Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
File: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft (raw, json)
Hash identifier: nR3tKtkllEuqXkFvC2hycVrxBXtklS/NOWhDD+wEo6M=
Subject key identifier: F6:D8:2A:2D:E9:75:53:9A:9B:3F:9B:AB:E9:CA:34:8C:69:5E:C3:18
Authority key identifier: DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
Certificate issuer: /CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Certificate serial: 019E30A917686BEC523B77B719E210B9AB40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
Manifest number: 0A09
Signing time: Sat 16 May 2026 12:00:48 +0000
Manifest this update: Sat 16 May 2026 12:00:48 +0000
Manifest next update: Sun 17 May 2026 12:00:48 +0000
Files and hashes: 1: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl (hash: c0SNtG//DYgk1tCKwD6p8/7eaZgBMv3wUJu4/6tuuXE=)
2: d1jP90vciiSKp3aodWDKGnu38Bk.roa (hash: nxrJlRcagS8YYk40MdJDJveIMr4yj0rHLHg2nPrUsoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:17:68:6b:ec:52:3b:77:b7:19:e2:10:b9:ab:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Validity
Not Before: May 16 12:00:48 2026 GMT
Not After : May 17 12:00:48 2026 GMT
Subject: CN=f6d82a2de975539a9b3f9babe9ca348c695ec318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e1:c4:42:a6:c3:f0:95:10:9b:1c:aa:5c:78:
ce:01:a8:87:ce:a5:22:74:21:87:b7:dc:09:46:4a:
a8:a0:90:0c:e9:24:01:69:57:29:4a:10:ec:43:82:
28:46:d1:11:8e:1e:d6:49:3e:fd:ce:45:1f:85:b0:
97:62:19:69:72:0b:9a:7e:b0:f0:97:03:5c:69:21:
dd:95:37:9b:a5:b2:72:09:5c:f7:08:55:38:d3:86:
f4:03:b8:24:5c:68:1f:47:b5:ec:e5:da:df:2b:a7:
51:7d:ce:1f:89:1a:6f:bf:33:ec:8c:48:87:be:d6:
94:4a:4e:83:83:7e:e6:19:ab:ae:b0:00:9d:2f:fd:
46:cb:09:bb:44:ed:5b:4f:87:37:33:2d:71:90:3f:
34:9e:1d:d7:0b:e8:dd:d3:81:10:07:d7:b6:3e:92:
cf:e7:45:ea:93:c4:43:78:ce:a8:ca:46:16:fb:b1:
95:30:fe:95:bf:6b:2e:e7:c4:e8:28:fe:4c:53:c5:
60:ca:f7:64:e8:34:c0:44:6d:3f:6a:f9:fc:01:68:
2b:fb:08:3d:bc:97:eb:97:71:c4:cb:f2:82:75:53:
57:73:5f:8e:b1:62:fe:b3:f7:ea:99:e1:3a:45:dc:
9c:8b:b2:74:0c:a0:32:a8:73:b0:da:39:7d:72:dd:
50:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D8:2A:2D:E9:75:53:9A:9B:3F:9B:AB:E9:CA:34:8C:69:5E:C3:18
X509v3 Authority Key Identifier:
keyid:DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:81:0d:fb:38:a7:d1:59:dd:1b:5d:f2:2c:2d:ea:7d:d5:c5:
59:95:5c:7d:5b:44:7a:e9:82:b7:9f:71:7e:45:22:fc:27:fe:
c5:a4:c1:12:00:1e:6f:61:2f:16:68:a3:a7:77:46:a2:96:b3:
2f:ed:ed:b1:d1:07:87:86:34:ab:d0:9a:a1:fb:d2:81:b2:42:
be:25:4d:5c:bb:6f:f8:78:e7:f3:52:80:06:a4:ec:ba:04:d5:
cd:13:fc:d3:b3:76:4c:7f:b4:8b:f8:8c:ba:4d:aa:98:41:b4:
01:88:57:cf:6f:04:81:34:aa:9c:1e:41:44:b0:94:2b:2c:29:
45:a4:be:8a:e7:4f:76:51:7a:1e:21:f3:83:f0:8d:bd:26:44:
f7:65:3e:17:ca:12:b8:1d:85:7a:45:c7:69:e9:93:c0:b4:23:
b4:b4:e1:0c:50:92:8a:72:8c:c1:73:17:8b:28:45:09:c6:1f:
be:37:c2:b7:dc:55:48:1f:a6:3a:90:11:e1:cb:57:86:be:f2:
82:4c:a3:d7:70:d4:a1:b8:64:b5:af:55:cc:2d:b2:0c:cd:70:
21:c2:5c:97:bc:fb:db:6e:a3:2b:1b:bd:db:8c:3c:ed:77:a1:
9d:7e:79:d7:d3:bc:4c:15:84:55:15:33:78:fb:d5:03:a0:9e:
3e:3c:00:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:40:07 2026 by rpki-client