Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/3oP6K0srlD39oVEaUvz5hQb85DE.mft
File: 3oP6K0srlD39oVEaUvz5hQb85DE.mft (raw, json)
Hash identifier: U5adj+5XQw2oTrvSWLKDMyOGEQVGMCDTWR4mhhCc6TY=
Subject key identifier: F1:0E:3A:4D:F8:BE:B3:7E:33:E2:32:5D:1C:0E:00:74:78:97:76:23
Authority key identifier: DE:83:FA:2B:4B:2B:94:3D:FD:A1:51:1A:52:FC:F9:85:06:FC:E4:31
Certificate issuer: /CN=de83fa2b4b2b943dfda1511a52fcf98506fce431
Certificate serial: 01A0CA473C7607F4C4AAC2CD8112D3FD161E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3oP6K0srlD39oVEaUvz5hQb85DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/3oP6K0srlD39oVEaUvz5hQb85DE.mft
Manifest number: E2
Signing time: Tue 22 Sep 2026 18:01:01 +0000
Manifest this update: Tue 22 Sep 2026 18:01:01 +0000
Manifest next update: Wed 23 Sep 2026 18:01:01 +0000
Files and hashes: 1: 0Ii_2lRksDYCD7Qj_i2q75d4CtM.roa (hash: P9L50eNN14lUjBWYXaCW+6iI/YYEVPyia14M/YoQ9Ec=)
2: 3oP6K0srlD39oVEaUvz5hQb85DE.crl (hash: ARq05BlmSLjRgZWX0G413hq0XSD788kG1JZkuhiXnkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/3oP6K0srlD39oVEaUvz5hQb85DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/3oP6K0srlD39oVEaUvz5hQb85DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3oP6K0srlD39oVEaUvz5hQb85DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:3c:76:07:f4:c4:aa:c2:cd:81:12:d3:fd:16:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de83fa2b4b2b943dfda1511a52fcf98506fce431
Validity
Not Before: Sep 22 18:01:01 2026 GMT
Not After : Sep 23 18:01:01 2026 GMT
Subject: CN=f10e3a4df8beb37e33e2325d1c0e007478977623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:24:a5:37:c9:17:1d:81:8c:53:91:b1:79:18:
73:02:59:a0:be:69:1a:71:20:1d:97:3a:7e:1e:e6:
92:7b:49:aa:4b:0d:b9:79:c1:46:de:d6:b9:82:f8:
c5:af:34:82:d5:f8:8d:82:8d:1b:e9:b8:ac:39:05:
9e:73:9e:78:86:c3:cf:fc:b6:1d:f8:68:dd:57:f7:
45:3a:92:f7:8c:ac:14:20:54:8a:4c:a5:cc:7d:de:
f7:55:a3:21:66:93:21:f5:85:ee:a9:39:d9:a0:f3:
d1:63:af:27:c0:19:02:36:b0:e0:e7:05:89:34:43:
70:28:9d:03:74:85:73:97:63:3b:67:86:35:6d:42:
fe:be:9e:f3:3e:a6:fd:0b:1f:ab:31:19:2e:2e:d9:
11:d2:72:0e:4d:b6:fe:53:bd:db:61:af:00:60:16:
da:cb:d3:8b:51:82:8f:d3:3e:bc:ad:a6:0e:65:7f:
70:36:a1:e6:f0:ab:4f:1d:a5:b5:70:26:fa:3a:42:
e9:12:dc:ab:c5:7a:50:5f:8f:91:68:59:14:a4:cf:
76:14:21:c1:2b:62:9d:4f:df:6b:07:fa:1b:7f:ae:
8b:64:8c:7f:3d:f3:7e:59:c0:d7:a9:d1:a5:01:fd:
0a:d3:65:1c:f8:2c:4f:c5:b8:8c:e3:c2:24:49:94:
a7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0E:3A:4D:F8:BE:B3:7E:33:E2:32:5D:1C:0E:00:74:78:97:76:23
X509v3 Authority Key Identifier:
keyid:DE:83:FA:2B:4B:2B:94:3D:FD:A1:51:1A:52:FC:F9:85:06:FC:E4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3oP6K0srlD39oVEaUvz5hQb85DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/3oP6K0srlD39oVEaUvz5hQb85DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/3oP6K0srlD39oVEaUvz5hQb85DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:38:c0:7e:cc:a8:50:5b:54:74:9a:15:43:ef:06:0e:bf:83:
37:94:21:1f:10:40:a3:f6:64:40:4f:75:8b:a8:30:60:b9:79:
a1:9e:f3:c7:56:31:18:51:f4:84:a0:cc:c5:cd:3b:55:6b:4b:
b3:63:e1:f8:52:87:20:67:da:33:19:37:dd:a6:7d:b0:c7:e5:
e4:7c:be:48:bc:fa:6e:b1:65:c1:87:c1:71:ba:ca:b6:2b:9a:
fc:1a:48:f5:49:89:73:37:37:da:15:bf:c9:d7:bb:b7:f4:ac:
ab:85:d1:2d:e2:0d:23:8f:05:dc:b0:3e:e7:eb:97:fd:eb:6c:
2a:7a:d7:83:57:f1:f5:b2:d5:2c:ee:10:33:0d:61:73:aa:5c:
f0:93:13:69:b4:c4:89:dc:ff:c1:76:1b:f8:16:a5:c6:ff:38:
a3:ba:e5:0a:65:4e:5e:cf:66:b5:29:91:5b:8a:4a:cc:ce:d2:
43:71:81:52:ea:62:9b:ea:a8:06:47:23:ce:b3:40:a7:e2:08:
9a:26:6c:00:b7:14:63:f3:2f:f3:f5:45:c6:d3:15:c0:7d:b8:
48:fd:53:13:f3:be:e4:3c:b6:a2:4d:14:f3:5e:ab:54:7d:ba:
92:fc:52:c1:d8:46:76:74:74:ec:18:22:e6:83:6c:0c:d3:9e:
2e:78:19:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:40:52 2026 by rpki-client