Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
File: 3ye5OZNKLMIG_7przpyQ_cujnHE.mft (raw, json)
Hash identifier: FfKRhpOmi2y4W7tXivsHZQ4NzP9ozxhT/q9W4BJftsI=
Subject key identifier: 99:F7:E9:58:A4:AC:82:5C:EB:A7:CA:71:99:57:CB:93:78:92:3A:60
Authority key identifier: DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
Certificate issuer: /CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Certificate serial: 01A08C43F23EE4DE8A5DD95CDB525C3C11EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
Manifest number: 1A55
Signing time: Thu 10 Sep 2026 17:00:58 +0000
Manifest this update: Thu 10 Sep 2026 17:00:58 +0000
Manifest next update: Fri 11 Sep 2026 17:00:58 +0000
Files and hashes: 1: 3ye5OZNKLMIG_7przpyQ_cujnHE.crl (hash: ANQn602AAyLZemYgR3XoC6qZ6H0fYr9t3B2xlofkvPE=)
2: W5GHuBmScEfpIPAhuqgylrz1a6Q.roa (hash: iVf+MqYMn6D3or0TDUJHTOHK/dGQL5UOldNHGxN0jow=)
3: tH4NdKGms5TfcW6T3wq-xPP5lao.roa (hash: RAFP/ByUPYbvzL7CQ6hq0JZ4+gFCb5J71aCNcV4HRvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:43:f2:3e:e4:de:8a:5d:d9:5c:db:52:5c:3c:11:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Validity
Not Before: Sep 10 17:00:58 2026 GMT
Not After : Sep 11 17:00:58 2026 GMT
Subject: CN=99f7e958a4ac825ceba7ca719957cb9378923a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3b:41:31:1c:1e:e8:d1:09:5f:29:8b:7f:84:
ee:a7:6c:7f:06:e6:55:3b:45:0a:b5:da:07:c9:c7:
86:ac:21:6e:d2:91:29:c3:27:a2:f0:ac:b5:c4:b5:
a3:66:e6:f9:73:fb:0f:8d:3a:bf:99:c2:cb:63:b9:
ab:2d:c5:0e:8a:3d:11:cf:24:e8:52:5c:6f:8c:af:
ea:33:21:06:75:b6:78:d3:ea:b0:c7:ee:61:ad:a8:
9e:7a:ad:16:5e:35:68:fb:b1:7e:63:cb:16:44:26:
1e:8e:09:4a:00:cf:71:98:ab:0a:44:1e:b1:09:d6:
2a:08:31:51:5e:aa:e3:86:36:46:ea:b4:6c:28:b4:
d2:a8:fd:ea:28:34:ae:12:09:17:61:32:34:ad:25:
76:d2:39:99:51:60:1a:41:a9:74:2e:77:50:83:a4:
78:bb:d3:81:82:9f:af:4f:70:2f:11:42:b3:67:ec:
99:9a:52:49:32:bb:41:0b:b1:e3:c7:0e:14:50:69:
c8:95:1b:52:a1:bc:38:09:e4:cd:f5:3c:15:34:61:
2c:34:d6:33:3d:05:57:ae:8d:b5:9a:23:06:80:f4:
46:85:eb:02:95:c5:33:11:b3:10:42:af:2a:7a:e8:
f2:47:d1:cc:33:5d:89:5d:d2:e1:43:e3:6e:82:52:
42:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F7:E9:58:A4:AC:82:5C:EB:A7:CA:71:99:57:CB:93:78:92:3A:60
X509v3 Authority Key Identifier:
keyid:DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:f5:cc:06:78:6b:81:9c:a8:a8:fe:71:fe:21:e9:d1:a7:d1:
c1:59:55:8e:67:db:37:ec:86:b1:7d:d4:bd:c3:75:bf:82:88:
1b:37:1c:76:a5:d0:4d:c6:c4:f6:98:a6:d4:f2:5c:ed:07:b5:
c9:39:c1:2e:33:dc:18:8f:d6:2b:f1:23:1a:e6:d1:4e:98:0e:
16:5e:de:42:36:ea:d3:fe:e0:11:db:cf:c7:62:9e:03:ad:c1:
37:c3:0f:c8:fe:33:31:5f:60:2d:fc:89:90:a1:bf:21:85:fc:
29:8b:c7:e4:01:7d:99:ee:0e:0e:32:77:1a:fd:92:3f:d4:08:
b4:17:68:a5:1f:9a:ed:63:dc:ba:d9:1b:6b:ab:f4:d1:c9:f6:
7b:fe:e8:a1:0e:79:09:32:20:6f:a9:cb:62:36:77:87:64:86:
84:6e:85:03:19:6e:25:95:51:79:5b:89:3f:af:79:88:b2:c1:
04:a8:89:9f:ab:54:d8:13:ad:d1:71:47:10:93:ca:61:f5:fa:
95:19:dc:fd:b2:b8:6f:18:48:70:13:6d:73:87:8a:87:d9:c0:
3e:7b:2e:fb:04:3e:78:18:4a:cd:20:9e:57:9f:bd:33:87:05:
39:10:9a:bb:41:fb:0c:ae:23:bd:08:e4:b9:81:60:42:77:bf:
04:69:d3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:22:34 2026 by rpki-client