Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft
File: 494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft (raw, json)
Hash identifier: KIIMqEjCIgZ9Oi8CHGr5Vs5SK9xh3zAvozUrZwCi8WQ=
Subject key identifier: 15:2B:6A:59:69:4C:BD:97:CE:0D:6B:BE:2A:C1:94:E1:C3:1D:06:7D
Authority key identifier: E3:DE:21:B0:63:6C:61:4E:BF:43:66:47:98:01:2A:FD:56:C5:EE:86
Certificate issuer: /CN=e3de21b0636c614ebf43664798012afd56c5ee86
Certificate serial: 01A0FF478DE0E93DF8C24B6DD71F49206E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/494hsGNsYU6_Q2ZHmAEq_VbF7oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft
Manifest number: 1A83
Signing time: Sat 03 Oct 2026 01:01:14 +0000
Manifest this update: Sat 03 Oct 2026 01:01:14 +0000
Manifest next update: Sun 04 Oct 2026 01:01:14 +0000
Files and hashes: 1: 494hsGNsYU6_Q2ZHmAEq_VbF7oY.crl (hash: +TjbJbPWMr0VLzHcvMZ12XDJQb62g2B7lntLDM9YmTw=)
2: s3A2C1YnSyHhxEfVoTVMiH87vAk.roa (hash: MNg/HtGNSEAU6JM2GvPKlMX0wCyEJFk2vuXxUMALprU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft
rsync://rpki.ripe.net/repository/DEFAULT/494hsGNsYU6_Q2ZHmAEq_VbF7oY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:47:8d:e0:e9:3d:f8:c2:4b:6d:d7:1f:49:20:6e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3de21b0636c614ebf43664798012afd56c5ee86
Validity
Not Before: Oct 3 01:01:14 2026 GMT
Not After : Oct 4 01:01:14 2026 GMT
Subject: CN=152b6a59694cbd97ce0d6bbe2ac194e1c31d067d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:06:69:c8:3e:d4:49:29:88:85:67:72:cb:12:
f2:e6:d1:1b:bb:f6:ca:76:28:79:cf:f4:90:ed:9c:
f8:18:c0:28:5d:7f:07:dc:c6:71:a4:2d:25:8f:62:
9a:aa:c5:58:c1:0a:44:a5:66:b6:a1:0b:a5:fd:7b:
bc:bc:cb:40:71:c5:07:03:92:c5:1f:a6:8d:de:b3:
d5:9c:9f:f1:08:f8:17:72:4a:43:49:52:b6:d4:d9:
c3:32:2c:d3:55:a4:30:19:d1:22:26:36:29:4d:ad:
69:db:61:81:d2:94:ed:a5:ac:92:b8:78:a3:fe:d5:
22:80:c1:d4:ba:f2:80:cb:13:53:6d:e1:00:6e:82:
47:98:d1:ba:f0:e3:df:94:a7:e1:c5:29:d3:da:be:
23:67:2e:f0:70:b4:d0:5f:b9:ca:d9:81:c2:56:44:
3e:6d:17:d5:09:21:bb:2c:76:3e:0f:d0:32:da:53:
b0:81:91:58:32:77:d8:66:56:fe:a3:24:d7:44:56:
47:ad:6c:01:bc:2b:fc:9b:e2:ea:78:47:9e:11:6f:
5d:9c:e1:9a:35:61:b4:b1:ea:f6:3e:49:c8:2b:73:
5f:ef:57:59:d5:73:d5:18:7c:72:12:39:1a:3b:53:
60:2f:85:57:08:45:7f:d3:2c:c1:e5:be:2a:86:4b:
11:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2B:6A:59:69:4C:BD:97:CE:0D:6B:BE:2A:C1:94:E1:C3:1D:06:7D
X509v3 Authority Key Identifier:
keyid:E3:DE:21:B0:63:6C:61:4E:BF:43:66:47:98:01:2A:FD:56:C5:EE:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/494hsGNsYU6_Q2ZHmAEq_VbF7oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:17:e6:73:db:6c:fd:ef:83:d1:cb:0d:f5:f9:e3:bd:d5:ac:
84:7c:35:95:8c:1c:76:68:35:da:88:d9:6e:63:5e:5f:99:6f:
8e:e1:4b:50:17:ec:ef:15:26:8a:68:81:f4:a0:fc:59:00:79:
87:fc:b1:8f:d5:68:a4:51:e6:ea:2e:fc:00:32:45:44:6f:9c:
5a:38:07:55:84:ef:32:ad:a8:38:63:49:cc:77:bb:3d:36:de:
e1:79:30:1b:ff:e2:17:7a:c4:d8:42:b9:20:01:e5:03:c0:41:
fc:d0:37:ff:78:25:55:41:84:5e:57:e7:f3:ff:90:0e:b3:5a:
f5:4d:f1:91:b3:7e:05:6b:16:86:a7:c5:15:f6:9f:e3:70:42:
11:70:87:73:90:cd:63:45:01:34:fa:c9:6e:78:18:33:b5:94:
77:34:70:a1:b4:98:45:23:10:c3:ec:c0:47:76:b8:e1:05:d7:
0b:8a:dd:78:46:25:f1:b7:22:f0:84:71:f4:a6:18:02:cb:73:
a3:c5:a9:be:35:a1:2a:2c:22:a3:95:bb:76:5c:e4:c1:ef:80:
43:1c:00:92:68:ef:1e:5a:ff:6d:41:8d:1d:be:15:48:20:62:
f4:73:ea:ab:fb:7c:91:9b:bd:7f:3b:41:b1:49:fc:12:8b:91:
84:2d:e7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 08:55:35 2026 by rpki-client