Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
File: 3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft (raw, json)
Hash identifier: jhnDS4F+cCV3W8vhRSX2raA9Ty2oA0wRJndTXAJEWzg=
Subject key identifier: 22:9E:C0:41:7C:E4:C4:68:40:E4:D6:A6:D5:90:39:46:59:38:5A:EF
Authority key identifier: DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5
Certificate issuer: /CN=dce6e13e413baf381b625131e924e947843436f5
Certificate serial: 01A0D4CBA8C6E88F849C9049401E5FAA8C29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
Manifest number: 0EFD
Signing time: Thu 24 Sep 2026 19:01:51 +0000
Manifest this update: Thu 24 Sep 2026 19:01:51 +0000
Manifest next update: Fri 25 Sep 2026 19:01:51 +0000
Files and hashes: 1: 3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl (hash: nOJamZYFcFNEptEJiQzZlKSULrZqh38BGUlQtqlL6Xs=)
2: WaiBRN4zqeNTstFb2Bj7FDDnj4A.roa (hash: R2F3HKnWVo0NsS1fo82XPlwTKBu5M4Ho2YxFKIfZuWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:a8:c6:e8:8f:84:9c:90:49:40:1e:5f:aa:8c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce6e13e413baf381b625131e924e947843436f5
Validity
Not Before: Sep 24 19:01:51 2026 GMT
Not After : Sep 25 19:01:51 2026 GMT
Subject: CN=229ec0417ce4c46840e4d6a6d590394659385aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:87:c2:31:74:62:3c:c7:b9:b5:d5:e7:20:c2:
b6:c2:39:ee:e6:33:1f:1b:b8:d1:f1:da:3b:98:f6:
0b:0a:54:6b:85:04:b3:fb:46:98:d5:50:c5:83:47:
36:ba:e5:6b:1d:f1:55:88:5f:a5:c0:d1:db:7f:c9:
ff:9b:2b:66:ba:e7:fe:08:2f:b5:36:0b:e3:51:92:
cc:e2:2b:ca:b9:f1:6a:d1:3a:ac:b2:2f:b9:5d:fe:
f8:07:ff:39:28:5f:9c:6e:9f:dd:7a:cf:24:41:e6:
63:3c:7e:3d:8b:9e:c1:69:11:40:fc:14:02:51:2f:
2a:44:95:b1:15:57:b3:87:c8:66:03:94:f3:8b:53:
1c:e7:f3:63:68:0f:96:bc:a0:6e:2d:de:34:7e:8d:
67:86:b2:ee:1a:3c:bd:96:6a:80:19:d4:cf:1e:25:
3b:a6:54:0a:49:54:2e:8f:3d:96:33:21:a1:d2:44:
8c:16:a7:46:43:8b:3a:33:5a:a8:98:28:8f:4f:22:
8d:36:81:ad:19:ac:3c:9b:2c:10:73:b6:72:1b:71:
3c:9b:cf:b2:a0:17:5f:6c:3b:98:14:ad:b4:5c:62:
af:60:ed:47:1a:17:3f:ad:1c:ec:ca:72:20:30:c9:
a0:51:b4:dd:b6:12:2e:b5:22:49:9e:fd:ea:2a:a1:
7f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9E:C0:41:7C:E4:C4:68:40:E4:D6:A6:D5:90:39:46:59:38:5A:EF
X509v3 Authority Key Identifier:
keyid:DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e2:c7:01:aa:0e:f1:83:fd:48:b6:99:07:cc:a6:e7:8b:71:
56:6a:a7:ee:95:7d:6b:52:81:8c:4d:a9:4f:7d:47:15:76:10:
f5:4c:2b:88:76:e9:51:18:6d:52:4a:6c:65:9e:8f:2d:04:bc:
c8:85:48:f5:1b:39:f6:8c:23:fb:ab:cf:33:00:82:e1:68:84:
c7:12:fc:e7:d5:e0:b2:b9:d1:63:df:f6:10:2c:5a:b5:66:21:
21:4b:2f:c3:43:dc:e4:e8:c7:81:04:10:47:cd:65:c5:40:b3:
36:56:d3:33:ad:31:e8:9c:3a:d6:c0:5c:7e:ea:f4:04:74:f9:
d7:23:ef:6b:e3:36:86:ed:fa:85:bb:38:38:3d:34:af:3b:14:
44:a6:65:04:1c:2d:d5:49:b1:6f:3a:39:03:17:ae:c7:c7:a7:
6a:c6:3c:53:cc:b9:f4:9e:15:d1:1b:2f:f5:b0:af:1e:72:56:
24:55:4b:a4:07:e6:f0:dc:4b:67:2b:a1:58:cd:f4:0c:62:a3:
a8:3d:04:2b:e2:3e:d0:16:e9:b2:ab:f5:ed:07:7c:2b:6f:6f:
d6:73:66:a4:91:fc:80:0e:f4:ec:41:19:64:12:49:e1:2a:b6:
05:2a:be:6c:fe:d8:f6:10:98:f4:80:d0:b8:f7:06:9b:40:d1:
4e:ff:50:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:19:18 2026 by rpki-client