Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
File: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft (raw, json)
Hash identifier: GicwM/GP28N526U7NlL2+eKubxBnEGV4W46x67uKjoE=
Subject key identifier: 10:F3:57:E9:6F:18:F2:01:BB:7C:64:13:4F:19:2F:49:AB:A3:33:F7
Authority key identifier: DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
Certificate issuer: /CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
Certificate serial: 01A0CEFF153F4EAB16B4BCD6C001CC3D046B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
Manifest number: 1A6A
Signing time: Wed 23 Sep 2026 16:00:18 +0000
Manifest this update: Wed 23 Sep 2026 16:00:18 +0000
Manifest next update: Thu 24 Sep 2026 16:00:18 +0000
Files and hashes: 1: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl (hash: C8j8H5N/7y9F0SBEpScdePDBYChkQjGXj7+XNSqpaw4=)
2: SIrHAW8-wlZDKzvy2I8a6ATw1Os.roa (hash: J87HrMwqHtHS9Z8HI1NmmjUGTf0po2q7EzVGTEZtP5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 16:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:15:3f:4e:ab:16:b4:bc:d6:c0:01:cc:3d:04:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
Validity
Not Before: Sep 23 16:00:18 2026 GMT
Not After : Sep 24 16:00:18 2026 GMT
Subject: CN=10f357e96f18f201bb7c64134f192f49aba333f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4e:8d:e2:99:8a:6e:53:a8:b7:31:dc:e5:b0:
98:d8:33:7b:59:b1:ac:7e:fb:e2:8a:46:34:92:9f:
27:bd:bf:f4:d9:2e:27:ad:77:10:8a:c1:b5:f2:77:
62:d0:52:59:34:31:b1:69:21:f4:b0:30:82:55:34:
1b:53:0d:5d:98:af:dd:66:98:53:0a:c4:fc:34:2e:
c3:90:11:0a:81:ba:9e:33:f7:20:2b:30:02:cf:d9:
ca:4f:ef:06:0f:f3:e1:21:b9:72:d1:7f:0e:13:b4:
a7:f2:5d:25:cc:49:be:ce:21:2d:2c:bd:c9:b7:bd:
13:84:89:d0:17:ea:75:01:06:05:ed:bd:f0:39:3d:
70:cf:d6:f4:ab:51:4c:04:82:54:b7:ea:84:8d:31:
b9:d8:f6:95:51:fb:2d:d2:d2:cc:0d:ed:14:bc:11:
8c:e1:cc:6e:e3:44:a4:67:3e:ad:ea:99:9b:4c:e2:
23:ac:61:26:94:78:04:e1:cc:04:7a:bf:6d:6c:f7:
b3:d1:b6:e6:79:c7:bb:45:a9:c2:d6:fd:9d:e5:52:
42:ef:05:f4:fa:f1:60:cf:bd:49:29:fa:0c:f6:2f:
a8:7e:c9:8f:78:2b:d5:5f:da:c2:89:a2:78:83:1e:
57:5a:ef:71:71:34:9f:51:4f:ba:15:33:44:36:bc:
2b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F3:57:E9:6F:18:F2:01:BB:7C:64:13:4F:19:2F:49:AB:A3:33:F7
X509v3 Authority Key Identifier:
keyid:DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:87:64:85:00:e5:1d:c7:b2:3d:14:b0:63:66:e6:80:37:7f:
7a:d5:99:3e:96:38:b2:27:e3:16:40:3c:7d:03:cb:3a:45:1c:
70:7f:9b:b8:2e:4a:5d:6b:25:e7:5f:57:b8:04:da:32:48:39:
82:8f:b0:cf:a8:d7:d8:50:5c:08:4c:3c:23:db:73:00:5a:c7:
12:a9:02:9a:fb:5a:3c:7e:ff:b8:4b:2c:ea:2c:ae:c6:d4:fd:
70:1f:6a:cd:f1:83:e4:fa:7c:09:76:ef:5e:4f:22:f5:e5:46:
ea:28:a3:50:9b:e4:7b:19:73:24:18:57:c1:b9:22:4e:3c:70:
1e:f5:d2:82:c3:ec:cf:c1:df:e9:a2:2f:9f:72:5d:5c:a8:20:
42:7b:63:f7:20:52:ee:31:04:c1:15:20:55:4c:b0:7e:dc:ac:
c4:d4:6e:8d:af:0c:bf:f0:3d:0e:f8:8c:31:01:f7:12:7b:54:
b7:e4:fa:df:e1:ef:7e:60:0d:f9:85:7b:8f:88:26:78:92:5f:
df:23:e7:9b:8a:76:67:38:b8:99:97:21:95:3c:6d:ee:75:c8:
db:76:1f:49:67:ff:ee:00:7f:57:47:15:ce:04:34:7d:37:b2:
e5:b1:e5:74:3d:2a:cd:19:5f:31:8c:87:58:f7:14:28:98:fd:
c6:53:33:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:49:48 2026 by rpki-client