Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
File: 3K5LBHGmGHLEBBQuH5D1B08NbxU.mft (raw, json)
Hash identifier: YtGBsuwq669pTi5TKZhL+F7u51EqF/GkvkKJFwEJMRM=
Subject key identifier: AE:94:91:05:5B:24:75:BE:43:90:2C:AC:C9:DF:F0:51:F8:0E:2C:A7
Authority key identifier: DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
Certificate issuer: /CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Certificate serial: 01A0CF6CBA74949A1EA5FD336E54B7842AE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 18:00:04 +0000
Manifest this update: Wed 23 Sep 2026 18:00:04 +0000
Manifest next update: Thu 24 Sep 2026 18:00:04 +0000
Files and hashes: 1: 3K5LBHGmGHLEBBQuH5D1B08NbxU.crl (hash: TYKTRTd7GCjP4BeHK/jUPuc6A3RlUPHFZH4ClZXDV2U=)
2: 9ZJf1K0dS9GGEr-7vJUqYcT4VlM.roa (hash: 4biyXnO/yjSxTlfFAVtaFC6Bi7sH2DQW0oH896Enc7I=)
3: qsdjnJflN-hqMusJ8mRO3QvIelE.roa (hash: SE6UiCw/dJG6vG+istEe6e9u75qYp7RLjIy5NUM722g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6c:ba:74:94:9a:1e:a5:fd:33:6e:54:b7:84:2a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Validity
Not Before: Sep 23 18:00:04 2026 GMT
Not After : Sep 24 18:00:04 2026 GMT
Subject: CN=ae9491055b2475be43902cacc9dff051f80e2ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:df:85:60:e0:67:97:e1:f0:53:bb:ec:cf:54:
4e:cd:e7:98:0a:a8:0c:84:27:e6:bb:4e:2f:c4:f1:
a0:6f:52:4d:9b:06:a5:a3:b6:16:d5:32:5b:d6:55:
20:5f:34:7f:2d:4e:68:b8:c3:2e:da:37:93:cd:33:
f3:be:a6:76:f0:d1:b8:91:fc:69:77:19:eb:a0:3b:
70:22:3f:b2:43:ff:fe:b2:e1:0a:37:1d:3e:b1:0f:
57:df:b7:64:a1:d9:68:1c:04:a4:fb:ae:c6:46:c6:
ef:81:86:15:8e:e0:51:ba:aa:2c:21:b8:99:d1:bb:
ef:24:2b:89:fc:4d:10:c4:02:3b:8d:ee:50:1f:02:
7d:a2:7b:d9:4f:a5:b0:83:4a:4f:92:1c:39:38:e8:
db:61:56:19:21:1f:2c:58:f6:38:9e:4f:c1:31:67:
e4:25:44:5a:52:2f:fe:b6:ca:03:45:08:de:4f:d2:
6e:3c:e6:06:ae:65:83:e7:c5:bd:71:6a:52:00:71:
0e:04:2c:fa:fc:93:ec:dd:81:1c:a8:fd:a7:88:1e:
5b:90:aa:1e:72:e8:ba:07:b8:0d:d8:66:fd:55:bf:
11:b3:ae:25:50:7b:6e:c8:df:a2:54:e1:69:6a:99:
3f:e7:33:a4:b3:62:c7:71:02:4c:b3:fe:75:01:4d:
c6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:94:91:05:5B:24:75:BE:43:90:2C:AC:C9:DF:F0:51:F8:0E:2C:A7
X509v3 Authority Key Identifier:
keyid:DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d3:3e:78:30:5c:f0:4a:f2:37:d9:ed:26:92:57:bb:6d:d6:
83:7a:f5:12:87:90:e4:73:b4:c7:81:36:9e:b5:b4:93:7d:e1:
a3:75:97:9d:78:3d:44:eb:d4:26:ea:f0:f5:9f:fe:1b:43:f4:
a5:bf:8c:fa:59:95:32:68:8a:49:a0:c2:87:e0:09:bf:f1:84:
52:48:18:da:f4:69:88:95:84:58:9e:0a:0b:f7:54:18:2a:ec:
49:1f:b9:22:49:77:41:20:cc:5d:92:db:3c:b3:2b:96:d7:6a:
03:d4:7e:d6:e2:c1:a2:c3:ea:0d:d9:00:8a:a1:54:d3:1f:df:
ea:6a:e3:83:de:e6:46:5a:98:4f:8c:e0:43:af:53:f9:57:0c:
a3:86:f9:94:2c:01:db:6c:c5:ba:7d:97:e9:9f:64:c2:2d:a2:
1c:9e:77:1a:4c:e7:15:17:11:60:75:67:3f:81:56:38:b4:6d:
24:88:8e:10:02:b2:35:cf:72:b4:c0:c2:60:d7:74:80:01:a7:
fa:79:d9:0c:66:0d:02:be:89:73:f2:46:5f:b3:c8:8b:39:3a:
dd:67:5b:1a:fa:ba:24:ca:90:d3:d5:6d:af:fc:f7:05:58:21:
80:ff:11:80:f0:8f:bd:09:29:74:c6:c5:c9:d3:ec:a3:1f:5f:
7c:8d:4d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:22:43 2026 by rpki-client