Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/3gla0COn_75FMU46hJBYtVCSfcM.mft
File: 3gla0COn_75FMU46hJBYtVCSfcM.mft (raw, json)
Hash identifier: pDyX06yTrObfSrBuyYrgJbFvR/uvjmDrQ5sGnfNJhkI=
Subject key identifier: 80:5A:EB:5F:64:A0:F9:FD:80:79:DC:D0:84:FE:F6:07:8F:75:16:96
Authority key identifier: DE:09:5A:D0:23:A7:FF:BE:45:31:4E:3A:84:90:58:B5:50:92:7D:C3
Certificate issuer: /CN=de095ad023a7ffbe45314e3a849058b550927dc3
Certificate serial: 01A0CC35072FB7F64E7C687AA7D60178D1D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gla0COn_75FMU46hJBYtVCSfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/3gla0COn_75FMU46hJBYtVCSfcM.mft
Manifest number: E3
Signing time: Wed 23 Sep 2026 03:00:22 +0000
Manifest this update: Wed 23 Sep 2026 03:00:22 +0000
Manifest next update: Thu 24 Sep 2026 03:00:22 +0000
Files and hashes: 1: 3gla0COn_75FMU46hJBYtVCSfcM.crl (hash: DfIAyxbJfSPE3BEvwkAdthkmKOqiaWnEAWpXZnmyaxs=)
2: swtfhREMGBdM94COnjWKNQH-uvw.roa (hash: eVXbh4q/CHYC8OtafAnCyVe2lhsfVD/4dajOsOYXNiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/3gla0COn_75FMU46hJBYtVCSfcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/3gla0COn_75FMU46hJBYtVCSfcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3gla0COn_75FMU46hJBYtVCSfcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:35:07:2f:b7:f6:4e:7c:68:7a:a7:d6:01:78:d1:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de095ad023a7ffbe45314e3a849058b550927dc3
Validity
Not Before: Sep 23 03:00:22 2026 GMT
Not After : Sep 24 03:00:22 2026 GMT
Subject: CN=805aeb5f64a0f9fd8079dcd084fef6078f751696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:80:fb:48:4d:6f:0e:1c:2c:af:c6:e4:2d:d2:
75:34:23:4c:9e:c0:ec:ab:48:ac:ee:f8:da:7c:a8:
df:17:c9:7c:ac:99:3e:da:49:a7:5e:2a:7e:fb:e2:
59:3e:70:1c:f8:78:d6:19:21:85:d8:0a:af:2e:10:
0c:55:66:17:e9:72:51:a2:be:fa:f0:f5:63:bf:b7:
6b:b5:c8:db:6e:ac:e0:f1:a7:2c:6a:ce:4c:ed:65:
74:ff:a6:f5:92:ab:be:39:b0:cd:f9:81:f7:ca:05:
bf:42:7d:65:50:e9:ae:da:44:25:7a:f0:f5:f1:78:
38:f4:92:e7:45:05:7d:e4:3c:5d:90:fb:e4:75:fa:
58:22:15:e7:5b:ad:ce:bf:8f:ea:fc:3c:5d:cc:52:
4a:23:18:c6:0e:8a:07:85:47:e5:40:f0:03:59:0c:
63:55:d9:44:bb:8b:6e:56:74:c9:dc:77:cc:08:39:
32:6d:09:ce:1f:cb:40:0d:21:27:7b:44:1c:4d:50:
26:ad:a8:ea:a5:5f:66:ac:1d:12:80:18:41:75:f0:
88:c5:68:87:c6:92:d8:98:eb:c4:89:70:6d:af:54:
8e:52:b0:28:e3:e8:d1:11:8a:03:57:55:ad:60:8f:
62:e8:4a:e8:09:06:12:31:9a:60:17:b2:fc:68:95:
b9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5A:EB:5F:64:A0:F9:FD:80:79:DC:D0:84:FE:F6:07:8F:75:16:96
X509v3 Authority Key Identifier:
keyid:DE:09:5A:D0:23:A7:FF:BE:45:31:4E:3A:84:90:58:B5:50:92:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gla0COn_75FMU46hJBYtVCSfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/3gla0COn_75FMU46hJBYtVCSfcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/3gla0COn_75FMU46hJBYtVCSfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d4:c6:22:84:15:5b:c6:42:7c:64:e1:cb:8a:a5:a9:cc:1e:
63:72:7e:02:dd:c3:5a:a2:c1:b8:6e:6c:63:64:ec:f6:3f:44:
66:ad:c3:8f:47:7c:21:7d:45:54:5d:ad:a8:bd:6d:e9:0a:a8:
ef:0c:8d:dc:31:b7:8f:93:f6:ea:33:67:9a:06:04:ad:7a:a6:
6d:09:69:29:7b:14:48:2b:8a:f7:b9:f4:7b:87:81:81:ce:0f:
a6:5e:3c:fd:68:a4:b2:8d:33:22:e5:d0:51:93:20:59:0c:d7:
fe:19:70:21:60:83:66:ad:84:2c:4a:2e:69:6d:e2:4c:d5:6b:
12:40:8d:eb:dd:68:f2:2f:78:35:ff:09:f8:1a:4e:df:33:a9:
f7:0e:5d:03:8e:5f:89:0e:66:2b:33:10:16:16:72:21:1c:b5:
7a:31:cf:9e:f4:39:b6:78:84:52:bf:06:d8:57:17:bd:96:6b:
8e:98:09:e6:26:37:93:f8:27:23:3e:97:12:3a:cd:de:02:f7:
56:0a:bc:7f:99:34:cf:69:ef:01:cc:ff:fe:bd:5a:13:bf:5e:
92:bf:ef:4e:bc:22:24:b5:74:33:eb:89:a8:16:14:8b:50:27:
91:2e:50:09:fe:4f:7d:2a:cc:9a:a5:f9:28:09:25:58:ec:b7:
e4:f9:d2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:04:56 2026 by rpki-client