Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
File: 3VXsF19u56H8H4mt91S7KghiV4o.mft (raw, json)
Hash identifier: GfWp5wFNRRQ3NCHzE+9kdpMat3P5g6TsNwcEE/0wYK4=
Subject key identifier: 6D:68:07:C2:38:AA:8D:12:D8:AC:51:C2:36:70:99:0F:9F:EF:DE:45
Authority key identifier: DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
Certificate issuer: /CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Certificate serial: 01A0D83BC41575E4336D5762723B3E583D36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
Manifest number: 1A02
Signing time: Fri 25 Sep 2026 11:03:10 +0000
Manifest this update: Fri 25 Sep 2026 11:03:10 +0000
Manifest next update: Sat 26 Sep 2026 11:03:10 +0000
Files and hashes: 1: 3VXsF19u56H8H4mt91S7KghiV4o.crl (hash: eST4WqIZt212sLSHQv+bZvX03VwQhg9X95npnTX4ZFg=)
2: w3_eDrVHUYCcKtbza7c41NLDYIM.roa (hash: IPJ09SAjboh4Vep0OkCZipCIUFqGArpEx9t2oIDtFc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3b:c4:15:75:e4:33:6d:57:62:72:3b:3e:58:3d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Validity
Not Before: Sep 25 11:03:10 2026 GMT
Not After : Sep 26 11:03:10 2026 GMT
Subject: CN=6d6807c238aa8d12d8ac51c23670990f9fefde45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d0:ef:7c:ae:72:69:66:1f:f7:3f:63:f0:6b:
db:98:6b:f6:0c:d5:da:62:3d:dc:06:e9:86:0c:c1:
29:3c:01:56:30:c5:c9:68:6a:ac:34:02:86:40:05:
75:a4:f2:e3:fd:2f:b4:d1:b9:c7:cd:a3:17:6d:74:
59:f7:3a:1d:68:70:7c:5c:21:da:3f:01:c6:a6:74:
6e:3f:11:ee:dd:b5:75:04:da:68:cc:d8:17:61:72:
d6:63:63:0a:48:e6:87:81:88:aa:db:d0:86:8d:1b:
c1:bc:9b:2d:64:19:ac:0a:6f:c9:c3:9d:da:16:a3:
90:b0:d4:0c:cd:31:c7:70:6a:16:be:5c:77:f9:9e:
f6:ea:98:97:21:a0:b1:88:78:a6:1b:11:b8:36:98:
89:e9:fc:ab:cb:34:c5:7a:e6:6f:56:14:f0:76:d0:
94:b6:7b:41:e1:fc:85:b8:64:95:0f:10:d4:6a:d6:
b2:17:57:a4:f2:50:4d:01:71:d3:82:55:4c:20:f1:
0c:12:ec:02:91:e7:dc:1c:7b:16:1e:0a:54:bc:a6:
9d:91:a4:da:1e:29:6f:5a:22:eb:4f:4a:37:51:fd:
c4:91:55:2e:b1:b1:be:7d:f8:5e:30:16:64:6b:a8:
06:55:1a:1b:cf:b2:ef:38:82:c7:3f:4e:fe:3e:ec:
ac:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:68:07:C2:38:AA:8D:12:D8:AC:51:C2:36:70:99:0F:9F:EF:DE:45
X509v3 Authority Key Identifier:
keyid:DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:43:c9:33:86:5f:94:00:2a:0d:d8:aa:e8:23:12:8f:9b:b4:
5e:80:82:e0:e4:60:cb:2b:2c:e4:e7:77:35:d4:19:e7:3e:b5:
a5:b1:a8:8c:71:91:a3:f0:7c:3e:89:e2:c4:cf:f9:07:5c:d5:
76:4d:d9:ec:a7:1d:dd:e8:6a:16:65:a9:74:db:15:56:8b:5d:
d8:d6:80:70:c9:6e:45:a7:15:1b:86:82:01:17:15:35:09:55:
bd:a1:58:64:30:9f:28:1f:3f:6e:13:e1:27:59:70:20:58:56:
78:8a:8c:f0:c8:1f:23:48:35:a9:d1:ad:ca:81:7c:29:e2:8b:
17:41:2f:b9:ea:07:3e:17:05:60:44:62:ab:9e:8e:96:37:02:
96:04:b4:d6:92:7d:b9:21:5c:a7:7e:c2:f7:bd:81:e5:a1:a2:
ad:9a:ef:1a:55:02:01:ee:e1:1d:af:26:c1:d6:1e:f6:6a:dd:
23:b1:9a:ca:29:73:57:1d:4b:fe:14:37:87:5e:de:35:27:dd:
48:06:4f:69:d6:24:d2:94:73:4a:f9:07:3a:91:72:87:7d:81:
3e:93:ce:15:28:1c:22:7e:6e:a1:44:7e:6f:00:ab:28:79:73:
75:98:d9:7b:d4:fd:86:68:6e:14:f0:a7:13:06:8b:b6:74:ec:
02:38:a6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:52:43 2026 by rpki-client