Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
File: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft (raw, json)
Hash identifier: v0QVMnaZSjiFy454ZzbEfNwuUwvl193M764c3jDk/14=
Subject key identifier: 18:81:E5:F9:B0:74:94:EB:70:5B:B8:5A:6C:78:44:B8:25:F7:EC:3A
Authority key identifier: DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
Certificate issuer: /CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Certificate serial: 01A0D07F7D51038FE44D1966DC4B2EAE1131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
Manifest number: 1573
Signing time: Wed 23 Sep 2026 23:00:11 +0000
Manifest this update: Wed 23 Sep 2026 23:00:11 +0000
Manifest next update: Thu 24 Sep 2026 23:00:11 +0000
Files and hashes: 1: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl (hash: mGQvJiZxP3aP7sM3LUNIiKOZAL2/7TY2HUMm1QbzuLk=)
2: H6HTDOjZlQ2VG-BteD4I1nTRn4k.roa (hash: a6IB6fLHDx6lViiB0ReUyYalYXgmOEaBsh6fJ2aLk04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:7d:51:03:8f:e4:4d:19:66:dc:4b:2e:ae:11:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Validity
Not Before: Sep 23 23:00:11 2026 GMT
Not After : Sep 24 23:00:11 2026 GMT
Subject: CN=1881e5f9b07494eb705bb85a6c7844b825f7ec3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:77:93:ec:12:0f:2d:78:f8:c5:03:68:11:2c:
cf:59:a5:f0:28:2c:72:65:b2:f5:8f:cd:20:c3:af:
03:22:a5:95:dd:91:28:4a:70:25:ba:ef:cc:13:1e:
90:08:8a:6d:3d:e4:fd:8f:90:8e:54:89:98:b2:ab:
72:81:cf:77:2e:03:d7:bb:56:c9:2c:46:15:f3:e4:
d5:d7:33:ab:8e:ec:e6:41:b7:80:98:4b:98:90:62:
68:69:35:b6:22:7c:6d:ad:b3:5a:dc:bf:50:c8:bd:
19:4f:1a:a1:2a:16:38:dc:db:ab:da:1e:53:dc:9b:
0b:6c:88:66:af:67:aa:4e:2b:d3:68:0d:29:5b:17:
91:69:be:30:1c:aa:4c:34:f7:27:26:6c:4b:51:b1:
bf:d4:ad:b8:fe:b7:d8:04:1e:8b:d0:1e:58:e9:6f:
32:50:13:24:dc:37:e4:1d:f5:c0:40:d6:6f:17:c8:
62:cc:5d:1a:4c:1b:0e:d1:fc:d7:b9:79:b5:5f:09:
16:92:18:0b:0a:74:65:0c:de:75:8e:9f:25:f8:c7:
6b:5a:7b:8c:16:ad:28:ac:7f:04:02:13:db:26:a0:
c7:35:3f:b4:a2:ea:c0:84:af:92:d0:1c:ee:7b:fc:
1e:b8:33:d3:ee:78:05:c1:43:53:c3:81:45:8f:48:
70:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:81:E5:F9:B0:74:94:EB:70:5B:B8:5A:6C:78:44:B8:25:F7:EC:3A
X509v3 Authority Key Identifier:
keyid:DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:38:6a:d4:b1:00:6c:64:e7:50:29:4c:48:51:a9:d6:b5:bb:
88:a5:df:fb:91:1c:83:98:70:5d:22:d5:1a:3b:02:b0:ce:a6:
1c:76:31:2b:71:eb:fe:25:19:39:a5:38:fb:cd:f3:93:1c:d6:
0a:f7:14:02:f3:5e:68:a9:5e:1a:e9:ef:ed:27:ab:14:22:0f:
cf:15:3c:5b:e4:28:ed:22:c1:94:1b:bb:17:34:f3:07:fa:a0:
1d:9a:70:9d:c2:22:49:52:81:bd:65:0c:80:3a:d7:5b:de:69:
fd:2a:6d:05:79:c2:07:d4:b4:03:c8:2f:55:a2:17:04:af:9e:
24:3c:f9:3c:63:59:e1:1c:ae:96:97:f4:04:c4:0c:1e:2b:ad:
cf:41:71:a6:e8:4c:70:ce:a4:fe:f5:39:ac:31:bc:a7:fa:5c:
6f:f1:78:b6:c2:b3:6d:f2:ca:c8:9d:71:f9:b3:3e:96:03:0f:
22:c4:d7:65:b2:15:81:b4:71:16:02:30:bf:f5:29:01:cd:b6:
eb:13:42:b9:c7:82:fd:3d:69:2e:78:f2:a5:33:f6:b1:02:88:
93:24:37:06:d4:ed:05:a4:0d:59:ed:98:d1:bc:1e:ef:e1:bc:
1d:be:1e:73:fe:80:6f:65:bc:3d:59:ca:b1:0f:b4:22:cc:cc:
39:b6:48:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:05:11 2026 by rpki-client