Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
File: dE3LcujLR4z8SyWusfA7QGJmN1w.mft (raw, json)
Hash identifier: oNin4CgO5YJBw3/XO7o7f6T85dLNHNm047QBlJKAIhQ=
Subject key identifier: 33:96:BA:F9:55:F6:9D:6B:CA:5D:AD:4C:CB:86:51:65:26:C7:7C:49
Authority key identifier: 74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
Certificate issuer: /CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Certificate serial: 01A08E69B462FE2A688F4C94928FB7A764EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
Manifest number: 0E97
Signing time: Fri 11 Sep 2026 03:01:27 +0000
Manifest this update: Fri 11 Sep 2026 03:01:27 +0000
Manifest next update: Sat 12 Sep 2026 03:01:27 +0000
Files and hashes: 1: dE3LcujLR4z8SyWusfA7QGJmN1w.crl (hash: PGJ3j9X62UYLOqJZmnCM/dAE0uy+U+qNhwi7ESleExA=)
2: tCljQdoQCYAGdZbsiUMFE-XsaJE.roa (hash: 00v6c7Mm0TodzD2o33hMR8x5qaiYr+lOoZwclNiSZ/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:69:b4:62:fe:2a:68:8f:4c:94:92:8f:b7:a7:64:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Validity
Not Before: Sep 11 03:01:27 2026 GMT
Not After : Sep 12 03:01:27 2026 GMT
Subject: CN=3396baf955f69d6bca5dad4ccb86516526c77c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:66:3e:cf:fc:68:dc:f6:1a:e5:51:fc:fb:f2:
dd:ea:ed:66:eb:5a:d1:b0:d1:fa:16:3a:08:34:d8:
09:78:ae:0a:fe:36:df:58:15:b4:8f:79:ef:d1:7d:
bb:de:3b:76:7f:b1:05:d6:ae:eb:24:1e:98:69:79:
29:7c:fe:b1:60:64:09:4d:c3:ca:36:82:ec:27:32:
cb:f5:09:3e:93:53:08:0e:4e:b6:53:5f:64:79:4d:
e6:12:9a:e8:f4:87:3e:92:26:8c:63:ed:59:c0:72:
5c:6a:28:01:78:59:0e:9f:4c:2c:e6:84:73:14:a5:
02:49:4b:8d:06:b3:ae:6e:a6:29:6d:77:01:c4:38:
b8:79:50:0e:9c:0b:09:35:4e:e6:9a:4a:c3:b7:0f:
da:e3:71:f1:8a:11:6c:6f:df:4e:83:22:0a:87:fd:
86:10:9a:7c:f4:4d:87:fe:55:9a:d8:06:68:36:64:
43:94:90:58:18:42:25:fe:d8:df:1c:10:34:32:35:
b4:3f:17:da:81:4e:0e:4c:1f:e0:76:4e:43:ca:16:
11:07:9a:5f:5c:21:2a:dd:7d:71:d0:ec:82:13:0d:
53:66:f4:09:62:a5:70:5f:5c:53:c4:ae:b1:81:55:
23:35:7a:08:50:da:24:d0:d8:fa:0f:c9:ac:6f:30:
74:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:96:BA:F9:55:F6:9D:6B:CA:5D:AD:4C:CB:86:51:65:26:C7:7C:49
X509v3 Authority Key Identifier:
keyid:74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:9a:3b:8a:72:93:40:f0:4f:d3:15:e7:08:11:54:11:55:26:
34:8b:8d:95:a5:bf:92:44:f6:7c:0e:59:92:2c:1a:06:a4:15:
ac:23:e3:63:ec:32:60:3b:51:51:88:89:d5:b0:87:9b:e2:5f:
9c:e5:2b:5d:84:1b:a7:b1:56:02:8f:5f:1f:f8:a0:98:99:28:
86:a9:c5:1f:99:29:c6:27:94:d7:9d:af:e1:73:61:41:c0:4e:
f7:df:88:53:fa:c6:26:60:3d:68:10:02:d7:89:ef:63:52:b6:
56:98:b0:27:5f:dc:7b:47:fe:aa:81:00:1e:71:d4:93:e5:ba:
f8:0f:53:88:a0:a5:84:de:0f:ea:f3:51:c2:69:06:5d:4b:1d:
71:3d:28:7a:cb:f8:6b:ca:33:a5:d9:3f:9b:2b:ef:3c:aa:b0:
aa:20:b0:2f:62:1b:2b:99:08:c4:cb:ee:90:7d:ff:75:fb:17:
a6:0e:56:ae:94:ea:6e:07:9b:90:0f:cd:22:da:6f:99:15:a1:
60:a1:13:f8:be:76:fa:89:8f:02:65:5d:c5:09:a9:9c:cd:39:
d4:19:85:fe:df:56:46:4e:03:fc:7a:2e:29:39:99:48:52:86:
24:49:b3:23:92:6e:16:f9:b6:67:7d:c2:ae:f6:76:77:f4:9e:
c2:ba:68:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 07:36:56 2026 by rpki-client