Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
File: 3o5guxEQh9CAP8P8xK8yeqhcC4E.mft (raw, json)
Hash identifier: F+Wf3WAt3ChOsMGdx9IJEbpvwzt0yDz/8BYP6bpz8cA=
Subject key identifier: 87:6B:FF:9E:5D:32:03:B2:0E:36:CB:1C:74:F4:AB:2E:A4:0E:AD:96
Authority key identifier: DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81
Certificate issuer: /CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
Certificate serial: 01A11AF5B362CA2AB58769BC14F914ED95BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
Manifest number: 1A92
Signing time: Thu 08 Oct 2026 10:01:11 +0000
Manifest this update: Thu 08 Oct 2026 10:01:11 +0000
Manifest next update: Fri 09 Oct 2026 10:01:11 +0000
Files and hashes: 1: 3o5guxEQh9CAP8P8xK8yeqhcC4E.crl (hash: zx9GetULXc7S1qfSvHJQj3IoKNFWJAsGZ6sWIoXsr08=)
2: F4NwjEYLDI-yBZ05DnMh2xIsZFs.roa (hash: VPrSJkixuSKsLbMS0Mdq/HH4JbtRsGR6fruBx7JJjhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:f5:b3:62:ca:2a:b5:87:69:bc:14:f9:14:ed:95:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
Validity
Not Before: Oct 8 10:01:11 2026 GMT
Not After : Oct 9 10:01:11 2026 GMT
Subject: CN=876bff9e5d3203b20e36cb1c74f4ab2ea40ead96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:37:09:46:18:a0:af:cd:58:d5:45:4b:a0:c7:
fa:39:bf:ce:12:a1:0e:c8:97:71:eb:3c:02:f3:96:
c8:6f:34:72:10:e1:4a:ac:d6:74:e0:ac:b9:b1:dc:
76:e1:90:6d:70:6c:83:32:51:b4:ce:4b:ac:ff:eb:
c1:41:70:90:40:64:6d:48:99:0c:85:fa:51:f9:7c:
12:43:e4:cd:29:f1:04:d3:18:45:db:37:ed:9e:68:
d1:fa:f5:98:02:c0:a5:b3:6a:89:9a:89:43:b5:57:
bc:a9:45:18:b1:66:c9:01:42:83:c0:fe:8d:77:63:
69:4b:2f:e3:8f:13:66:63:67:38:62:97:ee:e4:28:
31:6e:88:d6:bd:85:86:e8:9c:51:3d:64:41:17:e8:
e1:92:f5:09:c3:83:22:3b:3e:18:f3:4e:35:75:6d:
77:fc:14:ad:30:49:c9:0c:d9:d2:84:54:68:a5:ce:
fa:f2:0b:7b:a9:00:73:78:09:b2:ca:1f:b4:35:05:
a9:d5:98:0f:4f:bd:54:8f:c9:b1:8b:62:4b:45:d8:
a1:68:98:6a:1a:b6:72:da:d2:ef:23:60:40:07:17:
e6:fc:42:78:c8:f8:32:46:ec:33:7b:cc:bd:e8:66:
a7:bc:b2:5c:ec:d1:ed:e1:b4:46:1c:b6:c8:73:5c:
5a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6B:FF:9E:5D:32:03:B2:0E:36:CB:1C:74:F4:AB:2E:A4:0E:AD:96
X509v3 Authority Key Identifier:
keyid:DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:6e:7e:7d:9a:76:6b:b3:6b:a2:72:bd:f9:4e:2c:fb:68:cb:
5c:47:8f:6a:0a:4d:f6:40:44:e5:84:01:0d:3a:20:ba:0f:98:
29:5c:9b:ff:17:7c:2a:6f:01:e3:95:f4:ba:fc:39:95:f4:49:
bd:c2:d6:ea:56:3d:1f:ba:bd:24:57:ed:98:15:0f:b5:04:03:
e8:b3:51:01:73:e9:16:b2:bf:77:0f:df:3d:f9:37:68:44:20:
48:5b:11:bb:06:86:b2:d7:5b:f0:41:49:b6:35:20:29:c3:5d:
51:a9:bd:a5:4e:ec:8e:ed:9f:47:d8:c3:ef:47:74:42:56:4a:
9d:5a:7e:ad:34:82:a4:c7:eb:b8:69:d7:2c:75:ab:40:e6:85:
9b:0c:01:af:47:52:b8:73:8c:96:30:fb:65:b6:40:54:a4:fd:
25:98:62:f2:1e:8c:85:ff:34:24:be:96:b0:61:d8:e6:b6:0e:
81:60:28:14:2a:3e:97:9c:cf:d9:5f:dd:db:17:de:98:14:c4:
bb:92:6c:d1:a2:c1:ba:ac:96:8a:db:18:64:8a:6f:c2:a6:dd:
4f:cf:18:db:01:f9:d3:92:3d:2a:c5:d2:b9:02:64:de:22:21:
9e:17:4e:65:3d:fd:2a:77:31:da:70:49:46:30:e1:6a:d8:16:
3c:9d:cb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:18:56 2026 by rpki-client