Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
File: 3I4FnV63dkn78ZuErzX2iR2cWAc.mft (raw, json)
Hash identifier: hVzhkzzXXP7H2LAOKwPZTIa5DPP84t1l60D4v/kC6Fo=
Subject key identifier: FF:4B:D5:C7:04:AF:11:B5:FB:0E:BC:3E:6C:44:39:F0:97:3F:7D:9B
Authority key identifier: DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
Certificate issuer: /CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807
Certificate serial: 01A0D011DE20DFDBE40D1A0FB0ED7EC0EC2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
Manifest number: 119C
Signing time: Wed 23 Sep 2026 21:00:26 +0000
Manifest this update: Wed 23 Sep 2026 21:00:26 +0000
Manifest next update: Thu 24 Sep 2026 21:00:26 +0000
Files and hashes: 1: 3I4FnV63dkn78ZuErzX2iR2cWAc.crl (hash: OxbDRIgQY26PS60RQruyOrLMYy3815Iakn5QaK33lpY=)
2: TmN-dr45oTfR8pksVoCNgmVOGLU.roa (hash: vnALMBgUiF5Ge/N8pDhGThN8hB7OAP8KLzkie3WI7N8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:11:de:20:df:db:e4:0d:1a:0f:b0:ed:7e:c0:ec:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807
Validity
Not Before: Sep 23 21:00:26 2026 GMT
Not After : Sep 24 21:00:26 2026 GMT
Subject: CN=ff4bd5c704af11b5fb0ebc3e6c4439f0973f7d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7d:c6:03:89:ff:11:d7:63:fa:03:de:9b:4e:
3c:bc:9e:76:84:b6:d7:e3:d6:92:1e:b7:cc:e9:b0:
b4:30:e1:9b:96:f6:9a:e1:78:69:83:fc:1f:6c:d2:
c1:a3:26:01:89:5a:77:71:37:b4:ac:37:c5:d6:18:
80:79:bd:f8:c7:70:4d:5e:89:e5:c4:8f:17:15:61:
93:fa:b2:ee:db:8a:1f:af:a7:b4:32:4c:a9:03:6d:
83:04:de:7c:e3:9b:fd:3e:5c:65:b9:a3:67:c4:c0:
a9:74:ed:f2:7c:89:7e:a0:20:57:6d:ee:fc:be:05:
b2:1b:95:43:58:a6:0a:f7:a3:af:52:3c:7d:88:6e:
b4:dd:2d:d2:e5:b7:f3:77:70:f5:47:9c:f5:f5:4d:
6c:5f:d9:73:d0:51:4c:39:33:92:87:e6:52:7e:55:
83:e7:2e:74:c7:f6:fd:d0:29:7c:34:00:d9:32:53:
80:4c:08:fd:16:ad:5a:c7:50:88:3b:4e:f2:7f:a4:
90:7a:ee:cd:67:72:cd:ff:d1:4c:5c:36:fc:e7:73:
7b:19:ee:bd:4e:83:24:c1:5a:ef:79:7c:98:9a:69:
c3:aa:4c:a8:bc:38:a0:42:d4:e0:32:90:bf:4d:1a:
91:b3:db:9f:5a:c0:b3:1b:21:92:ac:58:3a:6f:fc:
9c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4B:D5:C7:04:AF:11:B5:FB:0E:BC:3E:6C:44:39:F0:97:3F:7D:9B
X509v3 Authority Key Identifier:
keyid:DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:30:41:64:53:67:f2:ba:70:3d:93:72:67:10:5c:dc:54:f5:
8f:d4:8c:2b:01:b7:ec:2c:e1:40:33:3a:90:48:bb:ef:cc:28:
c1:e5:5e:37:d8:52:fe:68:58:1a:2b:6b:5e:e0:b6:f2:2c:f2:
73:a1:54:0b:ad:32:35:f1:bf:16:b2:d2:46:84:3a:0b:f9:6a:
a9:36:fc:ad:2e:8d:99:62:d1:a4:d9:30:78:ab:32:cd:bd:56:
d8:83:4f:ba:89:ff:dd:1c:2b:91:c0:b3:12:19:98:9f:a3:44:
eb:99:26:26:30:d7:2c:92:96:60:fc:8e:b4:09:88:22:2f:75:
bf:a6:99:31:c6:1d:5d:e6:fa:db:af:db:68:36:4f:a8:87:8c:
42:35:2a:5d:7a:dd:62:8b:e8:5d:9e:e1:e4:0c:6b:0a:56:45:
50:fc:f7:9a:f9:a4:20:6b:f6:c9:13:43:6d:5d:d1:0c:c2:bc:
8d:83:73:ab:f0:15:ed:b9:c7:31:22:6a:7d:06:da:fe:15:61:
ce:93:f5:bc:29:3f:e8:fc:51:44:44:be:0d:e4:e2:0a:b0:05:
95:74:a5:54:20:3f:30:f5:62:7a:1b:8e:76:db:53:ce:0d:fc:
16:e7:65:a1:1f:3a:0e:19:9b:c7:9a:af:bc:ca:27:28:79:43:
b3:80:54:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:08:54 2026 by rpki-client