Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/7c4576-a351-4db6-b011-32d63fa0c194/1/3ueu33-VVRRkHDoY-U_ZR4T3DOs.mft
File: 3ueu33-VVRRkHDoY-U_ZR4T3DOs.mft (raw, json)
Hash identifier: 1P3spzHkbohkv/FvyxIvfBUdicth+yyg7/w/GJwvATI=
Subject key identifier: E2:75:BF:D9:A5:D8:F2:07:AA:0F:25:DA:84:55:75:FD:80:70:15:81
Authority key identifier: DE:E7:AE:DF:7F:95:55:14:64:1C:3A:18:F9:4F:D9:47:84:F7:0C:EB
Certificate issuer: /CN=dee7aedf7f955514641c3a18f94fd94784f70ceb
Certificate serial: 01A0B8404040685DBC26C2E37F244EB680BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ueu33-VVRRkHDoY-U_ZR4T3DOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/7c4576-a351-4db6-b011-32d63fa0c194/1/3ueu33-VVRRkHDoY-U_ZR4T3DOs.mft
Manifest number: A7
Signing time: Sat 19 Sep 2026 06:00:13 +0000
Manifest this update: Sat 19 Sep 2026 06:00:13 +0000
Manifest next update: Sun 20 Sep 2026 06:00:13 +0000
Files and hashes: 1: 3ueu33-VVRRkHDoY-U_ZR4T3DOs.crl (hash: TL1cxVbye7WWE5g9h9VlvwtANKQbZUb9boVu+AdW2Rw=)
2: YSaufGYoBysG3Rq1JUwdvPVJmZs.roa (hash: 2pr9ejGkAE15sKcxVgGTcGKhYKEWqsjrG3vEI1IlltQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/7c4576-a351-4db6-b011-32d63fa0c194/1/3ueu33-VVRRkHDoY-U_ZR4T3DOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/7c4576-a351-4db6-b011-32d63fa0c194/1/3ueu33-VVRRkHDoY-U_ZR4T3DOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ueu33-VVRRkHDoY-U_ZR4T3DOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b8:40:40:40:68:5d:bc:26:c2:e3:7f:24:4e:b6:80:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee7aedf7f955514641c3a18f94fd94784f70ceb
Validity
Not Before: Sep 19 06:00:13 2026 GMT
Not After : Sep 20 06:00:13 2026 GMT
Subject: CN=e275bfd9a5d8f207aa0f25da845575fd80701581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:30:a7:d2:73:ec:1d:ee:0c:9f:52:12:23:02:
3b:83:10:cb:83:09:0e:3d:9f:7b:ca:20:e4:8f:9d:
40:bd:4e:e7:ed:b3:6e:93:5b:b5:80:a7:3c:d9:0b:
2b:4c:d1:b8:38:19:09:63:21:23:0b:c9:ef:ce:f9:
7f:75:d5:26:b3:dd:0a:1d:74:bf:e6:6c:5e:d8:b4:
a4:f7:84:51:f2:8a:92:0e:f2:12:64:d5:11:8e:a8:
5c:ba:a1:35:aa:4f:bb:f4:d1:27:69:59:4a:42:63:
91:db:70:cb:77:93:af:7f:a6:f2:92:92:ae:47:e5:
b4:31:f8:d5:61:79:e9:f4:52:9a:f3:6d:31:b7:bb:
3f:98:78:d6:31:e4:ae:ae:19:47:d6:5c:fe:82:e4:
ee:2e:3d:96:bf:dd:6f:b8:9e:cc:77:f6:ac:9b:39:
12:4c:f9:e9:04:ff:6b:a2:a2:9c:bf:8e:6d:33:bc:
1a:45:4b:5a:36:7a:ab:f8:e2:26:47:1a:3d:61:6d:
92:74:03:31:c3:ee:dd:06:0d:d9:1e:4d:75:14:da:
a2:fd:37:03:f1:95:a0:37:0f:4c:a7:1e:55:b7:d9:
6a:73:61:1e:22:95:7a:e7:42:9e:f9:d2:8a:46:5d:
3e:b4:ed:3e:1f:c6:af:3c:6b:13:37:c7:58:4a:b5:
db:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:75:BF:D9:A5:D8:F2:07:AA:0F:25:DA:84:55:75:FD:80:70:15:81
X509v3 Authority Key Identifier:
keyid:DE:E7:AE:DF:7F:95:55:14:64:1C:3A:18:F9:4F:D9:47:84:F7:0C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ueu33-VVRRkHDoY-U_ZR4T3DOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/7c4576-a351-4db6-b011-32d63fa0c194/1/3ueu33-VVRRkHDoY-U_ZR4T3DOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/7c4576-a351-4db6-b011-32d63fa0c194/1/3ueu33-VVRRkHDoY-U_ZR4T3DOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:f4:f5:8c:54:c9:36:31:82:5f:10:87:47:3d:72:17:39:c1:
26:6b:b6:d4:dc:3d:e5:17:73:70:d1:7f:f8:bf:54:8e:6c:67:
c4:e1:1e:25:b2:37:6c:bd:c6:90:45:f9:6a:88:90:15:e8:bb:
43:d7:d8:df:eb:bc:4f:bb:45:d1:73:79:2a:32:f2:48:af:bb:
4b:2a:57:b7:d9:f7:7e:3f:c7:9a:c7:13:6e:66:e3:21:10:97:
0c:4d:97:70:11:4f:74:b3:d7:aa:64:1d:e2:f4:a9:f9:3a:76:
a4:a5:b1:ce:57:b1:bc:2b:0d:05:07:87:43:dc:ce:d7:30:e7:
c6:59:bd:ec:24:33:2e:47:c6:74:39:51:21:78:b2:8b:e5:a7:
53:fd:4d:d0:36:3b:7e:91:39:50:4e:41:47:a9:53:02:df:0f:
23:dc:1c:c2:10:b3:09:cc:72:4d:c7:db:f5:c4:e7:5f:3f:64:
a2:5d:07:82:af:ea:4f:73:cf:33:4f:c3:46:97:2c:d8:d8:ff:
62:0e:94:8c:28:dd:38:38:ea:01:75:2e:b9:3a:17:4e:23:fa:
d9:e7:22:d2:1e:42:a1:1f:03:bf:e4:cc:59:77:c6:9e:f5:51:
a3:88:58:02:bf:1f:3d:ac:60:fb:d5:81:95:66:df:2d:5e:a0:
60:50:0e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 09:43:47 2026 by rpki-client