Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/3gKSn1rIw0n-qYVSnBcU58yVz80.mft
File: 3gKSn1rIw0n-qYVSnBcU58yVz80.mft (raw, json)
Hash identifier: +BlGn207ULy3Yh7HPVEEzOaNawkuiKYEKG3NrFzYdTc=
Subject key identifier: D5:26:30:D9:63:01:A5:70:53:F0:CF:CE:3E:62:17:1E:1B:47:18:7E
Authority key identifier: DE:02:92:9F:5A:C8:C3:49:FE:A9:85:52:9C:17:14:E7:CC:95:CF:CD
Certificate issuer: /CN=de02929f5ac8c349fea985529c1714e7cc95cfcd
Certificate serial: 01A0D012CF9C4CEE1C191506D21456AB76AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gKSn1rIw0n-qYVSnBcU58yVz80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/3gKSn1rIw0n-qYVSnBcU58yVz80.mft
Manifest number: E5
Signing time: Wed 23 Sep 2026 21:01:28 +0000
Manifest this update: Wed 23 Sep 2026 21:01:28 +0000
Manifest next update: Thu 24 Sep 2026 21:01:28 +0000
Files and hashes: 1: 3gKSn1rIw0n-qYVSnBcU58yVz80.crl (hash: XA0mqrCa348DS8NfnT7lDhOjNMnFO7bZ7tdYDiw0AW0=)
2: qt1X8cd4EEdSt0Ko4GKZetgm0U8.roa (hash: QOME3Vz+1BFTr6N1pPVdoLgRzF0h3H4cA0/YeWP3aH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/3gKSn1rIw0n-qYVSnBcU58yVz80.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/3gKSn1rIw0n-qYVSnBcU58yVz80.mft
rsync://rpki.ripe.net/repository/DEFAULT/3gKSn1rIw0n-qYVSnBcU58yVz80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:cf:9c:4c:ee:1c:19:15:06:d2:14:56:ab:76:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de02929f5ac8c349fea985529c1714e7cc95cfcd
Validity
Not Before: Sep 23 21:01:28 2026 GMT
Not After : Sep 24 21:01:28 2026 GMT
Subject: CN=d52630d96301a57053f0cfce3e62171e1b47187e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a7:e6:d1:1e:51:58:5b:29:a2:28:bc:77:0d:
ce:d2:53:77:83:17:a7:9d:87:6a:4a:5f:ec:fc:08:
f8:82:d5:67:a6:5e:26:5c:41:1f:88:0f:aa:c6:cd:
f5:56:c7:32:53:49:d4:3d:47:ea:5a:39:14:16:e4:
53:84:0c:22:c8:4b:8b:46:9d:97:f0:6f:cc:97:1b:
0b:79:75:bc:04:a4:b8:16:24:9b:79:11:d7:84:a1:
f2:7f:25:ba:57:33:ff:52:8d:46:ba:3a:75:07:95:
ac:4d:e4:e5:fe:34:c9:e0:b8:0d:db:7a:0b:99:4a:
3c:2f:7e:22:7b:42:f8:4e:14:8d:38:8a:68:27:cb:
58:b8:7e:bc:1a:1e:fa:51:de:c1:c6:e7:08:29:18:
0e:f5:44:4e:d5:33:30:e9:7b:e3:42:52:2d:a1:7a:
06:e4:f2:cd:80:d4:bb:93:23:33:e8:dc:ec:2f:b7:
7e:fa:8d:6b:cf:c4:74:02:17:95:3b:b2:56:37:47:
63:97:60:72:9c:07:40:45:67:3a:fc:83:a4:66:f4:
9e:ce:5b:2f:ba:54:66:ef:a0:86:72:55:fe:e6:d2:
9c:5e:94:22:31:0e:8b:ce:33:33:34:d2:39:29:e6:
90:2d:31:9a:32:27:69:78:d0:89:49:3b:3c:17:22:
2c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:26:30:D9:63:01:A5:70:53:F0:CF:CE:3E:62:17:1E:1B:47:18:7E
X509v3 Authority Key Identifier:
keyid:DE:02:92:9F:5A:C8:C3:49:FE:A9:85:52:9C:17:14:E7:CC:95:CF:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gKSn1rIw0n-qYVSnBcU58yVz80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/3gKSn1rIw0n-qYVSnBcU58yVz80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/3gKSn1rIw0n-qYVSnBcU58yVz80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:73:35:79:5a:de:f0:c8:3b:90:1c:fc:33:6d:6c:7a:2d:9d:
61:76:35:a7:b0:50:91:e9:14:ab:7f:a5:de:34:24:cb:c4:de:
cd:12:c1:55:96:99:c5:8c:97:c4:52:dd:e6:d3:12:5a:14:4f:
77:04:44:8b:ed:96:f0:e6:ca:c1:82:d8:18:64:87:d2:2f:00:
26:82:ce:62:a4:e1:81:76:d0:57:79:8b:dc:84:50:d5:f5:48:
6f:be:41:c7:b2:76:f1:c2:21:b3:2b:61:06:4d:3b:69:a0:47:
4c:18:81:27:61:89:5d:d5:6c:63:09:2a:2e:ce:b5:9b:90:87:
95:75:cb:9a:57:95:96:36:c0:db:fe:c3:97:c1:4d:5f:45:b6:
27:63:04:4c:ad:37:f1:0d:78:ad:5d:cc:74:34:17:b0:1b:77:
2e:d6:09:82:4f:98:bf:9a:76:ad:37:89:fc:08:b4:95:11:75:
be:9f:0c:1b:56:88:cb:d9:45:ac:08:5f:e1:e8:79:0f:c7:c5:
c8:6b:44:84:9a:8d:f6:09:c4:0d:66:50:4c:70:45:05:c1:82:
d2:0b:52:ef:bb:ae:7d:c6:db:fa:a8:cb:9b:13:36:98:5d:6c:
1a:87:f9:cc:0c:37:79:bd:39:d3:a5:2d:4a:55:f9:68:20:5a:
88:62:cb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:54:59 2026 by rpki-client