Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
File: 3YqroPRrqhRP2wk46RwU-UxhZQw.mft (raw, json)
Hash identifier: Y8lwDF0ODgGdj3TVt1kiitCPrv7O5o71bSxxFaaiz4I=
Subject key identifier: 15:2A:52:4D:5C:78:73:68:01:7A:05:40:34:36:EB:6E:5C:06:A0:CE
Authority key identifier: DD:8A:AB:A0:F4:6B:AA:14:4F:DB:09:38:E9:1C:14:F9:4C:61:65:0C
Certificate issuer: /CN=dd8aaba0f46baa144fdb0938e91c14f94c61650c
Certificate serial: 01A13E25A23B6CFACECAFF1275F4ACAE2366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
Manifest number: 1205
Signing time: Thu 15 Oct 2026 06:00:15 +0000
Manifest this update: Thu 15 Oct 2026 06:00:15 +0000
Manifest next update: Fri 16 Oct 2026 06:00:15 +0000
Files and hashes: 1: 3YqroPRrqhRP2wk46RwU-UxhZQw.crl (hash: 2WJoYadohYijSjZqbIO4cf3cIt75jOjaaLxqCQvcqZE=)
2: ipwbth9z_kAmFFiQQC69LkO_nQw.roa (hash: NejJVwemsx7RaWRb+qhN37iXZFwIo50zil0wLKpDlFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:25:a2:3b:6c:fa:ce:ca:ff:12:75:f4:ac:ae:23:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8aaba0f46baa144fdb0938e91c14f94c61650c
Validity
Not Before: Oct 15 06:00:15 2026 GMT
Not After : Oct 16 06:00:15 2026 GMT
Subject: CN=152a524d5c787368017a05403436eb6e5c06a0ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:51:5c:f5:06:87:27:a6:ad:0e:52:a4:23:
55:70:fe:65:71:02:e2:9b:72:84:65:f5:c7:5f:a1:
e4:0c:64:91:b8:50:76:df:04:97:6b:17:2b:01:03:
f4:43:18:44:2d:cf:5b:16:57:b8:c7:43:90:34:67:
f2:dc:45:74:23:36:de:04:af:6b:be:21:6a:2b:6c:
e8:1c:8a:56:20:09:97:cf:fd:f9:83:1a:64:ad:3f:
47:ab:10:bf:2b:11:2f:39:c9:17:7e:b1:56:4b:0c:
ac:2e:59:e1:1a:98:91:10:6e:fb:3e:87:d7:63:cd:
ba:e1:8f:37:aa:00:04:d0:7f:64:cb:b9:ac:c1:a9:
fd:66:b2:1b:d5:35:c8:85:11:b1:e9:b7:67:c1:fd:
f2:1e:4f:9f:85:13:54:2e:f7:51:ec:a6:3e:f2:bd:
64:d0:2d:29:68:1a:37:1b:9c:ec:d3:85:16:19:34:
0c:a3:2b:c1:5c:c5:b6:54:23:7c:b2:69:aa:4a:05:
f5:ac:1c:4d:7e:a9:c9:f4:a7:3c:bd:28:b6:f5:67:
33:e1:61:17:eb:03:f3:cd:dd:b2:b2:2d:30:c8:cf:
69:0f:a2:93:99:ad:69:2a:b6:f4:db:0c:15:a3:dd:
ca:a8:35:d1:07:ba:39:ed:f3:2c:bd:ee:33:f1:92:
38:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2A:52:4D:5C:78:73:68:01:7A:05:40:34:36:EB:6E:5C:06:A0:CE
X509v3 Authority Key Identifier:
keyid:DD:8A:AB:A0:F4:6B:AA:14:4F:DB:09:38:E9:1C:14:F9:4C:61:65:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:75:e2:d0:62:37:5b:66:e5:87:86:a3:69:97:dc:c4:2f:93:
b1:2a:58:da:e3:95:bd:dd:61:ad:5f:ce:d7:8c:39:73:a3:a1:
4d:97:a2:f1:e0:99:8d:14:13:01:b2:9e:76:22:44:11:9f:73:
cc:ee:f4:5a:da:74:4d:75:f5:d6:21:47:47:77:98:ac:1c:82:
a4:5e:50:fc:c5:e4:ef:de:62:ca:43:e3:25:ba:c2:3f:73:74:
9e:44:44:02:33:6b:d0:71:42:78:06:0c:af:0f:fd:b2:69:a1:
ed:f1:b6:68:45:61:b3:c5:85:04:c9:0c:f5:72:e0:91:70:6e:
77:1a:f3:43:49:ff:33:28:62:0d:aa:58:36:2d:e3:e4:ae:7e:
b0:ab:aa:8e:56:a4:3d:24:d8:7e:eb:a2:5d:8a:ae:40:9c:5c:
7b:1a:13:02:df:32:3c:8a:48:c6:29:8c:ec:84:33:e9:27:c7:
79:cd:76:4d:7f:e0:4a:9b:79:98:05:d8:30:23:23:14:0a:b4:
71:9b:bf:1d:2c:55:80:a6:c1:e0:bd:0d:99:49:31:8c:a8:ea:
e3:b2:da:de:6c:da:a4:24:85:d9:93:7f:58:b0:c0:17:95:90:
e7:b3:05:49:45:fe:4b:1e:d9:81:c5:6e:f2:04:bc:6d:51:da:
6d:e1:a6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:37:15 2026 by rpki-client