Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/37bb89-8516-454a-80fc-bb01648fac07/1/3OEoZtsCnY-bejryd2akK-5Wi60.mft
File: 3OEoZtsCnY-bejryd2akK-5Wi60.mft (raw, json)
Hash identifier: nnbJ5xrOFMTbdrxmrRoGxuSY32LxVLEj5FN2a/P2EOA=
Subject key identifier: 34:74:58:1D:4E:19:3F:E6:9B:87:1E:F1:57:C2:91:3E:01:C3:9A:33
Authority key identifier: DC:E1:28:66:DB:02:9D:8F:9B:7A:3A:F2:77:66:A4:2B:EE:56:8B:AD
Certificate issuer: /CN=dce12866db029d8f9b7a3af27766a42bee568bad
Certificate serial: 01A0CFA4B1D3151AAD0ED1E0181D9A65E31F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OEoZtsCnY-bejryd2akK-5Wi60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/37bb89-8516-454a-80fc-bb01648fac07/1/3OEoZtsCnY-bejryd2akK-5Wi60.mft
Manifest number: 99
Signing time: Wed 23 Sep 2026 19:01:12 +0000
Manifest this update: Wed 23 Sep 2026 19:01:12 +0000
Manifest next update: Thu 24 Sep 2026 19:01:12 +0000
Files and hashes: 1: 1-r60MLTZRSdgygfymOIKvkloX4s.roa (hash: af6A06NaI4rDIZj+VAritHdSnfA6HkDWGlQ9vMcojAc=)
2: 3OEoZtsCnY-bejryd2akK-5Wi60.crl (hash: 0NqRpZ5Ehj1Jpq2nCZXPjlZRXBoSI15VV0FPqFo2sGI=)
3: ijw9MMecXFQ1MALw3HCoNkDG7LI.roa (hash: rCEqb/EtPquuy7z0bjBCs2np62IcolwSM1fIQEnyHGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/37bb89-8516-454a-80fc-bb01648fac07/1/3OEoZtsCnY-bejryd2akK-5Wi60.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/37bb89-8516-454a-80fc-bb01648fac07/1/3OEoZtsCnY-bejryd2akK-5Wi60.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OEoZtsCnY-bejryd2akK-5Wi60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:b1:d3:15:1a:ad:0e:d1:e0:18:1d:9a:65:e3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce12866db029d8f9b7a3af27766a42bee568bad
Validity
Not Before: Sep 23 19:01:12 2026 GMT
Not After : Sep 24 19:01:12 2026 GMT
Subject: CN=3474581d4e193fe69b871ef157c2913e01c39a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:37:7b:d5:79:86:97:39:05:27:63:00:57:b5:
55:9e:ce:f7:90:c6:dc:8c:d1:2c:cb:d4:e7:8f:17:
a6:05:69:47:8a:01:09:2d:4b:b6:24:8a:41:93:90:
16:2f:0e:63:a4:d0:ca:ef:59:cc:90:a5:75:7f:1f:
31:3c:41:f3:55:c8:e4:a1:44:cb:09:f2:b4:f2:f7:
51:f4:24:a8:cc:43:74:70:fa:11:79:b9:f6:b1:bc:
c4:e6:03:75:45:1e:90:8d:da:1e:b6:c6:c2:7d:05:
b8:ee:ef:1f:df:75:4d:e2:47:ed:04:fa:69:65:90:
08:9d:18:9e:90:f6:eb:4b:cb:9b:ca:11:3a:3c:f7:
22:74:c9:2e:a7:99:77:00:97:97:79:9a:a1:22:2f:
29:24:92:57:42:3d:b4:c2:ad:7f:fb:5c:48:5e:84:
01:2d:28:15:db:c0:c1:75:52:b2:62:5d:73:70:a3:
6a:ef:b6:95:38:7b:39:1c:cf:78:b1:3e:c8:29:ef:
48:cf:0d:82:f8:36:4a:b2:47:84:d7:18:16:ee:17:
2c:e7:cd:e1:0c:2f:0b:5c:e0:43:a4:1b:dd:c4:24:
23:d5:1f:a2:a0:53:c9:be:bc:0f:76:cd:e2:d0:ce:
09:72:8d:ab:8d:ff:b8:5a:7f:27:59:e6:eb:3b:10:
93:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:74:58:1D:4E:19:3F:E6:9B:87:1E:F1:57:C2:91:3E:01:C3:9A:33
X509v3 Authority Key Identifier:
keyid:DC:E1:28:66:DB:02:9D:8F:9B:7A:3A:F2:77:66:A4:2B:EE:56:8B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OEoZtsCnY-bejryd2akK-5Wi60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/37bb89-8516-454a-80fc-bb01648fac07/1/3OEoZtsCnY-bejryd2akK-5Wi60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/37bb89-8516-454a-80fc-bb01648fac07/1/3OEoZtsCnY-bejryd2akK-5Wi60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b9:1f:4b:8e:69:a0:8f:14:53:76:92:73:98:8d:d1:6d:49:
9a:85:1b:4d:ee:9f:5b:8b:05:88:7f:30:24:40:02:8c:7e:c5:
7f:31:bf:50:24:92:c9:cf:f3:5b:65:82:77:c9:c7:3f:42:ce:
94:47:32:70:27:49:42:08:78:b7:9d:15:a3:83:4b:1a:4c:4c:
8e:1e:90:ed:16:a4:16:89:59:43:3e:a5:8a:1c:e5:f5:4f:10:
00:da:32:e4:5e:ae:f0:af:17:2f:b3:cf:7e:e1:7c:1d:c9:19:
8c:1d:34:6c:68:f5:b2:64:a7:d6:81:75:14:f7:38:41:f0:5c:
3b:f5:b1:48:0b:80:1d:1d:64:46:ff:cc:d2:0f:fb:ce:99:64:
56:b9:f9:ee:f3:3a:0b:b0:14:10:a4:cc:34:20:b0:32:26:54:
7a:7a:a9:a7:90:ec:00:f9:e3:41:c1:34:4d:24:87:c4:6b:6a:
3c:1f:a4:cc:67:06:a1:a8:5b:3a:4f:a3:df:e6:a6:71:05:e4:
96:fe:e1:c2:f1:93:f8:57:01:b3:60:38:09:75:69:df:6e:b3:
e7:3a:05:95:f2:da:6b:a5:13:49:34:e1:f2:0c:51:8d:49:72:
1f:cd:be:5b:9e:e6:28:25:be:01:a4:33:a6:59:8f:7a:a9:c0:
ed:d4:ed:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:48:03 2026 by rpki-client