Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
File: 3fHfWY9KjzotB0zLb20WtU0dERw.mft (raw, json)
Hash identifier: 0xkfNF/fYBC+F/7mxWQD5mh1r+oPHaOz7uwiCnqlf40=
Subject key identifier: 92:F9:A3:5B:C3:E2:52:A4:FB:AA:A7:1E:36:92:C1:CA:A7:D2:75:A5
Authority key identifier: DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
Certificate issuer: /CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Certificate serial: 01A0D501DA7CC82BF42739E26EE605E638E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 20:01:03 +0000
Manifest this update: Thu 24 Sep 2026 20:01:03 +0000
Manifest next update: Fri 25 Sep 2026 20:01:03 +0000
Files and hashes: 1: 3fHfWY9KjzotB0zLb20WtU0dERw.crl (hash: ttSXvYyfM9fHLwnZPRrRDqCWzMEI1tgujuXreMDRqjQ=)
2: 3zlYESujx6iqyh6hQsCczNEcHfA.roa (hash: giiowx0wopsav1ocUyq7di4cnnYmyvwdPI251v0t4Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:01:da:7c:c8:2b:f4:27:39:e2:6e:e6:05:e6:38:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Validity
Not Before: Sep 24 20:01:03 2026 GMT
Not After : Sep 25 20:01:03 2026 GMT
Subject: CN=92f9a35bc3e252a4fbaaa71e3692c1caa7d275a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:af:11:f3:c5:68:6f:f1:f3:58:b9:86:49:7a:
5c:a5:8b:4b:50:94:b2:8b:7d:15:4b:58:b9:c1:6b:
99:e9:01:0c:4a:77:ac:73:8c:a4:38:30:cc:02:1c:
ae:74:2f:19:76:97:ec:bb:06:46:c8:1b:a7:73:b7:
d9:88:9a:13:fe:68:15:37:d8:10:f0:c2:b0:6d:1c:
b0:0d:78:9a:5a:75:d6:27:61:30:17:84:23:83:6e:
c0:55:fa:13:2b:25:ed:02:31:98:39:05:da:4b:37:
b8:8f:ca:9e:41:a0:28:5e:5a:a6:dd:fa:9a:34:a1:
14:4b:1c:66:44:68:e4:c1:11:49:ae:6e:83:8c:fd:
cc:0f:41:9e:9b:f9:f5:95:de:da:33:1d:ed:9c:4e:
5a:f4:43:cc:5e:49:cd:23:28:0a:63:fd:c6:96:a0:
ff:f4:62:a3:81:d7:2f:4b:07:8c:d3:6f:04:44:aa:
73:36:44:ae:37:12:35:36:fe:fe:d2:10:01:14:8c:
be:11:1b:84:da:1e:e1:bc:df:4d:6c:db:7f:6b:69:
da:1f:f9:81:08:08:25:bf:21:28:fe:8d:ae:a9:4d:
60:58:d2:9c:4f:18:61:db:ef:aa:d0:51:be:a0:91:
b7:10:d6:30:8f:7d:1a:6b:d1:75:07:74:13:f6:7d:
9e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F9:A3:5B:C3:E2:52:A4:FB:AA:A7:1E:36:92:C1:CA:A7:D2:75:A5
X509v3 Authority Key Identifier:
keyid:DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c8:0d:c6:fc:67:15:dc:ce:37:fc:10:6c:92:ba:7f:cb:30:
3a:52:9a:dd:d4:03:c5:b4:ba:2f:4a:dc:33:e6:0f:2b:d5:f5:
cf:54:6f:c7:9d:e6:1b:22:99:bc:c6:f7:1c:03:8c:12:ab:2b:
97:bc:5a:8c:26:8f:d7:93:94:ee:ef:89:a4:17:4d:b5:0c:c4:
35:83:fe:c4:b2:9f:f7:5f:71:1d:99:e8:14:52:ac:9f:83:89:
fa:05:93:2c:59:c0:57:ae:63:a6:16:77:e8:1a:1b:02:b2:26:
ba:43:1d:df:18:58:34:5d:a4:a2:29:51:fb:b2:aa:53:15:94:
d1:21:c9:04:f5:8d:61:ce:7a:42:31:13:a4:93:9d:ef:98:2a:
41:af:84:e9:ed:a5:03:85:90:28:69:8d:b4:19:1c:b0:47:03:
57:cd:f9:48:bb:a0:e4:ca:66:91:e2:30:c3:c9:90:04:67:6c:
96:99:01:be:0b:e2:91:4c:19:5b:79:e3:3f:95:00:c3:25:1c:
19:ef:7b:31:cf:7d:80:63:c8:df:2d:50:6d:aa:29:35:7d:f9:
b5:75:7f:4a:8f:46:55:f6:e0:70:32:f6:c0:37:00:19:f5:cd:
f4:2d:0d:37:fe:a9:fe:9e:5f:c8:a8:8a:35:16:50:7f:4f:b0:
e6:eb:2b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:02:51 2026 by rpki-client