Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
File: 3xRM6OjkQV5chqCygEmaOFwU7_I.mft (raw, json)
Hash identifier: VRv7DecZlCW7LsIjCIVUlS4Llw0ds2EEaQNvSOqhC1M=
Subject key identifier: 80:6E:2D:A6:BD:83:B4:D0:2E:BD:C8:A7:75:54:48:D0:52:2E:D6:92
Authority key identifier: DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
Certificate issuer: /CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Certificate serial: 01A00093EF502A9C07711D64B6161027768A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
Manifest number: 1078
Signing time: Fri 14 Aug 2026 14:01:30 +0000
Manifest this update: Fri 14 Aug 2026 14:01:30 +0000
Manifest next update: Sat 15 Aug 2026 14:01:30 +0000
Files and hashes: 1: 3xRM6OjkQV5chqCygEmaOFwU7_I.crl (hash: OBKVatXAHZA2lu0NQUreM7/3M8zxc7zSX4tlTComlWo=)
2: IFcPSJLrXOIb360qpvfjslM8AeU.asa (hash: Uoj3vnQ4WI4zOKZ/VBdpJT4g8J+jbJ0SehrMNsQWEOg=)
3: mN6LPum92-oppYTfVnse9pFdGGY.roa (hash: Az1RSnzhomoH0PRWVFUSJEmI0WtwP1548LAxILCV7N4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:ef:50:2a:9c:07:71:1d:64:b6:16:10:27:76:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Validity
Not Before: Aug 14 14:01:30 2026 GMT
Not After : Aug 15 14:01:30 2026 GMT
Subject: CN=806e2da6bd83b4d02ebdc8a7755448d0522ed692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:86:9f:68:c8:60:64:a4:97:73:10:cf:5f:97:
bf:70:47:32:c2:f8:a5:4d:e7:6e:d8:d1:b2:32:a9:
ec:33:4a:aa:8d:81:44:18:84:0b:3e:90:4d:a9:fb:
18:4e:63:b2:ad:e7:b1:c6:82:70:a7:28:32:30:ba:
02:d7:7f:93:73:5c:e5:dc:fa:b1:56:87:99:f8:0c:
31:cd:6e:1d:17:20:ec:65:83:0e:bc:68:6e:48:7d:
d6:ad:f2:7d:5d:2d:e8:dd:5e:ed:51:19:9b:d4:13:
03:5e:e6:e5:7c:14:e8:d9:75:42:77:20:e4:a3:ed:
50:94:8f:26:05:3f:d9:be:35:0d:42:0b:a8:4e:e9:
80:03:e6:0e:1f:66:7d:65:55:db:b0:01:1d:fc:95:
68:81:52:4d:a8:48:5b:63:96:17:7a:72:a4:5e:54:
b6:e2:d3:53:12:5e:c1:d8:21:c5:b5:fb:09:55:7c:
af:24:ea:0c:38:c3:1c:b5:60:b6:8c:3e:b2:a7:87:
25:88:c3:bb:f9:90:a1:34:9a:8b:3c:bc:1e:51:69:
15:4d:b3:10:ee:f7:92:b6:2a:44:2f:4b:6b:e4:d4:
b7:46:7a:cb:c0:d0:01:06:42:41:0a:85:f7:00:45:
06:5c:1a:fd:91:4e:17:dc:99:a4:08:e7:96:87:1c:
29:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6E:2D:A6:BD:83:B4:D0:2E:BD:C8:A7:75:54:48:D0:52:2E:D6:92
X509v3 Authority Key Identifier:
keyid:DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:07:a7:ea:b4:9e:99:d7:34:ef:15:83:5f:cf:6e:8b:04:0d:
a8:35:86:51:75:3a:1c:75:4d:86:da:7a:1f:07:e0:63:84:21:
e3:c3:d2:3b:9a:74:62:78:74:41:bc:05:0e:8d:34:1e:e4:18:
3b:9c:4f:29:0a:95:fc:32:06:bc:4d:db:11:bc:27:54:cf:0f:
10:85:3f:c0:4d:e1:05:9c:02:3e:c2:ae:9e:47:34:95:1b:4a:
8f:54:b0:bf:69:94:ee:12:a6:c5:29:b5:59:b3:79:9d:9e:7b:
64:7b:8c:96:0b:ad:fa:77:55:26:cc:c3:03:16:08:5a:c1:6b:
d5:b9:e1:e6:cb:0e:1d:d6:b6:29:1c:4c:e2:0a:b8:63:e7:df:
00:2a:5d:ee:3f:7f:4b:d3:fd:74:ad:2d:56:56:e5:af:82:ac:
80:d5:fc:f0:a6:6a:ba:3f:8f:2c:09:3c:74:4f:3b:0e:66:16:
53:29:21:f3:d6:aa:6c:8e:96:eb:ef:5c:07:f4:0d:44:28:a9:
6a:18:ea:ce:57:8a:15:84:61:24:62:36:78:0c:81:c4:d3:ff:
cf:4a:f3:ae:31:a8:d9:21:5a:74:0d:68:49:be:83:df:b5:ab:
de:8b:e7:f4:9f:d4:83:99:ac:25:fb:80:81:17:2a:76:82:ee:
47:63:43:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:26 2026 by rpki-client