Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
File: 3-ytVuquEjX6eI5OrTkiwpbig6U.mft (raw, json)
Hash identifier: ewH4wMfpaBR5YWzySq0PMywDq0IUT6Vac/gB8Q20RcU=
Subject key identifier: C8:71:AF:66:59:FA:7A:7F:2C:D3:42:C9:7F:5B:EF:08:DB:1B:38:6D
Authority key identifier: DF:EC:AD:56:EA:AE:12:35:FA:78:8E:4E:AD:39:22:C2:96:E2:83:A5
Certificate issuer: /CN=dfecad56eaae1235fa788e4ead3922c296e283a5
Certificate serial: 01A0D45DD9416D6AFB93E69A8BBE896385AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
Manifest number: 05AA
Signing time: Thu 24 Sep 2026 17:01:55 +0000
Manifest this update: Thu 24 Sep 2026 17:01:55 +0000
Manifest next update: Fri 25 Sep 2026 17:01:55 +0000
Files and hashes: 1: 3-ytVuquEjX6eI5OrTkiwpbig6U.crl (hash: 2CKlhh9AKaAicBKxcBtbEyS8A31oNawjfEgPtts2tx8=)
2: THfbU74ywtQ8sKspPoGoe7QN1LQ.roa (hash: cZXszgxvNHrOfZXBgPIvxUmNlIbSPNniYOHYtr5et54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:d9:41:6d:6a:fb:93:e6:9a:8b:be:89:63:85:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfecad56eaae1235fa788e4ead3922c296e283a5
Validity
Not Before: Sep 24 17:01:55 2026 GMT
Not After : Sep 25 17:01:55 2026 GMT
Subject: CN=c871af6659fa7a7f2cd342c97f5bef08db1b386d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:85:24:a4:e5:fd:a7:f4:6a:5f:d8:f5:ce:b2:
dc:eb:5e:71:93:dc:67:48:11:f6:13:12:f3:6a:de:
1b:3b:f1:e0:6d:80:13:57:97:58:dc:16:1d:31:c5:
af:f6:cb:83:6d:61:bb:64:c0:9d:7b:39:a6:d2:33:
a3:71:44:b7:13:c7:8e:9d:f6:eb:22:26:9c:98:95:
cd:a5:24:fe:9a:b8:a6:a4:41:c1:fd:02:a3:50:c3:
03:ac:7a:df:74:b5:84:90:15:f9:b6:43:e2:8e:3b:
eb:aa:49:49:b7:9d:a1:ec:3b:dd:46:dc:ee:f7:e7:
ce:1a:be:99:25:48:53:fe:62:c8:1c:88:79:9c:9c:
50:8f:4c:f9:c7:62:01:5a:fb:d9:e7:68:85:1d:47:
71:21:bb:2c:86:12:3b:91:9c:0a:a1:91:0d:11:4f:
7d:eb:cc:87:01:55:87:09:26:91:49:44:c6:0c:bb:
15:b7:08:47:4f:30:b9:10:87:7b:fb:24:14:13:3c:
f7:a0:bf:6a:d3:9b:32:be:3c:44:30:03:b9:67:0c:
9a:77:e8:22:47:a2:7a:dc:44:01:f1:b3:ce:43:6c:
63:29:a7:d3:e6:8c:26:fd:95:b7:8b:3a:f2:e9:28:
6e:ae:9d:d1:ce:c4:2b:18:58:ef:b6:99:5a:45:15:
01:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:71:AF:66:59:FA:7A:7F:2C:D3:42:C9:7F:5B:EF:08:DB:1B:38:6D
X509v3 Authority Key Identifier:
keyid:DF:EC:AD:56:EA:AE:12:35:FA:78:8E:4E:AD:39:22:C2:96:E2:83:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:7d:68:54:fe:84:ae:46:97:be:05:a5:56:b6:37:60:54:52:
61:2d:70:af:2c:fb:ea:1f:7e:ed:57:6d:37:8f:ca:5f:ce:64:
df:36:41:a2:e7:38:1c:08:02:dd:ed:7e:3d:9f:b5:01:79:b4:
09:7f:66:19:f0:cd:4b:b2:5a:dc:09:c5:e6:81:e3:30:33:ce:
a3:ca:df:f4:80:43:6a:ec:2f:ff:5e:95:cd:31:ac:f3:d3:36:
69:91:9f:f3:e7:58:e3:9f:6b:91:9a:2c:ce:2f:96:66:f5:13:
08:df:ce:19:b4:8c:4d:8e:7e:98:51:70:01:16:23:e6:fe:c1:
7f:08:0f:95:5d:e5:8c:ee:07:61:ff:17:e3:58:6f:18:2c:ba:
03:4e:00:64:1d:de:08:95:57:1e:a4:0a:08:a6:8d:af:f0:b1:
a0:e8:01:6e:3f:00:18:40:32:02:ce:b2:62:5d:d9:e0:3d:7e:
f9:8c:25:48:dd:45:a1:a0:f6:e9:95:19:8b:5f:5c:ad:54:7c:
8d:7a:37:54:19:63:2c:ca:25:66:68:91:19:4a:e5:95:14:8b:
1e:f2:d4:77:e2:51:98:21:82:ef:0a:d1:51:92:63:b3:92:33:
f2:af:e5:0e:6c:f0:7f:8a:34:f5:47:78:73:cd:7c:52:48:e0:
da:8a:b4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:06:14 2026 by rpki-client