Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
File: 3BsrDhzng-t6Ljk__dEoxqnAIjk.mft (raw, json)
Hash identifier: bUUNW1dS39txnJ0ln3v4EBnvufyrmoGPs68qUQQPFeA=
Subject key identifier: 9E:1C:43:CA:3D:2A:5C:DA:FE:C2:A8:F7:FB:A0:75:AC:95:79:C6:93
Authority key identifier: DC:1B:2B:0E:1C:E7:83:EB:7A:2E:39:3F:FD:D1:28:C6:A9:C0:22:39
Certificate issuer: /CN=dc1b2b0e1ce783eb7a2e393ffdd128c6a9c02239
Certificate serial: 01A0DA5FAECC1F340A1AA96D33FF7C33868C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
Manifest number: 07CA
Signing time: Fri 25 Sep 2026 21:01:38 +0000
Manifest this update: Fri 25 Sep 2026 21:01:38 +0000
Manifest next update: Sat 26 Sep 2026 21:01:38 +0000
Files and hashes: 1: 3BsrDhzng-t6Ljk__dEoxqnAIjk.crl (hash: W7B8h9H1QcauhtQ3DpJXZNdKvdJdBY6ROf5gZJdVUJs=)
2: 5ejH3yejqFEyn6aqh86TLRcJtvk.roa (hash: vwjQJrlUMM+ImHTAGzl34TDgOISTLZWm5ODvkzATioc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 21:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:ae:cc:1f:34:0a:1a:a9:6d:33:ff:7c:33:86:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1b2b0e1ce783eb7a2e393ffdd128c6a9c02239
Validity
Not Before: Sep 25 21:01:38 2026 GMT
Not After : Sep 26 21:01:38 2026 GMT
Subject: CN=9e1c43ca3d2a5cdafec2a8f7fba075ac9579c693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:35:2b:5d:c8:15:6a:da:2a:b1:c7:cc:8e:4d:
4e:8d:84:00:0f:67:6d:e4:4f:cc:00:e3:a3:84:8a:
0c:5e:bc:5a:1d:6b:b6:56:4f:99:58:7e:1f:cd:f0:
12:a6:2e:62:52:60:8d:19:23:ec:d4:0c:b5:78:fe:
b8:97:1c:cd:fe:2b:a1:8a:6b:ab:5a:ec:b6:78:a8:
e4:3f:9d:96:c5:35:c2:5f:5f:99:17:fe:1e:17:10:
4a:b8:be:b1:12:3d:ae:ab:0a:b0:4e:8b:1a:a7:5c:
0c:84:5e:da:5b:c9:94:4c:3e:2d:41:88:d7:da:14:
17:16:0f:ae:0c:bc:11:b6:90:18:39:ae:c6:2a:e1:
5c:97:79:40:0c:91:49:7e:2d:34:cf:50:1d:c3:d9:
93:b8:ad:eb:66:cc:0a:47:ac:c8:fd:59:d1:31:59:
fa:bc:f7:3e:4f:7a:b4:76:bf:d7:83:d3:7f:30:40:
0b:fb:c0:84:31:71:1c:7b:88:5e:0a:c4:90:28:44:
b8:67:87:b8:64:66:d6:12:5e:6c:cc:f7:b9:ce:9b:
d5:47:88:9b:65:37:e0:2e:82:d2:0b:f5:b5:e1:b2:
1c:18:73:8e:13:8c:83:21:62:96:28:9a:77:aa:15:
6e:e7:54:2a:88:db:97:8f:81:26:84:60:3d:bc:02:
2b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1C:43:CA:3D:2A:5C:DA:FE:C2:A8:F7:FB:A0:75:AC:95:79:C6:93
X509v3 Authority Key Identifier:
keyid:DC:1B:2B:0E:1C:E7:83:EB:7A:2E:39:3F:FD:D1:28:C6:A9:C0:22:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:3c:56:c8:3e:98:05:d2:56:56:57:b0:a9:3e:e5:d5:41:90:
48:b9:c3:dc:5e:39:14:99:ac:79:43:04:d3:90:6b:60:35:17:
7d:3a:74:c5:3f:f6:1a:64:f1:17:4f:5e:4b:0e:a9:43:60:e1:
b7:1b:da:98:88:06:96:9d:81:ad:f8:3f:5e:fb:a8:68:58:69:
5b:83:8f:38:9c:9c:de:02:89:f1:25:19:28:97:38:a7:c6:af:
f4:c6:7d:2c:50:d4:8e:af:dd:9c:d4:8e:fa:80:2e:6d:36:41:
58:42:8e:4d:7e:56:d1:ad:4b:a8:c5:02:9b:79:ef:98:4b:cf:
1b:15:34:b0:7c:5b:cd:03:10:24:dc:38:97:15:b3:c1:cd:d1:
b4:1f:7a:bb:69:43:01:b2:b6:b5:e4:8f:a4:3f:eb:12:4e:a3:
0a:f2:70:08:61:ee:7c:5f:f9:61:6b:b6:7d:92:3a:cc:30:b2:
81:12:f5:d3:6e:85:a4:90:d1:d7:29:bf:8e:e5:50:e5:0a:2d:
6e:e9:b7:7d:89:f4:e2:33:d6:f3:bf:5d:cf:fd:9a:85:73:e6:
e1:a2:11:9a:b3:64:1e:29:25:de:f9:3e:a1:35:6e:32:aa:71:
19:55:4d:85:d0:74:53:ea:c9:43:2a:c3:f5:35:c6:7d:64:08:
bf:8c:63:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:56:50 2026 by rpki-client