifest number: 1A6C
Signing time: Thu 24 Sep 2026 11:02:39 +0000
Manifest this update: Thu 24 Sep 2026 11:02:39 +0000
Manifest next update: Fri 25 Sep 2026 11:02:39 +0000
Files and hashes: 1: 3XGhKciwiZWUIZnqbRsigmU1DQs.crl (hash: 1hsJAtobPwLOrAR7A3v+t1lObRxyD826WKs62zqlLWA=)
2: BVmlLvTO3TnwU-WykyLWkZijiEQ.roa (hash: GjheiEWnUhL3hO3K8TeuKDirKE8ozbAnofhtWixZIn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XGhKciwiZWUIZnqbRsigmU1DQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:14:ee:8e:5e:3e:40:74:f0:c5:6b:ba:0e:4d:ba:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd71a129c8b08995942199ea6d1b228265350d0b
Validity
Not Before: Sep 24 11:02:39 2026 GMT
Not After : Sep 25 11:02:39 2026 GMT
Subject: CN=11beeb367fb3c685fcf9a8363597be1f03495229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:36:a5:4b:fe:04:1d:3a:ab:09:28:3d:37:f9:
c1:a0:8b:1d:39:b2:fa:0e:53:f0:7f:a8:f7:64:87:
c5:6a:55:c7:a8:46:9a:6d:34:45:a8:5f:64:d8:9d:
c3:d4:54:f9:39:21:6d:23:a6:30:a7:43:c1:99:86:
d0:26:7b:80:86:25:71:9e:ae:3d:20:f6:ee:9e:d5:
36:d9:17:ef:11:a5:37:25:5d:b6:45:a1:10:27:9e:
c4:f9:9c:fb:38:20:5d:0c:44:48:58:82:f6:07:ec:
b9:bb:16:59:0f:c3:7d:0e:c7:5f:97:0a:fd:5d:e0:
fd:91:fa:99:65:ff:89:33:9f:4e:2d:15:4e:55:c3:
87:0f:94:6d:ff:e3:9b:1f:b1:d5:35:bf:57:19:c1:
50:b6:4b:b5:c0:12:30:e0:9c:9a:61:fa:d1:87:62:
34:0c:7d:70:6b:14:88:2c:77:ed:d0:e1:56:5e:08:
e6:eb:9a:e6:7c:c8:43:65:f0:af:2a:80:f9:3c:a1:
32:78:b9:e0:30:f7:64:b8:c0:ed:82:6a:ba:cd:1d:
88:ca:3f:95:46:1b:06:d3:76:d4:67:cd:9d:2e:f7:
56:ce:14:c1:2b:98:44:7e:95:5a:f0:43:ae:9a:51:
55:5d:7a:0c:9b:5e:62:94:8b:71:20:51:87:11:c5:
78:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:BE:EB:36:7F:B3:C6:85:FC:F9:A8:36:35:97:BE:1F:03:49:52:29
X509v3 Authority Key Identifier:
keyid:DD:71:A1:29:C8:B0:89:95:94:21:99:EA:6D:1B:22:82:65:35:0D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XGhKciwiZWUIZnqbRsigmU1DQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:78:a5:a7:69:fa:36:5d:68:8d:14:e0:e7:74:7d:31:85:cd:
6e:89:2f:05:2c:f2:68:6d:b4:92:c7:22:17:dd:01:20:23:d3:
2b:0c:99:29:6f:bd:53:f3:a9:ae:96:e7:cb:38:27:30:67:51:
d9:6f:4f:69:19:4d:d9:63:15:67:19:d9:f2:3a:5c:6a:33:78:
f3:e1:34:10:66:4b:53:a9:a2:3d:6f:8e:01:6a:ff:97:84:b6:
8a:39:36:c8:35:18:cf:1a:5c:d9:0f:c2:d3:c3:4f:29:59:25:
99:4a:0d:b5:ac:03:cf:67:cf:b5:d0:f9:19:18:4c:e9:f7:f9:
a8:1b:b2:a0:87:a4:a0:91:b8:2e:52:a7:18:3b:4a:15:84:0b:
7b:e1:e9:3d:d0:80:93:0a:96:e4:48:f1:8e:d2:d0:d3:82:6a:
66:09:db:c2:23:56:75:98:c2:0e:95:2d:a2:a3:d7:66:da:59:
8a:b6:b4:01:18:fa:90:da:a8:89:bb:bc:a9:da:76:a2:1e:7e:
a0:b1:6b:3b:56:83:7b:08:04:06:61:95:6a:b6:21:86:6b:1d:
e9:ae:7f:ad:bd:6e:06:9f:5f:05:51:29:ae:84:12:34:21:b7:
3c:be:d4:3c:d2:dd:31:6d:25:23:48:34:03:4c:23:ef:b1:df:
86:ce:b5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:19:37 2026 by rpki-client