Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
File: 3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft (raw, json)
Hash identifier: RrHbCM11osTexGIa1m8gMLMW9q3fgsMB7y2g41r+Kws=
Subject key identifier: FF:33:68:57:35:E0:38:AF:17:84:18:11:0F:40:74:A5:94:49:F5:15
Authority key identifier: DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04
Certificate issuer: /CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04
Certificate serial: 01A0C9D8C8E21E3D1835C78BAE13E2DE44BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
Manifest number: 13A6
Signing time: Tue 22 Sep 2026 16:00:22 +0000
Manifest this update: Tue 22 Sep 2026 16:00:22 +0000
Manifest next update: Wed 23 Sep 2026 16:00:22 +0000
Files and hashes: 1: 3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl (hash: SOmA7eK8w/vl0v08olPUj3Dsl5jTdQnRe0r0mxw4cDs=)
2: W3l5JRhPuthx-ykoXQXBD_xsWjQ.roa (hash: ZdAWG0LeOjORysxwVmV4ixsOS0/0z5BY+UNn11FxoO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 16:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d8:c8:e2:1e:3d:18:35:c7:8b:ae:13:e2:de:44:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04
Validity
Not Before: Sep 22 16:00:22 2026 GMT
Not After : Sep 23 16:00:22 2026 GMT
Subject: CN=ff33685735e038af178418110f4074a59449f515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:28:1c:35:9d:09:9b:79:99:4f:5a:ae:2e:17:
bf:30:08:d1:d0:9e:67:b5:54:88:38:6b:b0:5b:60:
83:1e:bd:79:ed:3b:c2:34:8d:f4:e5:13:06:09:fd:
a0:9d:61:7b:f6:c9:fe:67:6d:67:9d:55:5a:8c:5f:
a2:03:ce:4a:a9:57:44:20:ca:0e:66:ff:4a:5b:ed:
81:b8:40:90:f7:57:ab:ce:dd:d6:15:5d:64:a7:e2:
81:b5:02:95:b7:5d:2a:f0:8d:6c:5d:3f:54:ee:e1:
2a:13:27:3c:e0:9c:9f:4c:15:8c:1f:0d:b7:92:de:
b7:67:c4:37:b6:de:84:ad:c6:d5:af:f6:d7:e6:2e:
2f:6e:4d:41:63:f7:63:57:b5:a6:21:5e:3a:ab:60:
9e:ea:c7:88:0f:ca:0f:6b:24:b2:6f:85:a5:45:af:
7c:c0:3e:3c:72:0e:ad:14:12:86:f7:cd:ee:a0:a1:
80:11:0e:4c:8f:83:20:83:3b:e6:a9:da:60:9a:62:
86:fc:e2:2c:0e:2d:45:83:4a:58:75:b3:1d:3e:76:
a3:ad:30:45:e8:75:88:fe:48:ff:10:f3:41:8f:05:
bf:09:00:e6:e4:d8:97:bc:f6:70:f5:47:60:fe:11:
3a:f6:8c:ef:99:e2:63:ba:1d:8f:74:4b:ff:76:c3:
bd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:33:68:57:35:E0:38:AF:17:84:18:11:0F:40:74:A5:94:49:F5:15
X509v3 Authority Key Identifier:
keyid:DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:3c:29:55:3c:3d:53:a0:fa:6e:4a:94:f4:54:b4:dd:81:da:
07:39:06:0d:81:fe:15:2c:ca:a3:29:98:a8:d7:4e:ea:bd:e6:
52:db:94:c6:d9:d9:b6:2c:e3:cd:39:b4:35:2d:64:fb:c8:dc:
3a:11:43:b5:bb:8a:3b:7d:da:1e:9f:86:03:10:b2:6b:63:00:
20:83:85:9e:0a:71:69:36:25:9e:e2:3f:ac:da:34:6d:29:d0:
67:4d:11:27:5a:6b:c6:8e:44:42:d8:e4:3a:00:3d:2b:7c:10:
a3:c1:19:ca:45:18:9e:98:24:3e:d1:2b:e0:10:7d:6c:dc:76:
54:d3:04:48:90:c9:da:a6:b4:73:8d:ce:57:a7:6e:9a:1b:98:
f8:3b:e6:a6:0b:97:c0:da:1f:31:94:1c:7c:e4:38:35:49:8e:
f3:5d:ab:49:94:3d:75:a0:f2:0a:47:25:df:a8:8b:5f:41:50:
c7:56:df:bc:87:fa:d8:3e:06:ba:1c:f7:cf:20:26:55:20:5f:
3d:9c:1b:cc:70:0e:55:b8:9d:78:cd:0a:fb:20:74:93:6a:c1:
3a:f4:db:f3:9a:55:46:21:93:11:ce:11:0b:a8:61:ec:07:3a:
1d:3f:6d:71:f4:82:e4:bf:f5:2c:85:bd:51:3a:bd:23:c9:07:
66:a2:7b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:42:33 2026 by rpki-client