Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.mft
File: 3VsiS2WT5VgDip5A5mDHcUJ1XBs.mft (raw, json)
Hash identifier: D2Y188n+5sIsdf0ydLCm//ZKWZ5EEupQF7Z+aZ/ck3E=
Subject key identifier: DE:F2:13:4B:59:A5:36:1C:78:98:DE:11:17:9C:AB:87:17:A4:9B:1B
Authority key identifier: DD:5B:22:4B:65:93:E5:58:03:8A:9E:40:E6:60:C7:71:42:75:5C:1B
Certificate issuer: /CN=dd5b224b6593e558038a9e40e660c77142755c1b
Certificate serial: 01A0CD7E6D40A21E419DA43D226437A01DB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VsiS2WT5VgDip5A5mDHcUJ1XBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.mft
Manifest number: 0E7C
Signing time: Wed 23 Sep 2026 09:00:09 +0000
Manifest this update: Wed 23 Sep 2026 09:00:09 +0000
Manifest next update: Thu 24 Sep 2026 09:00:09 +0000
Files and hashes: 1: 3VsiS2WT5VgDip5A5mDHcUJ1XBs.crl (hash: TNiw+mmSoIzT4HO4XlLvo7JwJs1O6p07BZoH3MG6Ppg=)
2: qVOiKU3-XCJIV1dlmVqm9Z8OCSU.roa (hash: 1b1b4ZznQQVB7nOvdHCZX+1O8620BLLwp7A6OVcEvQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VsiS2WT5VgDip5A5mDHcUJ1XBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7e:6d:40:a2:1e:41:9d:a4:3d:22:64:37:a0:1d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5b224b6593e558038a9e40e660c77142755c1b
Validity
Not Before: Sep 23 09:00:09 2026 GMT
Not After : Sep 24 09:00:09 2026 GMT
Subject: CN=def2134b59a5361c7898de11179cab8717a49b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:05:04:e3:f5:cb:d6:f3:02:6f:52:97:8f:ba:
5c:cb:a2:2f:93:83:09:3a:e9:27:dc:84:d9:78:79:
22:8a:f7:87:6e:0e:ce:3c:80:9a:5c:82:d8:0b:c1:
84:79:c6:44:44:b4:3b:f0:7c:45:af:9d:d9:e8:ad:
20:4f:dc:73:41:6b:87:89:42:94:6f:2b:12:cd:93:
17:0f:5c:4f:d3:2a:25:6b:84:fa:24:8e:36:23:e6:
7a:63:5f:95:31:23:79:0c:eb:05:67:32:6f:1c:c1:
b9:84:35:9c:04:f8:70:c2:6d:bf:f3:c0:cb:da:f6:
bf:83:da:2d:85:0d:a3:c3:c9:60:5a:a9:88:0e:76:
5d:d7:93:70:b7:70:14:20:8b:3b:a0:ee:c6:6f:4d:
9e:54:4c:18:36:11:75:9d:eb:4a:ff:82:bd:88:47:
f9:b9:5f:4b:09:c6:98:99:1b:f1:cb:97:ab:95:cf:
51:7d:00:80:7a:d5:4f:90:6e:19:f7:b2:cd:34:65:
23:bf:6d:bf:1e:6a:2d:0c:b4:b4:78:d8:f0:9a:20:
86:b1:a2:67:8d:51:4a:61:d0:23:f3:20:0d:ac:71:
ba:54:f1:9b:2f:0a:b5:1d:5f:2f:a4:bf:3d:c5:30:
88:bc:cb:a3:23:e6:7a:8e:09:07:0f:d7:4c:9c:64:
ec:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F2:13:4B:59:A5:36:1C:78:98:DE:11:17:9C:AB:87:17:A4:9B:1B
X509v3 Authority Key Identifier:
keyid:DD:5B:22:4B:65:93:E5:58:03:8A:9E:40:E6:60:C7:71:42:75:5C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VsiS2WT5VgDip5A5mDHcUJ1XBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:06:92:25:31:0f:89:57:a4:2e:d1:63:ae:5d:ad:4b:e5:9e:
25:a0:52:7b:38:01:9f:0f:72:33:17:92:99:27:46:1c:d7:ed:
6a:1b:48:a1:f4:42:f1:10:7b:4a:c4:11:70:bf:cd:6d:4e:70:
0e:82:ca:d7:45:fd:69:c1:b7:11:f0:1e:dc:28:02:f1:a1:7b:
0b:ba:7b:59:99:cd:b4:90:e2:84:60:c9:73:32:a7:51:29:d4:
8f:46:ee:8a:24:e1:c0:e8:24:e7:0a:a0:1d:6f:ef:a7:87:05:
a1:5a:5c:9c:be:25:82:8e:ce:f9:39:65:75:07:9d:25:e7:08:
58:da:29:5e:09:27:29:4d:59:d4:e5:e4:87:f7:0e:f1:37:94:
4c:4b:2b:44:e0:08:78:07:2b:b4:5e:09:e0:f7:a8:a4:9c:bd:
73:dc:bb:6d:99:d5:ea:6a:e5:c2:d8:e4:0b:f4:92:68:3f:01:
c5:6a:ac:9b:71:53:91:bb:da:1a:59:2e:24:87:9b:91:17:ba:
a9:ea:9e:0c:f6:21:b4:e5:c0:cc:78:ce:75:4d:be:8d:75:1f:
05:cd:21:2b:2e:cb:39:1c:cb:2c:12:38:2a:3f:0e:cc:e6:1a:
c4:9d:63:4b:9f:40:50:53:2f:c7:8e:8b:76:f8:39:7c:e7:9a:
e2:d8:bd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:28:31 2026 by rpki-client