Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/8d4107-3c59-44d4-816f-3a4e8b9da5be/1/3f20crHtWewvNw8g-rSHlDnFMY8.mft
File: 3f20crHtWewvNw8g-rSHlDnFMY8.mft (raw, json)
Hash identifier: BCXOAxZnbzr6v0fHyd2brnoCQwIES9zQOAYgxYpoW9A=
Subject key identifier: 0A:8A:4D:48:74:AA:F6:58:46:86:29:D4:F2:27:D1:AC:17:A3:9E:FD
Authority key identifier: DD:FD:B4:72:B1:ED:59:EC:2F:37:0F:20:FA:B4:87:94:39:C5:31:8F
Certificate issuer: /CN=ddfdb472b1ed59ec2f370f20fab4879439c5318f
Certificate serial: 01A0CFA3D0E8EAD3E7CF570D7802899062D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3f20crHtWewvNw8g-rSHlDnFMY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/8d4107-3c59-44d4-816f-3a4e8b9da5be/1/3f20crHtWewvNw8g-rSHlDnFMY8.mft
Manifest number: 0283
Signing time: Wed 23 Sep 2026 19:00:14 +0000
Manifest this update: Wed 23 Sep 2026 19:00:14 +0000
Manifest next update: Thu 24 Sep 2026 19:00:14 +0000
Files and hashes: 1: 3f20crHtWewvNw8g-rSHlDnFMY8.crl (hash: Wwiov4ShhwAiABmUh7/9nzlGMdsYmNe02e8TWs34n0c=)
2: ZMQkud9K3mvXdpjh-yoqav-Fm2A.roa (hash: rezLl6nocyRRaT4FpZnJ5CHwHhiv5ot72qwHgOZEFQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/8d4107-3c59-44d4-816f-3a4e8b9da5be/1/3f20crHtWewvNw8g-rSHlDnFMY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/8d4107-3c59-44d4-816f-3a4e8b9da5be/1/3f20crHtWewvNw8g-rSHlDnFMY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3f20crHtWewvNw8g-rSHlDnFMY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a3:d0:e8:ea:d3:e7:cf:57:0d:78:02:89:90:62:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfdb472b1ed59ec2f370f20fab4879439c5318f
Validity
Not Before: Sep 23 19:00:14 2026 GMT
Not After : Sep 24 19:00:14 2026 GMT
Subject: CN=0a8a4d4874aaf658468629d4f227d1ac17a39efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:13:9e:30:33:75:a7:2e:b0:0a:6e:d9:05:8f:
95:59:64:23:24:d8:fd:70:56:eb:f6:4d:88:b6:4b:
e0:e0:aa:bf:c5:2b:c6:50:88:fd:b0:c3:69:36:9f:
07:3c:c5:bc:37:9a:74:55:8a:e9:6c:56:af:5a:16:
fc:eb:b4:10:b5:70:b8:3c:a5:a2:d5:20:fe:aa:26:
58:c6:29:d0:a6:bc:8d:63:dd:bc:f9:d0:3c:4d:39:
15:20:13:bc:9e:b0:24:f7:b4:14:18:30:4c:e2:3b:
1c:9f:d7:d7:32:ed:25:f7:2a:2b:0d:76:e6:0a:65:
78:b3:07:5a:ca:9d:a3:5c:aa:04:bb:ef:f6:37:81:
48:67:89:90:21:a2:02:0e:80:4a:de:b8:3a:f5:17:
79:5e:57:ac:d2:b1:9f:c3:7e:41:f5:77:e2:eb:c2:
98:36:0d:52:c3:32:0c:da:84:77:5c:1b:e6:a5:25:
72:e7:29:22:62:6c:0d:68:a4:86:d3:5e:89:67:01:
c2:72:4c:99:e1:d3:32:f6:05:31:47:46:60:bd:a0:
c1:3b:03:eb:0d:9a:d6:c3:85:04:76:a1:48:85:77:
ce:80:ef:b0:b7:14:fa:3f:64:36:a2:32:84:8b:43:
c5:3c:ce:36:77:4f:01:18:4a:94:f3:70:cb:f5:44:
6e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8A:4D:48:74:AA:F6:58:46:86:29:D4:F2:27:D1:AC:17:A3:9E:FD
X509v3 Authority Key Identifier:
keyid:DD:FD:B4:72:B1:ED:59:EC:2F:37:0F:20:FA:B4:87:94:39:C5:31:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f20crHtWewvNw8g-rSHlDnFMY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8d4107-3c59-44d4-816f-3a4e8b9da5be/1/3f20crHtWewvNw8g-rSHlDnFMY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8d4107-3c59-44d4-816f-3a4e8b9da5be/1/3f20crHtWewvNw8g-rSHlDnFMY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:54:f4:09:5e:c7:bb:15:22:26:b0:fe:58:af:25:9c:56:34:
e2:a9:42:9d:08:3d:47:aa:75:6b:b6:88:36:eb:9f:e6:00:d5:
04:67:0a:7c:87:7c:b8:ee:ef:a1:de:d2:23:6d:68:1f:1c:91:
f3:2e:87:4f:0b:6d:80:ca:03:f5:89:66:b9:1e:d9:86:99:1c:
7c:fa:c0:5e:76:2a:ba:39:28:ef:3b:1a:74:97:40:b7:4f:76:
7d:cf:7a:66:96:45:dc:6a:ef:f7:b6:19:2f:39:5c:05:d8:21:
99:41:1b:3d:d5:3f:93:26:c8:3c:4b:52:41:d5:cd:26:c9:2a:
21:b4:95:a7:49:c0:4f:5f:09:25:bd:6d:7d:b3:08:35:14:0a:
15:99:f1:94:06:cf:1e:64:80:bd:43:1b:b4:a3:50:75:6c:ac:
2b:aa:96:ba:18:5d:d1:a4:db:b2:89:92:43:15:c7:9c:f4:2f:
1f:97:c8:f8:63:58:19:2c:78:0c:20:69:cc:55:ea:c0:d6:09:
5f:ef:ca:9c:72:b4:79:6b:65:5a:2d:09:ed:16:0c:51:98:3f:
60:14:8e:cc:22:c8:e6:e6:3b:d7:09:61:6d:d3:24:1d:2a:1a:
8a:16:3f:c8:9d:46:00:8e:87:dd:d7:0c:75:1d:1a:e5:51:a9:
53:f8:bf:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:26:56 2026 by rpki-client