Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
File: 3ghbDRu_nngbFUsG97kUESnbd18.mft (raw, json)
Hash identifier: oHRFkabMmVyfNPioVubNIe4sZVKo90myhx3zSaZtk78=
Subject key identifier: CF:DA:E4:5F:20:73:1B:ED:B7:75:9B:E0:74:0E:0F:18:CC:8E:6D:46
Authority key identifier: DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
Certificate issuer: /CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Certificate serial: 01A00213A8A0CDAC1FB3FB928C276B05D479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
Manifest number: 1A03
Signing time: Fri 14 Aug 2026 21:00:37 +0000
Manifest this update: Fri 14 Aug 2026 21:00:37 +0000
Manifest next update: Sat 15 Aug 2026 21:00:37 +0000
Files and hashes: 1: 3ghbDRu_nngbFUsG97kUESnbd18.crl (hash: xwbi5PwFeJma6Rs5hPU96wrcvmO5rNhfzSJVabaNCY0=)
2: fONXP_fP-K2CxXzPBDLR6f-PrkU.roa (hash: iTe+/A+Cer5fpJpPxyAsGGZIQSIg8X5o4zlL2Zh7qbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:a8:a0:cd:ac:1f:b3:fb:92:8c:27:6b:05:d4:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Validity
Not Before: Aug 14 21:00:37 2026 GMT
Not After : Aug 15 21:00:37 2026 GMT
Subject: CN=cfdae45f20731bedb7759be0740e0f18cc8e6d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:49:b6:b6:c7:74:6a:15:09:e1:9e:74:dc:97:
77:18:ba:f1:fa:85:1a:46:b2:fc:6f:8d:9c:c9:0b:
e6:bd:bc:04:1d:ba:7d:59:1e:4f:96:d0:89:82:c4:
11:29:15:81:04:e8:1b:95:9f:0b:bd:4a:77:a9:25:
31:4e:4c:9b:60:0e:3e:d3:f5:a1:2d:4f:38:cf:6d:
4d:8d:66:d1:3d:9e:72:a8:7a:15:c4:70:bd:bc:81:
f3:a0:48:f9:24:4a:8d:47:5a:65:37:48:4a:9b:e0:
a9:2f:3e:02:ec:60:f1:fb:6c:58:ed:f2:79:57:33:
ee:b2:c8:62:73:1c:9c:5f:c2:55:26:46:76:0e:72:
c3:11:0a:25:e7:72:d0:6d:66:23:f7:87:ee:c6:17:
a5:a0:5e:fc:91:14:dd:0b:a9:3d:dc:ea:38:b0:70:
bc:95:fb:86:52:09:31:e5:e1:25:ed:18:cd:a5:a8:
ee:69:7c:a5:8a:c3:ad:53:d8:d1:f7:94:ef:52:b1:
2f:b3:1c:05:d8:b0:1d:b0:f8:ba:f3:f4:75:c3:4c:
bf:6b:be:9b:d1:6e:34:8f:39:a7:7a:40:af:56:84:
52:30:33:3b:fa:2d:f6:52:1e:ae:ab:e1:61:d4:d4:
0a:f9:cf:a6:0d:03:a0:1f:a5:9d:42:34:e4:d7:ae:
16:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DA:E4:5F:20:73:1B:ED:B7:75:9B:E0:74:0E:0F:18:CC:8E:6D:46
X509v3 Authority Key Identifier:
keyid:DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e1:00:ae:78:5c:83:7b:e1:f3:d7:58:13:f3:33:7b:8e:5c:
3b:ba:d0:b3:1c:40:7c:e7:af:85:72:e4:a3:b4:0b:bb:46:ea:
2f:85:ec:6a:c6:fb:5b:57:c9:ee:db:b3:f7:7d:66:08:bd:df:
11:34:cb:97:4c:94:dd:f0:99:a0:b9:12:80:8b:41:d7:a8:ce:
80:4a:1d:4b:44:c0:d4:43:53:e8:42:1a:06:d1:09:62:4f:19:
5f:43:9e:ea:60:4f:5f:1c:dc:b5:72:2f:aa:90:56:1f:f7:e5:
57:5c:77:46:b2:cf:84:8a:bc:4e:54:11:3c:a9:1a:d2:bf:5e:
7b:20:08:a2:7b:52:eb:7f:18:ed:fc:af:62:f8:79:d2:32:a4:
54:08:ea:45:6e:8e:df:8b:a3:68:ec:c1:3c:71:f5:00:32:45:
fd:84:e1:1b:16:56:bc:75:b7:fa:e2:dd:f6:ba:8c:1c:22:f2:
05:76:3a:40:d4:c8:61:b9:a3:c9:79:b2:5e:94:3c:ca:8d:0e:
0c:f2:a3:8e:f8:61:95:4b:ab:29:ef:52:3e:3e:b1:f1:a9:ae:
c0:aa:af:fd:91:90:97:4a:b5:70:14:b0:9b:a4:a5:a3:3c:f7:
98:f9:48:4f:ef:83:c2:2f:c6:82:90:42:bf:9a:64:72:37:ee:
52:48:fb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:22:12 2026 by rpki-client