Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
File: 3OVg8OyFDainwPjW84JRAtTeSs4.mft (raw, json)
Hash identifier: FKuFpshR9kAjGCJPeGaqW4F4/p7LvrB/J7uNK4dPRPA=
Subject key identifier: 14:36:BD:69:D6:75:D7:94:C3:8A:DB:FD:CF:06:BF:AE:22:60:1C:FF
Authority key identifier: DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE
Certificate issuer: /CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
Certificate serial: 01A0D08035E82DC6F2CFC385769AE0623524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 23:00:58 +0000
Manifest this update: Wed 23 Sep 2026 23:00:58 +0000
Manifest next update: Thu 24 Sep 2026 23:00:58 +0000
Files and hashes: 1: 3OVg8OyFDainwPjW84JRAtTeSs4.crl (hash: xZljBOa9vXcolQgzpI3S+0859qn8JbXknbUBCwE0wfk=)
2: 6K26AJnKFSRQ6qeqQiaBSR5tmsk.roa (hash: Uasee9UdIsrJgyTXIlKOU2BJMKL73nIUt5Ls4sJkN9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:80:35:e8:2d:c6:f2:cf:c3:85:76:9a:e0:62:35:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
Validity
Not Before: Sep 23 23:00:58 2026 GMT
Not After : Sep 24 23:00:58 2026 GMT
Subject: CN=1436bd69d675d794c38adbfdcf06bfae22601cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c9:85:01:45:1b:14:73:56:aa:e3:5c:a4:65:
b5:ea:d2:e8:1c:6c:25:ad:bd:dd:a8:9b:a7:44:98:
d9:75:12:29:ca:c4:bd:67:86:a3:31:05:b8:eb:8d:
d7:50:bd:ed:76:9b:28:13:74:64:97:59:1a:5d:1c:
07:8c:6c:f7:3f:d0:b5:a1:03:ad:dc:d1:d1:9a:a4:
1a:74:fa:32:5f:19:db:1e:7d:78:8e:f7:14:f8:c8:
bf:dd:4a:36:ee:34:1a:3e:ae:8e:02:d3:fb:93:f0:
47:8c:17:98:65:99:62:c2:4d:3c:05:32:9e:1b:10:
36:4f:29:55:66:14:7b:76:08:f6:e1:a5:e8:a9:f0:
e4:93:2e:3d:96:0b:06:f6:8b:fd:9f:29:57:84:95:
78:0a:f6:e8:b6:d5:b5:4c:5c:3b:db:ab:23:63:f4:
32:7e:56:a1:5d:e8:b6:df:9a:a5:2a:fe:af:71:31:
2a:81:f5:37:da:b9:f6:da:95:b3:c3:a3:f1:51:b1:
4e:c3:ef:95:1d:b5:2f:c5:2a:32:f2:66:62:4a:26:
a6:14:3d:2c:2a:84:e1:a7:a7:d7:d5:fa:8e:54:3d:
48:c3:8e:40:cc:3c:2e:07:ad:54:31:1f:25:0d:a0:
1d:15:93:15:24:03:cf:e8:03:25:8f:9c:2f:f0:73:
b1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:36:BD:69:D6:75:D7:94:C3:8A:DB:FD:CF:06:BF:AE:22:60:1C:FF
X509v3 Authority Key Identifier:
keyid:DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:1d:28:59:0c:0a:dd:b2:fd:99:4d:37:54:ef:e3:8b:4a:e1:
c6:d3:af:d1:34:d6:9e:14:09:52:92:17:63:89:80:6c:98:fc:
ae:90:6a:27:63:1d:53:8b:68:5c:27:2f:b5:57:81:27:f9:1c:
47:6c:34:c8:de:f9:87:2b:25:dd:bd:81:8a:b2:39:8e:ec:dc:
0b:d9:f6:0c:f4:db:c0:cf:58:c5:3b:98:32:32:8e:61:8b:a2:
a9:cd:94:31:86:82:83:e1:e4:af:47:36:dc:3d:87:36:fa:25:
20:1e:cd:c7:0d:be:74:87:60:9c:8b:29:27:22:23:bf:26:1e:
f4:43:79:81:26:d9:95:4d:82:06:74:5f:78:81:69:0f:16:89:
d4:76:15:fc:1b:2e:79:c0:af:f8:e5:8f:01:22:e2:2c:f7:62:
fc:8e:72:9f:75:45:9e:af:51:08:c5:1f:af:a7:ed:9e:bb:4f:
d2:d5:b2:43:30:de:2c:5f:35:13:39:61:1b:f9:c8:7b:7e:a3:
aa:cd:07:f6:ad:3b:6e:bc:9b:b9:e6:0c:88:3a:68:47:b2:af:
2d:8d:a5:8e:0b:5d:19:3b:2e:3f:51:5e:22:24:19:0b:f7:44:
35:0c:86:b1:3e:2c:cd:0c:24:24:65:b0:91:59:45:0d:c6:a7:
5b:26:8b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:12:56 2026 by rpki-client