Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
File: 3UZwwqb9ciMyf2i62-bQgyK3gFg.mft (raw, json)
Hash identifier: +xKlJfusTYoWw1aU/D76wHT17yZ03oo/RzIrFPkVfcU=
Subject key identifier: 70:92:6D:6B:C6:56:11:57:5E:B7:32:EA:91:37:99:64:33:E7:A1:42
Authority key identifier: DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
Certificate issuer: /CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Certificate serial: 01A0D3836D5D70B87DCE8E6ED677EC1A0FE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
Manifest number: 194E
Signing time: Thu 24 Sep 2026 13:03:20 +0000
Manifest this update: Thu 24 Sep 2026 13:03:20 +0000
Manifest next update: Fri 25 Sep 2026 13:03:20 +0000
Files and hashes: 1: 2dLJGNtyrJQjFI2AhS7wj2LhKrc.roa (hash: UnzgZZ3TVB6578Tog21CNFea50mTLp1x803U9EWHzmU=)
2: 3UZwwqb9ciMyf2i62-bQgyK3gFg.crl (hash: Msim6cO+eBjI6mdk6pOmASG1ti3M+26X6fAgkK5+pmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:03:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:83:6d:5d:70:b8:7d:ce:8e:6e:d6:77:ec:1a:0f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Validity
Not Before: Sep 24 13:03:20 2026 GMT
Not After : Sep 25 13:03:20 2026 GMT
Subject: CN=70926d6bc65611575eb732ea9137996433e7a142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:03:b8:13:a8:02:19:1d:63:d2:ca:4b:a6:96:
a2:db:8c:0a:e5:f9:01:d8:3f:c6:07:d5:56:e3:ed:
69:45:cc:f9:74:65:f8:62:89:6f:9b:7f:3e:54:76:
fb:65:c8:77:49:9c:e6:d2:4d:cb:87:ba:93:65:d4:
58:43:15:16:3b:93:d0:fa:68:06:34:86:8e:81:37:
ad:7f:5e:f6:49:f4:7f:a6:27:a4:83:dd:ae:7b:05:
f6:92:17:ce:31:c8:cb:ab:f1:42:be:89:dd:9c:d1:
b6:4e:8b:d5:90:f5:55:5f:b6:1f:66:12:53:f4:6a:
f8:48:46:f3:63:9e:11:0c:85:69:1e:b1:a3:95:f2:
06:af:b9:dc:36:c0:94:81:a8:af:d8:5f:d3:97:9f:
2d:ec:26:7d:e7:9d:6a:ac:87:53:2c:d9:ee:39:d4:
6b:1c:69:71:47:06:2b:12:09:a3:1d:7b:95:a0:01:
ba:a3:fc:4b:28:4a:a5:da:f5:c1:73:22:75:d8:ce:
c7:89:7c:6e:9c:03:e1:06:31:13:23:d9:fd:1f:0f:
b3:a3:f5:a1:7b:e8:52:82:3e:f0:6b:27:f7:d5:9a:
02:50:c0:98:e8:5b:1f:c1:3a:81:0c:8b:aa:f1:91:
f8:34:87:de:c7:cb:76:ac:3a:94:8f:bc:63:a5:3c:
e2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:92:6D:6B:C6:56:11:57:5E:B7:32:EA:91:37:99:64:33:E7:A1:42
X509v3 Authority Key Identifier:
keyid:DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:df:49:47:b6:03:12:f3:ce:5b:94:0b:6b:7c:55:00:37:ca:
32:aa:46:33:57:33:1f:26:61:7a:d7:ae:fa:37:09:26:0a:83:
70:37:64:4e:9a:18:22:49:69:61:33:46:80:cd:81:de:74:cc:
a2:61:dd:df:0f:bf:e8:9c:3f:12:85:c3:83:1e:73:28:ea:d4:
ea:ec:c1:c8:69:13:5c:4e:12:93:c0:94:e1:82:12:50:cd:ae:
8d:1e:e1:ce:6e:e4:07:14:a8:43:15:ba:51:3d:6f:a6:60:a0:
84:b1:29:6f:b1:60:35:67:16:49:7d:08:83:a7:d3:76:4b:39:
cf:0f:4c:46:8b:96:99:73:82:20:83:7d:6f:9b:4c:d0:5d:d2:
9c:22:03:03:c4:4b:6b:b1:d8:39:28:e2:0a:b4:e0:d6:29:45:
ef:a7:11:eb:62:1d:80:6b:14:67:80:68:7e:d6:9a:0e:f3:83:
29:fe:50:8a:a4:e3:7f:b1:73:6b:a6:85:90:f5:ca:75:72:08:
79:ef:8d:1c:c0:47:32:7a:0b:81:f3:f4:78:70:97:bf:15:bf:
b0:55:c2:26:d6:1f:80:83:9c:ac:ef:6d:9e:04:b2:f2:49:85:
a8:47:25:64:62:66:e2:fd:d1:56:c7:ac:24:0f:8c:6a:23:bc:
c1:54:7e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:16:22 2026 by rpki-client