Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
File: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft (raw, json)
Hash identifier: LqUTzq/EJ6n8/WguimhJB+iv+5AODjdIQd0n7DRZBa0=
Subject key identifier: DE:73:63:F8:F3:35:42:E8:E5:90:23:24:CB:8E:18:31:F8:A2:60:B6
Authority key identifier: DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
Certificate issuer: /CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Certificate serial: 01A002139B941C54E55EDC2F1608EFE7F86A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
Manifest number: 0AFA
Signing time: Fri 14 Aug 2026 21:00:34 +0000
Manifest this update: Fri 14 Aug 2026 21:00:34 +0000
Manifest next update: Sat 15 Aug 2026 21:00:34 +0000
Files and hashes: 1: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl (hash: DmY6miPed8RGH3oyMepMoqo3nnueVasf6mWuFXm/VNA=)
2: d1jP90vciiSKp3aodWDKGnu38Bk.roa (hash: nxrJlRcagS8YYk40MdJDJveIMr4yj0rHLHg2nPrUsoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:9b:94:1c:54:e5:5e:dc:2f:16:08:ef:e7:f8:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Validity
Not Before: Aug 14 21:00:34 2026 GMT
Not After : Aug 15 21:00:34 2026 GMT
Subject: CN=de7363f8f33542e8e5902324cb8e1831f8a260b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ab:9f:4e:af:db:fd:83:8e:df:4c:c8:55:30:
8d:51:1e:2a:84:4d:4f:80:e5:6b:43:9a:42:61:ab:
e1:10:a3:e9:d7:18:d8:a2:ea:32:9f:0d:b1:17:6d:
e0:38:15:b6:c3:bf:31:f5:d8:b3:85:68:36:13:36:
61:fa:f3:60:8d:38:4a:a7:ef:34:2d:4f:7d:1f:7c:
45:1f:21:43:90:0f:c3:b9:45:cd:cb:dc:dd:c3:4a:
0a:b1:47:b1:aa:75:e7:d5:a3:a8:da:98:14:b3:24:
ec:4d:99:ec:bb:d3:57:d5:07:94:d8:df:b4:6b:43:
41:a1:5b:29:f2:29:10:45:3e:b6:64:9b:a6:1f:9a:
90:9e:ad:ab:70:32:cb:65:e7:54:ce:65:85:90:3e:
ce:6e:c1:ca:64:7f:34:36:86:79:5e:ad:3b:33:dd:
d9:12:fc:b8:63:68:e2:ea:25:b6:52:d1:83:f4:c1:
1f:c6:20:3c:aa:92:2c:d3:af:cc:26:86:fe:8b:93:
0e:1c:2f:68:af:29:a3:0e:15:32:a9:64:a5:e0:0b:
f6:9c:ee:42:62:3b:ed:8c:2c:49:be:21:ff:a3:8c:
3c:6d:19:8c:c0:0f:90:37:2d:0a:14:f6:60:d5:1d:
7c:e9:75:97:cb:46:7d:a5:cd:9e:0a:8f:eb:47:13:
ed:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:73:63:F8:F3:35:42:E8:E5:90:23:24:CB:8E:18:31:F8:A2:60:B6
X509v3 Authority Key Identifier:
keyid:DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:89:39:a1:25:82:e6:09:21:04:f5:eb:a7:12:8c:fd:90:37:
8d:d0:46:1d:54:e8:5c:be:32:f0:d9:bb:83:13:76:de:d6:93:
27:70:4a:8f:56:e5:dd:44:f4:66:84:f6:4f:4e:ff:15:c3:7d:
d8:0c:c7:72:6d:eb:fc:a7:f1:55:c7:9f:a3:91:cb:5b:d1:7e:
92:db:4a:e6:4b:57:6d:3d:ce:9d:6b:79:d9:54:9e:b5:d2:ac:
68:12:9c:05:c6:bb:0b:e0:87:f9:ce:b0:2c:18:21:d3:2b:d0:
8f:1c:d3:36:4f:27:68:da:fc:6b:9f:19:ff:7e:c6:c4:ce:61:
c2:bd:b7:3a:1f:50:49:5f:ea:5c:4d:14:c3:b1:03:00:92:44:
16:45:83:e9:8b:57:9e:0c:83:46:65:68:7b:5c:d0:01:4e:a5:
87:54:f2:0c:71:2a:0b:30:b7:76:aa:4e:e8:c8:cc:75:0a:b5:
0b:43:19:55:7f:81:8b:f8:cb:ff:b3:db:bb:5f:86:67:a5:42:
5c:7a:b3:f0:e7:a9:bc:46:32:72:5e:6e:63:dd:ee:7f:a7:92:
64:b9:76:ae:19:c9:5a:c0:8f:96:ef:47:22:95:16:39:69:d4:
b3:f0:d1:b8:7f:b9:ac:5e:4f:8e:ae:3d:66:72:7d:86:d3:66:
d0:15:0f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:34:07 2026 by rpki-client