Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/3cHKqpDJHGKtslTJSjfVxfecXxw.mft
File: 3cHKqpDJHGKtslTJSjfVxfecXxw.mft (raw, json)
Hash identifier: vXJKvZdS2ZncixMk9hXDiGzVrEg2OO8ehGd0KN7nWV0=
Subject key identifier: 81:00:10:E9:A1:F7:33:AF:07:FD:47:C9:5D:49:32:64:0D:B3:70:E8
Authority key identifier: DD:C1:CA:AA:90:C9:1C:62:AD:B2:54:C9:4A:37:D5:C5:F7:9C:5F:1C
Certificate issuer: /CN=ddc1caaa90c91c62adb254c94a37d5c5f79c5f1c
Certificate serial: 01A0D5DEFBDC8E642B6B9FA52D52D735BAA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cHKqpDJHGKtslTJSjfVxfecXxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/3cHKqpDJHGKtslTJSjfVxfecXxw.mft
Manifest number: E8
Signing time: Fri 25 Sep 2026 00:02:35 +0000
Manifest this update: Fri 25 Sep 2026 00:02:35 +0000
Manifest next update: Sat 26 Sep 2026 00:02:35 +0000
Files and hashes: 1: 3cHKqpDJHGKtslTJSjfVxfecXxw.crl (hash: DZ3fgW9Qjd3pvVC1Dqte9TAunKEpP0Po4O6sSw/NcHg=)
2: YN9Cw4qcHXYpLVHYm4VWqw0i0Is.roa (hash: hKz3CdgByzclOsSKFERuifJCiSNf9f2KayzZQ7/xtmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/3cHKqpDJHGKtslTJSjfVxfecXxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/3cHKqpDJHGKtslTJSjfVxfecXxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cHKqpDJHGKtslTJSjfVxfecXxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:fb:dc:8e:64:2b:6b:9f:a5:2d:52:d7:35:ba:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc1caaa90c91c62adb254c94a37d5c5f79c5f1c
Validity
Not Before: Sep 25 00:02:35 2026 GMT
Not After : Sep 26 00:02:35 2026 GMT
Subject: CN=810010e9a1f733af07fd47c95d4932640db370e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:74:12:2d:86:39:a0:a2:e2:95:82:f4:ed:57:
ba:61:73:06:40:25:50:b4:f4:9a:ed:1d:21:b1:c6:
40:0e:92:b8:9e:11:c7:05:76:2d:60:1e:8f:0a:44:
af:98:b2:91:69:33:cd:17:9b:14:f2:4e:00:54:ae:
4e:41:eb:1d:6b:ba:0a:4c:73:92:e4:aa:d5:63:a7:
5c:13:fd:c9:73:15:30:19:f1:fc:b2:10:01:5d:a0:
a3:8f:af:81:33:ab:63:ba:2b:8b:76:cf:f3:0c:8b:
83:07:48:8c:b1:30:9e:1b:3b:52:8c:08:fd:53:a7:
31:93:63:78:f7:a4:4f:e6:58:92:ff:18:bc:48:e3:
c5:2a:7b:da:dc:20:58:b7:93:85:64:13:c6:04:8d:
3a:bd:f8:a7:70:91:7c:20:c3:16:67:a7:90:44:5f:
0d:9c:fb:d0:88:b5:71:36:22:b2:63:60:bb:b0:af:
a3:de:4d:57:1e:fa:b8:7c:e9:20:3e:2b:1e:93:69:
9a:b8:b0:f1:02:31:15:64:e7:e3:63:cf:89:4c:9f:
e9:89:da:19:9a:b1:2a:27:d6:33:15:fc:d2:f1:c5:
57:0a:33:dd:cc:d1:07:45:13:9a:a7:ad:a4:ee:d4:
57:33:b7:6f:ce:8b:2b:a7:ed:58:cb:bb:28:eb:0a:
34:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:00:10:E9:A1:F7:33:AF:07:FD:47:C9:5D:49:32:64:0D:B3:70:E8
X509v3 Authority Key Identifier:
keyid:DD:C1:CA:AA:90:C9:1C:62:AD:B2:54:C9:4A:37:D5:C5:F7:9C:5F:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cHKqpDJHGKtslTJSjfVxfecXxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/3cHKqpDJHGKtslTJSjfVxfecXxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/3cHKqpDJHGKtslTJSjfVxfecXxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:78:4e:3a:c7:b3:10:5e:7f:78:8b:14:88:b9:d7:ed:09:9f:
36:25:70:23:f1:35:cb:f3:7d:ed:9c:e7:6a:ce:78:86:7c:03:
f6:78:09:14:30:64:f6:c3:c1:e0:0f:37:67:14:24:14:71:c1:
64:aa:07:02:4c:a3:15:ed:b3:54:a1:8d:29:2f:eb:06:db:ee:
37:18:18:77:03:cd:61:99:ad:8e:23:03:63:4d:eb:e6:49:4f:
68:d9:b0:ee:f4:cc:c5:78:0f:ad:4e:73:ae:b6:44:be:3d:7e:
ec:07:43:7f:0c:2f:05:4f:5d:4b:54:4c:86:1b:74:68:50:28:
d8:bc:8d:14:0a:db:ac:4e:56:11:2e:e1:7e:48:11:35:fd:81:
04:9a:91:aa:52:ad:cb:eb:61:c1:71:e1:e2:00:f3:a8:3c:54:
9b:6c:d8:63:3e:23:92:b5:98:ce:9b:39:da:4c:fa:3e:71:0c:
4d:69:03:8b:75:30:e9:bd:3b:58:12:b2:0d:ad:b3:86:b0:9c:
cf:7d:c8:30:24:37:24:c8:74:9d:d0:33:e2:24:0d:37:10:70:
cc:e0:5e:b7:38:c2:7e:68:db:93:2b:01:14:35:77:98:8e:d6:
71:44:c9:8d:8c:29:58:2d:7a:bf:a3:41:e2:a3:30:5f:47:1e:
1e:df:f3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:20:52 2026 by rpki-client