Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
File: 3wuk9W5vA3clKGA3r8PBTCk7m4I.mft (raw, json)
Hash identifier: Nqv8aCMh3VEJaoaFpHZQxYUQjas0dj0hyPvUK0QxbjU=
Subject key identifier: 17:75:7F:1F:C4:1B:3F:99:FB:9B:5C:78:F8:8C:B4:AA:C8:F0:70:C1
Authority key identifier: DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
Certificate issuer: /CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Certificate serial: 01A0CE91472DD66D1D6222016EF2950AC009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
Manifest number: 1A71
Signing time: Wed 23 Sep 2026 14:00:22 +0000
Manifest this update: Wed 23 Sep 2026 14:00:22 +0000
Manifest next update: Thu 24 Sep 2026 14:00:22 +0000
Files and hashes: 1: 3wuk9W5vA3clKGA3r8PBTCk7m4I.crl (hash: PYXHcJ0GuK5UE+iQEtTzPSxjd0TDIRrHEXUO2lvlr38=)
2: BMMff36mDnqefE-fi1QYcDeaUEk.roa (hash: Yky2cFQCYWcMLt5A2AE8QdQ1eB3p9PDevvqazUFMfX4=)
3: c1k5DpW670XTtOlEvTkIz9kZXlc.roa (hash: Y49a9m/TdUFutVOSA2rIEcmP18u8ki2BwGqjBT3Sy90=)
4: ncKH1YpuJk5-uciMg32syOz5Dh0.roa (hash: 8NVQeOlGQC5ZiQGFRi3sIRfLjXwS5UuTrVhAQo79EFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:47:2d:d6:6d:1d:62:22:01:6e:f2:95:0a:c0:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Validity
Not Before: Sep 23 14:00:22 2026 GMT
Not After : Sep 24 14:00:22 2026 GMT
Subject: CN=17757f1fc41b3f99fb9b5c78f88cb4aac8f070c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c6:12:6b:a3:12:0f:49:ad:11:5d:02:b2:e2:
bb:b1:a6:18:97:a5:ad:8d:cf:c7:d2:ec:84:02:34:
0b:28:27:0a:ee:fa:19:2c:b2:21:b6:6a:a9:89:92:
33:0a:ed:fd:46:7e:49:9f:96:8e:20:a3:db:11:9f:
9d:3a:30:9d:2d:c2:da:78:05:c6:4c:6c:95:74:75:
c5:ed:ec:97:57:59:00:fe:e0:eb:a5:83:94:71:08:
8d:60:15:18:87:fd:ab:dd:d0:6a:9e:76:fc:c2:4f:
b0:b8:e1:5d:25:9b:da:fd:0e:73:1b:11:1b:49:40:
58:57:11:cd:a5:7b:8e:df:e3:01:29:dd:34:84:bb:
50:68:9b:16:75:57:73:bc:9c:c6:d3:52:bf:f5:48:
16:3c:69:ef:35:a0:ac:a5:99:ee:b8:77:82:c5:e4:
1f:db:a6:18:c3:23:31:5d:62:64:17:45:ab:bb:15:
8d:b2:66:03:50:42:60:d6:3e:d5:9a:39:17:79:2e:
91:8d:ff:fa:6a:56:f6:ea:18:03:70:1f:c2:2f:0d:
c7:4a:a5:fb:6d:3f:35:24:fd:0b:31:9a:ae:cf:39:
87:84:3c:e8:b3:a8:42:fa:0f:04:db:83:a5:21:f8:
45:7f:90:d3:01:cc:5d:2e:15:07:6e:3e:e7:87:62:
ea:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:75:7F:1F:C4:1B:3F:99:FB:9B:5C:78:F8:8C:B4:AA:C8:F0:70:C1
X509v3 Authority Key Identifier:
keyid:DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d4:0b:f3:df:c0:8d:e9:c0:81:10:fc:06:ac:52:10:e3:85:
ce:a7:53:6b:08:69:fb:4e:1c:69:a8:03:2b:e6:26:aa:1f:d6:
25:4f:09:74:b5:cb:30:e8:62:e5:35:f4:47:51:cc:b1:7c:42:
f7:c4:0e:b3:8d:88:4b:15:6d:5e:b1:b9:6b:e1:a4:0c:00:f3:
37:dc:d9:3f:18:3f:5a:39:69:86:78:ec:c4:2e:4d:34:48:d5:
4f:13:13:e4:91:1a:88:3b:93:39:fc:f1:39:48:94:40:cf:fc:
3c:4d:b5:b1:4d:34:69:70:36:37:31:ff:20:4b:1b:d1:1e:d2:
d1:23:92:f2:91:f6:cc:c5:be:5d:ae:76:61:e6:05:5f:e0:7b:
d4:bf:21:0c:aa:89:ab:7c:7e:96:b1:10:60:a1:14:ac:b8:36:
49:a5:a5:14:a8:a2:80:bb:30:8e:db:22:3b:46:19:79:2f:0a:
18:71:94:9c:1a:7c:83:e1:c0:b1:c1:28:7c:57:f2:7d:90:67:
10:37:9f:ab:83:00:ea:5b:47:74:b9:f2:f3:29:d2:ec:49:b5:
2b:0e:1c:d6:7c:7d:db:cc:95:55:73:50:13:d4:85:c9:40:f9:
ec:2f:13:3f:c8:9a:9f:6d:b4:77:5d:c2:45:78:82:8f:05:a2:
fe:18:e4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:56:43 2026 by rpki-client