Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
File: 3ciCMsB94s3Llur551FVC6pmxYg.mft (raw, json)
Hash identifier: ZYmtTUEtKeP+cfrPTETpsI7fEcigeOmxmUSetQVOzCU=
Subject key identifier: 80:85:26:2C:90:8E:EB:98:CD:47:C2:61:8D:02:65:18:77:64:68:BF
Authority key identifier: DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88
Certificate issuer: /CN=ddc88232c07de2cdcb96eaf9e751550baa66c588
Certificate serial: 01A0CEC877225192B48F3B84054E340D5B47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
Manifest number: 11CD
Signing time: Wed 23 Sep 2026 15:00:38 +0000
Manifest this update: Wed 23 Sep 2026 15:00:38 +0000
Manifest next update: Thu 24 Sep 2026 15:00:38 +0000
Files and hashes: 1: 3ciCMsB94s3Llur551FVC6pmxYg.crl (hash: 1oGCliYpRqCwSTHQ0SGcEDZMmCrqrQZmMp2GewIUrzA=)
2: Hfq2hHkukqsFqywTjHsioREmNS4.roa (hash: paBdvdH/DYPPTu1rMzb8b23iJRlSlCeY0XMWLizu13w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:77:22:51:92:b4:8f:3b:84:05:4e:34:0d:5b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc88232c07de2cdcb96eaf9e751550baa66c588
Validity
Not Before: Sep 23 15:00:38 2026 GMT
Not After : Sep 24 15:00:38 2026 GMT
Subject: CN=8085262c908eeb98cd47c2618d026518776468bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b7:14:3d:e9:07:48:06:d0:76:2d:af:6e:c8:
2e:3b:69:82:a1:dc:cf:82:75:18:dd:6f:b0:72:f2:
64:94:ed:0a:34:ce:97:13:ff:ed:c2:5c:cd:6d:eb:
16:ec:56:50:fe:6f:79:d7:29:19:c9:28:66:3e:9a:
bd:b3:18:2f:c0:9c:54:20:d3:50:59:f9:95:eb:83:
0a:82:2a:14:14:eb:8e:d3:5b:50:c0:d1:52:4b:cb:
66:24:b4:9c:ec:ba:f6:e8:4f:a8:af:72:fb:f0:32:
02:f1:56:59:9f:bb:35:a9:69:6d:5f:79:3a:27:32:
07:30:14:2e:b5:08:75:99:e1:39:3f:08:a3:ef:41:
79:8b:ef:51:ae:4e:09:20:4c:55:0c:d9:c5:5a:fb:
71:93:df:ce:1b:4b:d5:38:26:94:25:46:ee:44:33:
51:c1:07:9a:1b:40:d3:5e:47:70:dd:3c:3c:ad:a6:
dc:61:b6:f7:cd:56:78:52:4e:2b:15:71:9b:38:65:
b9:2f:95:27:47:29:11:69:9a:a7:c9:0a:de:b6:e4:
9c:9f:98:30:bc:78:08:13:f8:44:76:fc:87:f6:4a:
f6:fb:11:2d:a1:c3:44:d4:da:3f:1b:f3:02:31:44:
eb:e3:9a:11:b6:aa:cc:7d:a5:4e:d7:4d:d3:c1:4b:
e0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:85:26:2C:90:8E:EB:98:CD:47:C2:61:8D:02:65:18:77:64:68:BF
X509v3 Authority Key Identifier:
keyid:DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a7:56:ff:3c:6d:4e:cf:4d:42:81:8f:fc:43:3d:cd:f2:a5:
73:f1:e5:1a:15:66:47:6d:2d:c8:13:48:19:3c:df:01:3d:cb:
d1:f5:65:4a:3a:df:d9:c6:94:2a:a6:59:5b:33:e4:96:cc:c8:
c6:3c:1f:52:ce:d3:4b:ec:73:78:c4:e3:20:f6:3b:37:6e:7a:
e5:20:63:db:e7:8b:0f:a6:79:06:58:ed:98:d5:97:d6:50:f5:
8a:18:ad:9e:62:e6:15:5f:02:a1:f5:64:97:80:4c:23:f8:c3:
e6:7b:78:c1:cb:17:34:d0:0f:b9:7b:d1:c1:1a:f6:30:1f:62:
31:98:cb:96:d4:ad:58:f5:71:e0:1e:90:51:de:a8:5a:31:d4:
f0:87:14:fa:cb:6b:89:2a:a1:d3:9b:59:04:5e:0e:1a:c2:b3:
fe:4f:79:bb:62:2c:c3:26:9d:a3:46:29:24:0b:c9:09:1e:87:
a3:1f:3e:20:df:1b:20:85:70:74:10:41:41:1d:60:cf:10:e8:
a1:6d:6b:56:29:ba:44:81:65:ce:73:76:2f:9e:05:af:60:b7:
a4:65:01:fc:19:5e:42:61:2b:71:40:b5:63:87:77:8c:5a:5c:
80:2a:cd:85:7d:30:9a:b3:f4:80:4f:45:86:88:34:57:2b:94:
1a:0b:ca:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:28:50 2026 by rpki-client