Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.mft
File: a3fOhCRDu4qW_CUJDZ66_5Vnol4.mft (raw, json)
Hash identifier: XE259iblpAhIzvSOgZYpmTzMzm1do/J834XoJiqokGs=
Subject key identifier: 3A:34:F6:D7:2B:83:32:8E:C1:4F:C4:60:87:F0:14:4F:03:CB:31:3F
Authority key identifier: 6B:77:CE:84:24:43:BB:8A:96:FC:25:09:0D:9E:BA:FF:95:67:A2:5E
Certificate issuer: /CN=6b77ce842443bb8a96fc25090d9ebaff9567a25e
Certificate serial: 01A001DCF58EA4FC39BB232BC02C4895E1E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3fOhCRDu4qW_CUJDZ66_5Vnol4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.mft
Manifest number: C4
Signing time: Fri 14 Aug 2026 20:00:53 +0000
Manifest this update: Fri 14 Aug 2026 20:00:53 +0000
Manifest next update: Sat 15 Aug 2026 20:00:53 +0000
Files and hashes: 1: AYWssxj1PLbVr_URF-ZIiz6BS4I.roa (hash: 9obR855p0IhaLrIXPPGSL2nYoYCxku1wM9uG/XbR5LA=)
2: a3fOhCRDu4qW_CUJDZ66_5Vnol4.crl (hash: dxf3OyjYmVEjD0fv6/x9MECgIQ/o6tBQdJ8+0sOo7AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3fOhCRDu4qW_CUJDZ66_5Vnol4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:f5:8e:a4:fc:39:bb:23:2b:c0:2c:48:95:e1:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b77ce842443bb8a96fc25090d9ebaff9567a25e
Validity
Not Before: Aug 14 20:00:53 2026 GMT
Not After : Aug 15 20:00:53 2026 GMT
Subject: CN=3a34f6d72b83328ec14fc46087f0144f03cb313f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0d:f7:de:18:49:c8:f5:9b:f0:80:76:ae:3a:
f2:47:b1:e1:be:b4:a3:a1:15:76:59:3f:ae:44:4f:
33:89:4b:eb:0c:87:b5:2d:15:de:c7:2a:68:dd:be:
c1:96:6a:94:72:ee:95:8d:49:6a:88:42:73:58:18:
a3:b8:68:93:eb:0d:15:7b:8c:70:34:b3:56:d3:f3:
d6:b7:99:10:f5:59:df:3f:34:7a:86:92:55:1c:4f:
1c:ea:75:85:97:be:54:99:06:06:6c:c6:b3:00:00:
05:a9:26:06:47:2c:f7:77:a7:74:19:52:a4:17:a4:
10:6d:e8:1a:41:fa:49:bb:fc:74:2f:7c:20:da:9e:
00:4b:53:29:36:9e:d4:4d:be:b2:54:e0:6a:91:cf:
82:e9:1b:c0:fc:9d:23:11:20:5d:b0:f4:7c:10:4a:
ab:fb:03:14:af:ab:96:0c:49:07:44:40:ea:5a:85:
ab:0e:30:d5:9f:4b:e8:9a:39:26:d6:cd:f6:44:7c:
9b:74:b2:7f:f5:8e:46:97:41:16:e2:91:43:15:59:
a7:9e:4c:54:97:1b:5c:25:92:a2:56:4e:90:05:dc:
3a:b7:24:cd:d1:b7:93:15:9f:1a:26:62:d3:0d:c1:
21:8b:e4:43:50:04:c0:40:70:bc:ec:8e:73:28:33:
75:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:34:F6:D7:2B:83:32:8E:C1:4F:C4:60:87:F0:14:4F:03:CB:31:3F
X509v3 Authority Key Identifier:
keyid:6B:77:CE:84:24:43:BB:8A:96:FC:25:09:0D:9E:BA:FF:95:67:A2:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3fOhCRDu4qW_CUJDZ66_5Vnol4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ec:1e:b8:bd:7a:01:b9:be:5b:f6:a2:ea:5e:2e:6c:b8:87:
3e:fe:bc:91:a9:4a:a7:62:d3:18:a6:33:c4:62:07:b0:09:45:
2c:b5:5f:bb:68:76:27:42:23:bf:d7:da:19:c1:1f:15:2d:ef:
38:33:1c:d1:4d:d9:0a:22:7b:01:ce:3d:57:1f:bd:75:a8:c6:
ba:3a:8f:da:25:86:56:cf:b2:68:d4:af:95:eb:dd:c1:72:46:
29:ec:00:4e:e1:2b:ac:ad:6a:9f:65:16:b6:7d:7a:c2:62:dd:
88:6c:87:d2:43:f7:98:e3:e8:58:da:d3:a7:8c:23:76:f5:36:
09:3d:c0:c5:1f:75:16:12:92:9c:e8:a4:00:1a:60:21:3a:48:
cd:10:a0:63:13:77:a4:32:4a:4b:1a:62:e8:e6:e6:ab:e6:ad:
50:17:f2:70:07:b2:e5:45:ca:68:a3:a5:fa:8f:7e:48:82:7b:
8e:16:06:90:18:b0:e5:b8:63:c4:76:a6:18:03:f1:ff:da:f8:
aa:a7:d2:59:15:7b:4c:7e:68:a5:a2:38:6b:5a:ba:83:2a:b4:
1d:b4:b4:78:55:44:bc:20:6f:72:4b:32:42:1c:1a:63:c7:ea:
d1:77:b5:3d:04:d3:f6:6d:33:1d:df:7d:7d:cd:eb:f7:c8:4f:
a7:1b:e5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:28:03 2026 by rpki-client