Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
File: P3lU2IwK4_Y5hpe_38GVanU-g9g.mft (raw, json)
Hash identifier: RVaxYUSQZBWC7HViYxnnAdZXBwTU9IwO199rYSk2LsU=
Subject key identifier: CD:29:4E:1A:61:B0:0D:39:85:28:83:00:09:69:0A:7F:2C:75:29:CE
Authority key identifier: 3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
Certificate issuer: /CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Certificate serial: 01A0D1923FA8E4590441835695C145ABFD65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
Manifest number: 1A47
Signing time: Thu 24 Sep 2026 04:00:17 +0000
Manifest this update: Thu 24 Sep 2026 04:00:17 +0000
Manifest next update: Fri 25 Sep 2026 04:00:17 +0000
Files and hashes: 1: Jj1TbiCR1nmoQFDDhEUp8Nme5jQ.roa (hash: vEZJZ1EhFYSpfGBedYuhl8hXTejG4aUKraQ3lMQVDzY=)
2: O2XFtNMj5F8lYJUMSubzNUa8Fr4.asa (hash: 67is5rgLKuOUXA0v6cE8sl5V36YTQpNm07lUONgLSRE=)
3: P3lU2IwK4_Y5hpe_38GVanU-g9g.crl (hash: oXWvzQJk8w/LzJcIfZ/UrMIlZd39s/X3CJBcwuS49kA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:3f:a8:e4:59:04:41:83:56:95:c1:45:ab:fd:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Validity
Not Before: Sep 24 04:00:17 2026 GMT
Not After : Sep 25 04:00:17 2026 GMT
Subject: CN=cd294e1a61b00d398528830009690a7f2c7529ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:22:2e:1e:03:18:88:a0:02:e6:f1:27:5a:40:
3a:88:4c:e3:45:2f:7c:32:42:f3:17:93:20:7b:f4:
71:a5:80:43:57:51:a5:a4:78:50:c3:6b:cd:45:9f:
61:fc:92:04:b8:b8:c0:47:9b:f6:61:9a:26:d8:48:
63:d1:74:3d:d9:bb:7a:b2:c0:93:4c:35:f0:1d:60:
18:92:e6:b0:f9:51:3d:7a:2f:7b:92:5a:e3:46:14:
2b:3c:94:26:c3:9d:06:d3:71:30:83:e6:5c:9c:5e:
56:50:a2:2a:3a:cf:87:14:f7:92:ff:c8:ce:a4:c2:
7a:5c:4c:28:27:9a:e1:9f:f9:83:e6:e8:5d:79:c8:
23:3d:24:5b:78:48:cc:2b:45:1b:a5:49:d8:48:2b:
d0:9c:fd:0f:3f:d7:63:99:50:7d:a4:f1:61:26:c6:
cd:fb:69:b8:6d:cc:27:3d:f6:01:1e:ba:f2:f2:47:
a2:99:d1:bc:52:e0:f8:2e:94:81:db:4a:6c:15:5b:
a1:a8:d8:af:6a:91:5d:bb:1f:06:42:a5:00:d6:f9:
d6:0e:6a:51:12:72:f7:1b:33:f5:57:a7:4d:97:5f:
b1:0e:66:4f:77:9f:1a:fa:94:0b:35:6c:ef:7b:fe:
a9:d4:6a:3d:3d:6b:18:a6:84:c2:42:63:23:1e:58:
f3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:29:4E:1A:61:B0:0D:39:85:28:83:00:09:69:0A:7F:2C:75:29:CE
X509v3 Authority Key Identifier:
keyid:3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:59:5a:e5:54:cd:2b:f2:b1:4e:c4:17:7e:8c:65:28:34:12:
cc:e2:c5:89:3e:dc:a2:89:48:9e:09:91:b2:e9:42:df:8c:37:
7e:f7:9f:6d:44:88:7e:d8:37:a3:2e:37:f3:fb:1a:b9:d7:db:
fb:f5:f6:6b:7d:75:29:e4:73:53:73:43:bb:46:7b:7a:13:bd:
16:c8:4b:53:30:b9:89:76:90:6f:cf:90:f2:58:11:27:70:2d:
e4:65:49:f2:98:fd:5c:cd:a2:7d:94:de:48:d9:cb:74:46:e8:
c0:5c:09:4f:2e:20:07:32:d3:41:9a:c2:7b:0d:9f:47:06:8e:
3f:ed:52:b6:9c:87:90:89:4a:55:88:19:85:04:02:f6:50:5d:
a5:19:a5:ff:c3:ce:98:97:72:e8:81:b8:99:90:2c:2a:bd:a7:
64:17:c4:d5:3a:d4:90:76:73:3a:ad:55:41:5d:97:78:f9:58:
2b:1b:f9:e5:23:e4:5a:5d:50:c5:f5:1b:a9:88:e6:c0:e1:80:
7b:8d:c7:5b:9e:4a:29:71:d9:5c:69:cb:39:97:78:92:2b:94:
5a:8c:e2:d2:b0:f2:c3:3e:51:83:3a:22:11:96:8f:2c:38:0c:
b4:bf:12:9e:69:6b:32:5f:df:fe:4f:d2:fe:8c:6a:0e:72:12:
fd:c0:ff:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:20:36 2026 by rpki-client