Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
File: 3-KkwH5N3j8ePKw5ujshNTGsy7k.mft (raw, json)
Hash identifier: ngmJRhRWNZjlPilTpPY1fD4N7jr0vit997AJchNTFZw=
Subject key identifier: 13:87:F0:0F:B8:4E:DB:3A:EF:69:52:67:56:A1:A6:00:C1:8C:B5:AA
Authority key identifier: DF:E2:A4:C0:7E:4D:DE:3F:1E:3C:AC:39:BA:3B:21:35:31:AC:CB:B9
Certificate issuer: /CN=dfe2a4c07e4dde3f1e3cac39ba3b213531accbb9
Certificate serial: 01A0897982AE66DC9EF895E6A44A91B06026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-KkwH5N3j8ePKw5ujshNTGsy7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
Manifest number: 01F6
Signing time: Thu 10 Sep 2026 04:00:36 +0000
Manifest this update: Thu 10 Sep 2026 04:00:36 +0000
Manifest next update: Fri 11 Sep 2026 04:00:36 +0000
Files and hashes: 1: 3-KkwH5N3j8ePKw5ujshNTGsy7k.crl (hash: T1ilSgeIElZ89xNhcwoBepMuAitPDchBp4NfnUIwxpg=)
2: Bq6stHEFxMFxnWEoWkNnr2q_nfU.roa (hash: FRvotk1GU1c0bgTGRLjQpv9XYU8csQF9vIzVahVu7Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-KkwH5N3j8ePKw5ujshNTGsy7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:79:82:ae:66:dc:9e:f8:95:e6:a4:4a:91:b0:60:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe2a4c07e4dde3f1e3cac39ba3b213531accbb9
Validity
Not Before: Sep 10 04:00:36 2026 GMT
Not After : Sep 11 04:00:36 2026 GMT
Subject: CN=1387f00fb84edb3aef69526756a1a600c18cb5aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:02:a9:50:f1:4c:47:31:f8:7c:e6:32:03:ea:
d0:de:9f:c9:4e:a2:8c:dc:9d:0f:24:1b:61:fd:a1:
b9:0b:43:96:78:c1:8b:b2:e5:63:fc:0d:f3:36:f8:
c8:20:77:d0:a9:e2:51:ef:01:39:1b:6e:1d:0b:cb:
cb:55:5f:94:29:d0:f4:7c:05:2e:b5:a7:a6:39:22:
90:65:06:ff:08:9c:a1:df:a7:b2:80:8e:28:6e:a5:
19:d1:c2:71:12:91:6c:42:5c:2e:e1:3f:69:a9:7a:
73:ad:55:df:ed:16:0a:66:a4:d5:c0:d6:d8:23:41:
63:95:1c:79:01:d5:4c:47:6c:77:61:88:26:61:5e:
06:48:47:31:62:9c:46:2e:fc:49:06:98:07:7d:6f:
b8:e1:ac:74:09:be:39:f1:40:fc:45:45:aa:50:df:
77:b1:51:04:f2:3f:11:5a:dc:db:86:0d:df:8f:e1:
2b:bc:a3:2a:85:dd:56:23:90:57:b5:17:b1:36:50:
d8:d3:89:20:62:a8:3b:6b:eb:2b:6c:f0:a2:53:23:
7a:eb:54:ad:e9:8a:95:2f:f9:0d:03:e8:a6:01:f1:
3e:60:83:cd:89:c8:5b:36:41:78:61:d1:cb:94:bf:
cb:af:ba:ea:ca:b8:a5:20:19:be:1d:ee:d7:a6:90:
a2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:87:F0:0F:B8:4E:DB:3A:EF:69:52:67:56:A1:A6:00:C1:8C:B5:AA
X509v3 Authority Key Identifier:
keyid:DF:E2:A4:C0:7E:4D:DE:3F:1E:3C:AC:39:BA:3B:21:35:31:AC:CB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-KkwH5N3j8ePKw5ujshNTGsy7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a0:98:15:fa:7c:c1:f0:14:27:d0:c3:69:c2:8e:88:f7:4c:
fe:26:9a:c5:12:d1:e8:a1:0a:db:d0:bf:c1:60:5d:2e:d4:e4:
74:6d:57:3d:e8:37:b3:07:ec:90:fc:af:de:3f:af:26:48:6f:
1a:62:ef:a8:d8:4b:35:30:51:e1:b7:4b:40:52:33:08:23:d6:
47:08:6b:cf:a2:18:38:01:ee:4d:a5:e6:58:ce:86:3b:8e:b8:
f6:eb:94:41:63:19:6d:af:4f:6f:0b:8b:e3:26:8f:73:16:03:
08:32:87:32:d0:d7:f8:f2:a1:95:57:a9:91:6b:e1:5e:16:07:
53:f0:37:11:e4:66:3c:b5:aa:29:a8:9d:6e:e3:a7:6c:cb:73:
d1:4a:82:94:bd:2a:d7:34:f8:c3:e0:31:1d:9e:79:70:05:a3:
51:b7:e9:ae:9c:10:6f:f3:74:73:27:39:b2:b1:83:f1:60:1b:
b1:c9:ec:76:2a:4c:4e:01:d6:97:ad:b7:97:92:af:89:ca:bb:
9c:8a:3d:76:95:b7:38:d9:b5:8a:ea:c5:ef:5b:92:2c:6d:ea:
29:07:7f:7c:f1:4d:1f:e0:47:a4:4a:a8:bc:d9:e8:97:f3:fb:
39:70:d5:18:f9:16:db:f9:be:b8:56:83:fb:d2:33:7c:8b:76:
e0:37:4f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:30:07 2026 by rpki-client