Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/3oBYgxYFqoam1rbjw7KwFtr73KY.mft
File: 3oBYgxYFqoam1rbjw7KwFtr73KY.mft (raw, json)
Hash identifier: VVbzrWZrEHRzQlbURodWdEUwEDww3Wuxn3OdiyubfFc=
Subject key identifier: DA:BA:16:62:7F:83:5A:50:E4:49:DE:71:ED:1D:25:E0:5A:D3:0D:DF
Authority key identifier: DE:80:58:83:16:05:AA:86:A6:D6:B6:E3:C3:B2:B0:16:DA:FB:DC:A6
Certificate issuer: /CN=de8058831605aa86a6d6b6e3c3b2b016dafbdca6
Certificate serial: 01A03F3B162A2B2128FC9FCF4E2E71D641C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3oBYgxYFqoam1rbjw7KwFtr73KY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/3oBYgxYFqoam1rbjw7KwFtr73KY.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 18:00:31 +0000
Manifest this update: Wed 26 Aug 2026 18:00:31 +0000
Manifest next update: Thu 27 Aug 2026 18:00:31 +0000
Files and hashes: 1: 3oBYgxYFqoam1rbjw7KwFtr73KY.crl (hash: tg+8FipiI/JYJ3qQ1yudQ2Vq/u/rrhPYATcuWcsr93E=)
2: CMby5TZcz8wJssXc79aUUhtBUYI.roa (hash: TvV4JGUUPT6lyV1Vum9UKRCqV75Oi8Ug7Yz/kSOewW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/3oBYgxYFqoam1rbjw7KwFtr73KY.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/3oBYgxYFqoam1rbjw7KwFtr73KY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3oBYgxYFqoam1rbjw7KwFtr73KY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 18:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:3b:16:2a:2b:21:28:fc:9f:cf:4e:2e:71:d6:41:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8058831605aa86a6d6b6e3c3b2b016dafbdca6
Validity
Not Before: Aug 26 18:00:31 2026 GMT
Not After : Aug 27 18:00:31 2026 GMT
Subject: CN=daba16627f835a50e449de71ed1d25e05ad30ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:92:1b:ca:7f:99:af:57:11:ac:62:ee:4f:de:
d5:d5:33:a7:54:d8:e2:59:f6:aa:8a:b2:d0:41:46:
ce:c8:fa:41:99:d3:ba:bd:b8:3b:10:e9:4d:3c:a1:
6e:33:e0:46:ca:d0:ac:25:24:d9:73:76:d3:69:fb:
08:17:64:76:6f:8e:75:09:50:a2:c3:ea:66:88:b7:
f7:1d:6b:55:63:c8:77:86:6b:af:d2:12:36:e0:e8:
0a:eb:0e:3d:31:72:91:57:dd:c1:35:4e:18:18:db:
d9:d3:3d:30:3b:d5:4c:ae:37:80:41:d6:11:9a:69:
7a:23:b2:23:e3:98:13:ff:32:7e:88:4c:3c:ec:99:
9d:eb:83:b1:b0:d2:2f:8d:a6:03:8d:9c:7f:e4:9d:
2a:a9:af:0f:5b:21:74:8a:11:39:f3:cf:94:e3:6b:
de:cf:a3:65:28:0b:4c:30:5b:4d:ce:87:42:b6:2c:
8e:4d:64:fc:9c:7e:d7:77:f1:49:8f:0b:00:b9:84:
86:99:57:a8:0f:fa:ff:81:f7:a3:1c:b1:f3:ec:9a:
7a:4c:6d:8c:14:b5:1d:92:00:aa:cb:3f:a8:f2:1f:
8f:16:a7:1e:fc:3d:2a:5c:d4:15:ed:72:66:37:12:
7e:20:24:ef:28:c7:37:c1:71:6e:52:58:a4:05:07:
10:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BA:16:62:7F:83:5A:50:E4:49:DE:71:ED:1D:25:E0:5A:D3:0D:DF
X509v3 Authority Key Identifier:
keyid:DE:80:58:83:16:05:AA:86:A6:D6:B6:E3:C3:B2:B0:16:DA:FB:DC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3oBYgxYFqoam1rbjw7KwFtr73KY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/3oBYgxYFqoam1rbjw7KwFtr73KY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/3oBYgxYFqoam1rbjw7KwFtr73KY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:95:06:53:3d:e0:c3:aa:a8:a0:62:f4:aa:10:60:b0:77:0e:
86:79:f8:44:4a:a4:e1:9f:a7:09:b3:b8:da:69:7e:bc:87:26:
12:7f:7b:e8:58:ab:6a:f1:38:6e:68:4c:e4:1d:03:a1:78:46:
06:ab:fb:46:5a:ae:71:71:6d:e7:6f:b1:6e:97:92:89:ab:f0:
3d:8a:04:a8:5f:d7:fb:eb:00:97:f7:df:af:68:a5:f2:5d:a5:
a7:db:ab:c7:33:f9:17:2a:10:77:a3:cb:cf:16:ce:6c:da:db:
39:73:d8:6e:7e:a5:97:8b:51:33:97:a0:19:cb:bb:f2:25:f0:
27:b1:9f:a0:01:1f:8c:44:27:08:5c:c2:f7:20:11:3c:59:3a:
70:b1:bc:ad:10:f1:4e:f3:8e:52:e5:33:92:48:e6:49:42:75:
da:38:b4:ac:39:39:c3:d9:81:45:26:5b:34:4a:db:28:23:fa:
ba:61:ed:2c:aa:5d:e7:ba:a8:44:0c:7c:fa:54:39:1a:79:3d:
fc:19:f7:3c:d6:f2:56:9a:16:da:19:bc:42:04:5a:12:88:51:
56:93:ea:e7:e6:65:92:d1:a2:c8:17:c5:d7:a5:bd:41:0d:20:
7f:1d:bb:f1:eb:60:29:b2:f1:44:20:47:b4:c3:36:a9:74:a3:
90:ed:29:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:49:35 2026 by rpki-client