Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
File: 3EPqLNB5l-zf4XGIhycIZS4XLfI.mft (raw, json)
Hash identifier: k9dz4s6oauQO+U8smW2hwTgCVqVEXxsVhjw7VQ5IYy0=
Subject key identifier: 97:8E:FB:2F:91:79:D2:6E:44:6B:F1:0B:25:0B:09:6F:81:92:8C:81
Authority key identifier: DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
Certificate issuer: /CN=dc43ea2cd07997ecdfe17188872708652e172df2
Certificate serial: 01A0CF36B68777B83DC44AB9D49A073156F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
Manifest number: 0AE3
Signing time: Wed 23 Sep 2026 17:01:04 +0000
Manifest this update: Wed 23 Sep 2026 17:01:04 +0000
Manifest next update: Thu 24 Sep 2026 17:01:04 +0000
Files and hashes: 1: 3EPqLNB5l-zf4XGIhycIZS4XLfI.crl (hash: 5CjCICJLFvYaqcrCJsqOZ1TPH1dld+0YtEwvx7DmJGA=)
2: fI5jVmmy88-mIgPso0R_tYbnmK8.roa (hash: DZgFgnCe+GlazLWeguoKXJElQSdORsAcJbygFhHnVCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 17:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:b6:87:77:b8:3d:c4:4a:b9:d4:9a:07:31:56:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc43ea2cd07997ecdfe17188872708652e172df2
Validity
Not Before: Sep 23 17:01:04 2026 GMT
Not After : Sep 24 17:01:04 2026 GMT
Subject: CN=978efb2f9179d26e446bf10b250b096f81928c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ab:50:d1:fc:4e:27:bc:cd:4f:61:6c:5d:7b:
f7:1e:59:29:ce:67:26:be:b8:18:e7:34:b9:b6:5c:
bc:d0:df:2b:e8:5c:a4:c4:bb:10:6b:b3:5c:98:53:
8a:ad:4c:0f:2b:3e:f5:63:71:a9:75:67:b0:fd:c4:
59:10:4c:44:4d:4a:64:86:62:72:55:3a:59:ac:c8:
a9:b7:a6:92:af:ec:ff:1c:2e:06:a8:ce:e1:cc:70:
8f:1d:c2:a9:b0:04:ac:f1:0c:8b:59:db:f9:24:be:
88:9e:d1:79:37:ce:08:39:4e:c7:78:80:9a:29:25:
cc:a9:0d:50:46:b6:73:e9:f1:4c:8b:4e:61:41:62:
49:9a:00:ba:85:0b:42:63:45:db:68:01:9a:da:b1:
ce:c3:92:26:b7:45:a8:6b:f4:cc:ab:20:08:05:c5:
f9:c2:38:1c:11:bd:96:25:3c:1f:a3:fe:46:93:b4:
0e:90:5d:99:60:86:50:6d:35:65:47:ad:b9:16:46:
85:7d:15:24:2b:fc:3c:29:b1:c9:fb:82:0e:4b:16:
8d:3b:f9:ff:65:0e:9f:f5:8d:52:0f:23:48:92:b7:
1a:c3:45:c7:cf:03:83:0e:7c:be:03:7b:71:da:85:
d1:7b:34:d3:16:56:cb:96:6d:d5:01:d4:28:a5:0a:
82:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8E:FB:2F:91:79:D2:6E:44:6B:F1:0B:25:0B:09:6F:81:92:8C:81
X509v3 Authority Key Identifier:
keyid:DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:03:d9:9b:7b:da:bf:d9:1c:91:e2:94:1a:75:0c:a3:40:56:
4e:c9:a6:67:81:97:a7:dc:7b:e8:9c:82:6d:04:50:15:c3:55:
c8:da:0f:f0:2d:bc:9f:be:44:57:7f:bc:e5:ad:c2:85:5f:31:
91:e9:b7:67:ec:ad:b3:ca:ae:9f:4d:28:ab:67:ed:3c:37:3d:
f0:c1:23:5e:46:00:00:cb:3a:10:39:46:0a:ce:4a:f6:e3:3d:
21:a7:ff:67:73:ad:a9:0b:b4:72:1f:17:95:4e:b3:84:e8:86:
9f:7e:ad:5f:46:f1:1a:07:cb:8f:59:71:eb:33:27:6c:fa:6f:
d9:89:e0:f4:1b:b5:20:7e:4d:b7:ee:b5:fb:51:2c:9c:b7:a0:
55:2c:d2:21:68:47:73:35:bc:3a:07:98:12:36:99:86:da:71:
ae:54:ea:68:07:16:b9:63:05:df:ce:36:87:88:58:a6:a2:74:
c9:1f:43:b8:be:45:0a:aa:8d:79:7d:84:63:26:9a:6a:c3:bf:
55:8b:07:b7:4d:38:0e:e0:d5:aa:dc:8c:80:6b:43:cc:dc:64:
5f:d6:b2:d3:d6:6f:73:1e:fb:80:a6:71:63:89:ee:39:66:d5:
70:ff:6d:2a:84:bf:f6:22:aa:c3:d7:1c:15:00:38:79:79:cc:
a3:26:38:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:51:40 2026 by rpki-client