Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
File: 3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft (raw, json)
Hash identifier: DMYJTCmV5srXLpQ0+467m5dOaJ0qbzpj67YZC3nQkCc=
Subject key identifier: D3:02:83:63:4A:9A:9F:0A:2E:6E:EA:1E:2F:F5:F6:1A:7D:55:47:B9
Authority key identifier: DE:80:4C:9C:8A:43:39:7D:16:77:9A:A9:34:F7:06:73:88:FC:7D:7C
Certificate issuer: /CN=de804c9c8a43397d16779aa934f7067388fc7d7c
Certificate serial: 01A000CA3C71F2F3DB5BF9CCA3245BE67DCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 15:00:48 +0000
Manifest this update: Fri 14 Aug 2026 15:00:48 +0000
Manifest next update: Sat 15 Aug 2026 15:00:48 +0000
Files and hashes: 1: 3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl (hash: kGswpPFvc5tKgh6468frZB7L3+fXViUW2ffrvqkb/Vs=)
2: Db0vWV10PDdNvJlPrQIc334_tN8.roa (hash: c9vHRsLZpkXkOA11QWT95eyXoTQe6iY901YAkf3L6Io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:3c:71:f2:f3:db:5b:f9:cc:a3:24:5b:e6:7d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de804c9c8a43397d16779aa934f7067388fc7d7c
Validity
Not Before: Aug 14 15:00:48 2026 GMT
Not After : Aug 15 15:00:48 2026 GMT
Subject: CN=d30283634a9a9f0a2e6eea1e2ff5f61a7d5547b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:aa:ab:fa:4c:02:34:04:58:37:c0:18:b6:cb:
f4:15:98:0d:4b:05:51:27:33:89:29:d6:cb:1f:ab:
6e:da:ad:09:62:d6:39:70:5e:04:26:87:8f:23:08:
fe:30:be:ea:8d:b7:ea:35:f5:ef:c2:a0:72:84:39:
9b:13:54:bf:f7:46:27:bd:13:c9:a9:26:5e:e4:43:
fc:07:4b:3d:cd:77:4f:a5:cf:31:08:5c:52:6e:f0:
9a:cb:16:dd:09:08:e6:d4:ac:88:31:73:32:2b:a0:
4a:bc:23:74:52:51:39:d8:be:6a:99:28:16:6f:e2:
a5:e1:54:69:4f:5f:39:c7:af:45:fa:bd:8b:45:6d:
82:8e:94:34:2e:60:6c:19:0c:ae:0e:0f:42:f3:8e:
b4:0b:b6:6e:1b:16:15:c5:cc:fa:8b:05:b0:2c:4a:
d5:77:f4:78:b2:6d:46:ce:25:b2:37:54:b1:92:76:
4b:f5:73:6d:76:06:b2:13:9a:df:ae:3c:99:df:3c:
cb:ff:95:3c:ff:f6:ca:db:4e:a3:26:4f:4a:50:56:
2b:50:d0:d6:4c:55:a6:9f:42:6d:87:72:6a:df:b6:
dd:9c:f9:c4:14:e9:61:5a:bd:72:6f:18:ee:9d:66:
16:bc:08:eb:d4:2e:78:2b:f5:a1:77:6a:36:6b:33:
54:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:02:83:63:4A:9A:9F:0A:2E:6E:EA:1E:2F:F5:F6:1A:7D:55:47:B9
X509v3 Authority Key Identifier:
keyid:DE:80:4C:9C:8A:43:39:7D:16:77:9A:A9:34:F7:06:73:88:FC:7D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:f9:65:5a:34:72:eb:24:e4:84:d1:11:cf:96:bc:86:f1:2d:
6a:7c:b8:fb:8b:13:2f:55:a3:c9:05:8b:b6:32:f2:c9:56:29:
fb:96:05:82:5a:06:c3:20:fb:f9:40:fa:9a:51:97:ad:d7:33:
11:db:88:c1:08:86:84:19:dc:98:6d:dd:ee:ce:44:d7:56:31:
ff:ac:07:db:96:fb:ad:53:49:39:24:2a:83:22:2c:b0:3e:cd:
62:3a:88:2c:ed:49:8e:52:36:c6:0f:fd:c5:38:24:f7:39:b6:
f4:27:55:5a:52:a9:84:b0:51:06:d7:47:8b:17:98:47:35:05:
49:0a:03:4f:04:f1:9a:f9:9c:9c:54:d1:d7:97:a6:eb:95:24:
e6:2b:3b:b1:ed:4c:7b:4c:05:66:70:05:10:10:c0:7d:b7:01:
57:a4:58:59:66:87:c6:dc:c3:59:4d:c1:3a:c1:76:96:08:8d:
39:55:96:4f:c0:0c:ff:03:a1:a8:09:9b:a6:31:d4:cf:6e:14:
ac:e9:22:56:ef:75:52:64:a3:63:0f:5b:72:63:84:f2:06:38:
56:5c:23:15:9f:13:b7:af:23:20:66:0c:aa:b0:82:96:ea:fb:
7d:3b:f8:af:f7:8c:40:04:12:b1:d6:eb:fd:4f:bf:d9:ce:0e:
48:cb:0a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:29:18 2026 by rpki-client