Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
File: 3KCCSJpBQMCnjgPVC2v9VAKwROo.mft (raw, json)
Hash identifier: ul7pswnIbUDXS5gy7n17ncpkGXSOva48YwR0eswqhz8=
Subject key identifier: BF:9C:AD:60:C8:16:3E:9B:70:47:6B:C6:45:95:09:61:9D:EE:99:71
Authority key identifier: DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
Certificate issuer: /CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
Certificate serial: 01A0CA46A99A5ACD669E9DC8C9EE502FBB32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
Manifest number: 1504
Signing time: Tue 22 Sep 2026 18:00:23 +0000
Manifest this update: Tue 22 Sep 2026 18:00:23 +0000
Manifest next update: Wed 23 Sep 2026 18:00:23 +0000
Files and hashes: 1: 3KCCSJpBQMCnjgPVC2v9VAKwROo.crl (hash: pJsi5pNLi0ZVnYni6KdlWkNCc5jzxflVNzXPOa29OB8=)
2: 8LiOuIicwsY8-ml0zZmX3B_CKY0.roa (hash: PGF9mG8gxQZuhtHniYJ4M8QD71XqK/WXHLHoKAZKACI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:46:a9:9a:5a:cd:66:9e:9d:c8:c9:ee:50:2f:bb:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
Validity
Not Before: Sep 22 18:00:23 2026 GMT
Not After : Sep 23 18:00:23 2026 GMT
Subject: CN=bf9cad60c8163e9b70476bc6459509619dee9971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:32:7f:21:5e:e6:eb:6f:89:17:5f:b9:e3:2e:
f5:f2:29:e2:db:49:77:9d:71:23:e1:38:5f:f4:7b:
29:03:b0:97:f0:7c:b6:14:03:1d:d5:ef:1d:35:11:
20:63:4b:71:df:d9:35:1c:ef:aa:23:db:97:98:72:
d0:2d:c1:30:18:85:ba:15:74:bd:7c:97:a6:fc:2f:
9b:7d:91:5c:7f:f1:1a:5c:be:81:2b:e8:db:8c:f9:
62:c5:2a:8b:35:09:32:ab:2b:58:5f:b9:9c:59:3d:
f1:85:ff:85:11:ce:fc:3b:84:6d:94:40:e3:fb:43:
1b:87:50:de:db:7e:28:bb:73:4e:5e:82:d3:f3:12:
c6:c1:1f:52:fb:22:cc:6e:99:75:e7:96:7d:09:3c:
ac:4e:cb:cf:89:b4:53:7c:94:cc:a6:57:9e:d6:5e:
01:f7:2a:8b:ff:80:78:27:a2:82:e1:6f:73:05:cd:
fc:30:a5:1e:e5:51:af:fd:aa:03:50:9a:50:77:28:
78:d3:1f:1a:a8:1c:dd:9a:f1:13:75:8e:1a:d6:46:
23:da:e9:41:6a:c2:5b:c3:2d:5f:4c:06:9d:f3:5e:
35:8e:97:ea:1c:66:82:cd:e4:e9:ee:b0:22:c1:d5:
db:88:2f:a3:34:db:c2:81:43:f5:c8:d1:bd:fc:73:
77:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9C:AD:60:C8:16:3E:9B:70:47:6B:C6:45:95:09:61:9D:EE:99:71
X509v3 Authority Key Identifier:
keyid:DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:3e:0f:5d:17:ca:6f:f4:20:3b:13:7b:bc:1c:4d:85:ee:78:
62:3a:ae:fc:f9:47:da:ad:89:1b:02:de:8a:51:a5:2a:7a:55:
c2:7d:52:8f:58:61:91:6a:72:e9:a8:57:0a:4e:f3:3f:80:a5:
93:11:10:2f:66:e3:6e:51:04:4e:47:0a:59:13:04:f1:54:16:
e0:b8:e9:e8:77:fd:12:2f:79:ab:f8:10:6a:89:06:53:da:72:
ff:5d:ca:a6:84:9b:fb:5c:6c:02:5f:da:90:b5:d5:e9:5d:a2:
bf:61:9a:af:d1:e9:d3:a2:66:31:71:51:51:17:89:c1:81:d6:
d5:d9:b0:1d:2e:4a:6b:36:a9:49:59:fa:95:c2:ce:cd:6e:d3:
98:c6:04:c6:97:1b:b6:1d:28:d1:c4:a3:5c:c6:6a:63:bc:cf:
38:9f:28:d8:ab:b1:56:a3:ff:0d:b3:d9:2f:89:26:cb:15:9a:
96:75:cd:5a:26:e9:54:a4:47:cd:e6:00:7f:fe:82:e4:6e:3e:
59:19:db:94:8b:61:14:d1:8b:d9:f6:68:b2:fb:93:cf:f8:c4:
50:1e:55:04:12:36:9e:8a:37:33:8a:35:dc:98:b2:e7:71:3f:
72:94:81:5d:99:f4:89:c3:7f:25:62:91:d2:e0:55:3b:d9:e0:
fd:a1:30:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:23:21 2026 by rpki-client