Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
File: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft (raw, json)
Hash identifier: vBYRI1EYlYvrdPF0jBnvFWeXvFvnMjlR5N5nM3urwlA=
Subject key identifier: 9B:29:49:EF:AA:4F:F8:30:6D:A7:F5:DC:AC:CC:8A:FE:4D:8F:25:80
Authority key identifier: DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
Certificate issuer: /CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Certificate serial: 01A0D4CB5A791CF832415B8927A436DAD903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
Manifest number: 1384
Signing time: Thu 24 Sep 2026 19:01:31 +0000
Manifest this update: Thu 24 Sep 2026 19:01:31 +0000
Manifest next update: Fri 25 Sep 2026 19:01:31 +0000
Files and hashes: 1: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl (hash: 3Dle7od/RypQjTA3a4E1s1/ZiHnxKZf+z8Q2luLUwTQ=)
2: f8-DGeBP35-N3w51zaELLHTWQhA.roa (hash: p45bmNjagtDF3HgTTRtJcWFVXkd0k7P3PfW1B+YfWgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:5a:79:1c:f8:32:41:5b:89:27:a4:36:da:d9:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Validity
Not Before: Sep 24 19:01:31 2026 GMT
Not After : Sep 25 19:01:31 2026 GMT
Subject: CN=9b2949efaa4ff8306da7f5dcaccc8afe4d8f2580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:81:57:42:cf:95:44:d7:af:9c:1a:96:0f:bb:
d0:35:2a:af:d9:ce:74:63:49:c9:1e:c3:9e:2f:65:
ce:ed:21:fc:ef:4c:2f:f2:44:0c:46:d5:8b:9a:fb:
54:c6:68:0d:a2:44:06:88:a2:3e:69:ab:2d:4b:1d:
42:e5:e7:d2:06:8d:c4:a9:d3:8c:20:76:fd:3d:69:
0d:fc:21:db:3d:c0:f1:68:af:6e:7d:9a:2b:30:7c:
02:d3:15:65:51:1c:e4:e1:a8:77:53:dc:42:67:6f:
24:db:2f:49:e1:2c:96:78:44:b8:c5:94:53:46:70:
c4:d4:ab:ee:2f:e6:0b:db:e4:02:52:00:0e:f6:e5:
20:f9:d4:c2:51:0b:36:1d:ea:68:78:9c:f8:41:0b:
83:1e:dc:d8:eb:ad:c7:3c:40:4e:92:06:d4:3c:6b:
e2:65:32:c6:9f:e5:18:3b:a5:32:a1:18:df:d2:7d:
a5:52:32:8e:b7:4a:9d:0d:fc:5b:9b:25:34:a0:22:
fb:60:90:93:0d:ae:a5:e0:9b:af:e9:b1:68:da:ed:
bd:f6:f1:db:ad:7c:c7:98:89:e0:ea:a7:ee:f5:3d:
05:a2:88:41:c1:07:c2:06:38:e6:a0:40:a4:0b:42:
cb:d7:6c:ba:28:b3:73:dc:6d:ad:20:d5:0c:42:a9:
78:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:29:49:EF:AA:4F:F8:30:6D:A7:F5:DC:AC:CC:8A:FE:4D:8F:25:80
X509v3 Authority Key Identifier:
keyid:DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:8a:df:4e:c6:d7:a8:b0:5c:c6:cc:fe:0f:10:af:65:df:43:
f8:42:9f:3e:73:17:92:90:40:5b:db:5c:7d:31:69:e1:3c:33:
71:15:7e:65:6b:0e:f5:b9:b4:df:e3:10:f6:ba:4c:5d:8f:b3:
8d:d0:ea:80:8a:47:65:1f:c5:02:c0:14:59:88:dd:6a:30:b1:
c7:3a:2e:22:2d:59:21:c0:db:3f:4f:09:f0:e8:47:ca:2f:1b:
e3:e3:79:0e:f4:b1:fa:7c:fe:ab:7e:53:81:3b:9d:19:ff:85:
1b:c6:e0:9b:39:d5:70:60:74:56:60:7e:79:0d:55:64:67:55:
cc:01:c1:ef:63:b2:73:8f:7c:c7:e4:44:f2:b2:03:37:3e:8f:
83:50:91:c4:15:08:13:21:3e:f5:15:dc:ae:a5:e5:f1:42:e3:
9b:66:86:da:20:03:b4:c9:f6:aa:d7:11:72:da:75:49:1c:2b:
86:bf:83:d2:e6:fe:92:0b:b1:b2:f2:0e:05:c3:1b:f3:8e:5a:
25:ea:9d:fa:f0:3a:eb:20:3f:73:84:3c:9b:34:73:5d:ff:80:
5c:88:a2:a5:21:3d:a6:1a:2b:bf:bc:2b:9c:33:67:7f:9e:bc:
f3:83:9a:05:be:ee:d6:09:80:dc:6a:dd:8a:d6:dd:7d:9f:7c:
30:8c:cb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:31:00 2026 by rpki-client