Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
File: 3_XMSEiUO0_onSznH9weT_fX8-M.mft (raw, json)
Hash identifier: GIRRAX7JdBGIuV1NnRRJtBeRnZiS6QgQSInBx2krzyA=
Subject key identifier: A7:54:71:86:50:A9:A4:26:51:75:85:44:46:DE:DE:C6:8F:E2:5A:26
Authority key identifier: DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
Certificate issuer: /CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Certificate serial: 01A0D1244C3020A7579579371893758E1269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
Manifest number: 1A48
Signing time: Thu 24 Sep 2026 02:00:11 +0000
Manifest this update: Thu 24 Sep 2026 02:00:11 +0000
Manifest next update: Fri 25 Sep 2026 02:00:11 +0000
Files and hashes: 1: 3_XMSEiUO0_onSznH9weT_fX8-M.crl (hash: 86LQBzldrXuRU42MbNrPoOvV0RL56jI4UXbzFCYsocI=)
2: I_klKsqV4Xc27UFkAneEsuB-gHk.roa (hash: AkW1e4Xf71kIFS8tvO/5F4giqlxcvlPyuHSMW67qHI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:4c:30:20:a7:57:95:79:37:18:93:75:8e:12:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Validity
Not Before: Sep 24 02:00:11 2026 GMT
Not After : Sep 25 02:00:11 2026 GMT
Subject: CN=a754718650a9a4265175854446dedec68fe25a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a4:fe:29:91:4d:19:cf:e5:24:99:a9:41:8e:
74:0a:58:7b:80:0e:4a:f5:e8:b6:b1:05:57:4e:dd:
5f:ff:a5:b7:45:78:c8:67:41:29:6e:21:00:a9:51:
f2:b1:96:8e:22:2d:90:6c:d9:a3:8e:c1:c0:e5:12:
e4:58:2b:b1:96:87:da:8b:c9:28:1d:76:5b:ab:35:
b5:8d:fc:89:15:16:fd:94:5c:2d:c2:a4:cc:23:0c:
30:26:40:c0:8f:cf:24:37:36:09:97:5d:ea:4c:31:
90:6e:49:79:b3:1a:9b:5f:cb:f0:90:a4:59:d5:9f:
4f:1c:0a:8f:8a:79:3c:b1:fd:a7:23:59:6b:30:f5:
86:4f:07:11:bc:00:70:11:cb:30:e1:90:91:ba:10:
93:9c:f4:2f:87:95:0c:a6:ed:51:47:1b:ad:08:2f:
6c:69:07:f4:4e:9a:50:fc:64:eb:4d:59:2d:65:d0:
ce:b4:44:99:8c:71:c6:bd:40:1d:d6:1c:13:c9:4e:
15:86:9b:ae:1d:e2:56:ad:c3:c8:99:1e:bb:86:66:
3a:1b:ff:df:ae:8f:4b:1d:e4:c9:62:5f:ee:5f:ca:
03:a6:65:8c:09:94:e5:70:39:b5:c3:d5:15:90:ee:
62:fd:6e:99:a7:b2:05:2b:e3:26:70:ce:04:be:61:
4d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:54:71:86:50:A9:A4:26:51:75:85:44:46:DE:DE:C6:8F:E2:5A:26
X509v3 Authority Key Identifier:
keyid:DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a4:40:2f:8a:0d:d5:48:13:f6:9e:69:a9:d5:fc:f6:22:e0:
ee:b5:5e:f7:31:03:46:7b:ec:d2:79:da:fe:e1:4f:76:1c:28:
1e:5d:bc:ba:6d:cd:7d:07:1c:71:1e:74:13:36:dd:fe:0b:f1:
20:eb:97:71:a9:43:50:01:88:f6:84:a2:76:b5:90:d7:e7:21:
7c:aa:11:45:44:cb:aa:e1:fd:a6:2d:ca:ad:3e:65:a8:a4:32:
c6:bd:c4:ab:17:c1:bf:a0:9f:32:9f:b9:f9:f3:09:14:45:63:
e9:db:b4:d9:46:e6:81:01:0c:41:bb:f7:e5:71:67:ee:ac:b7:
92:1b:87:62:1f:c8:9b:79:40:0f:21:4e:a0:d7:eb:9b:14:4e:
51:ed:f1:aa:70:bd:ec:34:b1:bb:27:bd:cd:7c:ab:fc:f0:8c:
20:56:aa:3c:16:17:c2:27:47:88:fd:0d:ec:ff:79:d5:44:95:
60:31:f9:44:50:5d:bc:d2:c3:fe:61:98:cd:db:bf:7a:5b:9a:
ac:98:dd:04:65:fd:f6:47:55:47:b0:98:95:63:fa:37:e2:ed:
4d:09:3f:4f:ea:de:71:78:01:f3:1f:df:21:fe:09:5d:4e:87:
f9:34:fb:84:4a:67:92:43:78:4b:4d:65:75:a3:b0:b1:b3:f2:
e8:07:a2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:40:44 2026 by rpki-client