Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
File: 3erZGbhaEwUdAgi34o3cyzmLFNY.mft (raw, json)
Hash identifier: 1K5A+vJZEKLa+0w6VUMTRsOxtHyqTVDySoqCASy+XQ8=
Subject key identifier: 31:35:A6:2B:3E:65:91:E2:A7:4B:64:B1:8E:FE:AC:6C:FE:00:D4:A3
Authority key identifier: DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
Certificate issuer: /CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Certificate serial: 01A0C96B3F68D4DB3D836B9A0A9B1C7C2FC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
Manifest number: 1A6E
Signing time: Tue 22 Sep 2026 14:00:43 +0000
Manifest this update: Tue 22 Sep 2026 14:00:43 +0000
Manifest next update: Wed 23 Sep 2026 14:00:43 +0000
Files and hashes: 1: 3erZGbhaEwUdAgi34o3cyzmLFNY.crl (hash: Muz4H7l2PoSqohAaw5U5Cdptsh+uIVAaeVWWUFHxTXk=)
2: iKwLG1q1sDs9tvR7rIxpNbBHq4g.roa (hash: 5Al8Pm91tYMp0+j7fJGmguSqWX96C92TH8gJMDHEyyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:3f:68:d4:db:3d:83:6b:9a:0a:9b:1c:7c:2f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Validity
Not Before: Sep 22 14:00:43 2026 GMT
Not After : Sep 23 14:00:43 2026 GMT
Subject: CN=3135a62b3e6591e2a74b64b18efeac6cfe00d4a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3b:93:29:61:9c:7e:e6:1b:2c:ce:47:5d:bd:
ee:3f:1a:1e:2e:6f:ad:30:79:e4:5d:e4:ef:a2:f3:
17:69:22:5c:69:c9:78:c5:db:f4:5c:5f:88:36:3a:
65:c6:5a:0d:af:6b:72:9a:e0:22:b1:da:2e:c3:e2:
90:5d:ad:25:6b:e0:26:d7:46:4f:e1:55:1a:45:d4:
62:09:98:8d:86:fe:77:28:17:63:76:13:10:f4:ce:
80:ab:95:e0:ee:c9:b0:bc:53:9e:31:ea:f2:05:2e:
0b:d6:ce:df:41:24:30:8b:3f:34:2f:2d:ae:d0:93:
09:a3:a3:6e:df:36:a8:8a:c1:f4:d3:fd:e5:b9:e3:
39:a8:b6:81:09:32:fc:46:f5:6e:2c:66:fa:de:4d:
47:7d:e1:67:37:31:11:fe:fc:c1:28:ed:aa:87:a0:
8b:b0:a6:5b:8b:44:17:6f:26:c0:4c:55:13:02:23:
8d:b0:69:ab:f4:b3:08:f6:47:07:7c:c1:1c:d4:b0:
36:9c:55:b7:3c:e4:89:99:4e:1e:75:8a:61:09:b7:
cd:e1:c9:14:5c:a2:b7:e9:22:15:36:ca:df:f5:4a:
14:34:36:59:46:c2:8b:78:9c:cc:19:90:6a:5e:64:
48:e6:ea:ee:d8:ab:aa:40:91:4b:c6:47:1e:11:74:
2d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:35:A6:2B:3E:65:91:E2:A7:4B:64:B1:8E:FE:AC:6C:FE:00:D4:A3
X509v3 Authority Key Identifier:
keyid:DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:3b:fc:59:e7:4e:c4:e8:b7:0b:a9:4f:5e:fc:4c:9c:40:0c:
8a:90:d3:1c:85:d4:55:c2:0d:2e:06:c4:8e:5a:a3:cf:7a:28:
a0:29:31:6f:94:9b:43:c5:c5:76:9a:80:8d:53:50:1e:a7:7d:
d4:5b:24:71:78:35:62:c9:24:f1:b7:1d:5b:1c:07:09:9a:0d:
3c:53:3d:27:97:de:59:d9:6c:e5:34:31:7c:8c:9b:b1:d8:f9:
07:41:f0:d8:86:b2:76:bd:2a:45:9b:c9:fe:b4:23:7a:6a:f9:
6d:5b:46:2e:9a:5f:3d:6d:7b:aa:01:fb:6c:5d:f5:bb:56:f7:
5f:cf:79:62:66:20:d7:21:24:58:b7:75:04:37:3c:a7:c3:b0:
5e:69:a8:92:0a:b5:69:1f:81:95:1f:ba:42:2c:ef:d5:33:21:
37:72:f9:29:92:95:cf:e8:79:a5:a6:53:5c:0d:74:9c:d8:e3:
f9:4c:4e:b0:78:9a:69:6b:b9:bb:3a:f5:88:56:09:f6:06:9f:
06:70:27:28:22:be:78:18:1f:2f:0c:7b:d7:57:cc:70:a1:6d:
5d:86:af:e7:e1:d2:4f:7a:af:03:26:94:0f:82:21:3a:3c:b7:
7d:78:43:ca:3f:51:33:70:6e:57:4b:a3:d1:c9:93:ab:98:87:
56:ca:f2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:15:55 2026 by rpki-client