Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
File: 3RiOwuSayUWFJFtLh0Whu3oc3GY.mft (raw, json)
Hash identifier: AsG4KvwwiT1GR8PsQCoL0rbrAcBXE1XQclObZNukBVE=
Subject key identifier: 2D:A2:86:AA:08:A8:03:D5:C4:0B:7E:30:DB:61:77:59:1F:7D:B1:A9
Authority key identifier: DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66
Certificate issuer: /CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66
Certificate serial: 01A089E7FC1A8A0015E4EB66E809317074B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
Manifest number: 0CB9
Signing time: Thu 10 Sep 2026 06:01:16 +0000
Manifest this update: Thu 10 Sep 2026 06:01:16 +0000
Manifest next update: Fri 11 Sep 2026 06:01:16 +0000
Files and hashes: 1: 3RiOwuSayUWFJFtLh0Whu3oc3GY.crl (hash: YpQsYCKeANUxXhngJAdkoJisBqbatAs7M72C/W1zGxs=)
2: OJYwyNovCJmIKZF1nk5Dzxd0RYc.roa (hash: WPn0W+4jICl9OeInrEgUZWegwTFzjRsf+1TWPog3Wy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:e7:fc:1a:8a:00:15:e4:eb:66:e8:09:31:70:74:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66
Validity
Not Before: Sep 10 06:01:16 2026 GMT
Not After : Sep 11 06:01:16 2026 GMT
Subject: CN=2da286aa08a803d5c40b7e30db6177591f7db1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:43:4e:83:f5:f5:cd:b3:81:d9:4f:f0:50:dd:
82:0a:95:7a:fe:7e:b4:a8:e7:73:b1:31:97:29:e8:
4d:fd:76:14:45:92:58:29:f3:57:c4:ec:aa:8f:fb:
3c:35:e9:d2:40:19:3d:41:56:f8:36:8a:7d:ac:35:
2b:a3:6a:9e:39:09:af:82:d4:66:df:99:68:db:aa:
9f:eb:b0:16:5a:e1:e2:f6:5f:73:2f:b4:dd:0f:12:
57:68:f4:22:31:91:77:b2:58:61:8e:ea:25:cf:4d:
2b:ce:78:82:6c:f4:cc:f4:b9:af:d1:15:e2:e0:12:
54:42:c0:1b:53:52:ce:f0:2c:63:b9:4f:29:ce:c8:
1a:e1:e4:d7:d9:61:d4:20:6a:f0:63:88:11:5c:68:
9f:3d:79:93:12:1b:26:c9:5e:7c:ca:6c:73:51:14:
05:29:18:4e:6f:00:e4:41:83:bd:fe:6e:3c:ef:d9:
af:01:a5:ee:ac:46:26:4e:c5:ad:a2:bd:ef:c2:53:
21:28:0c:a2:32:0e:59:fd:28:0d:c8:35:0e:91:c0:
06:a8:ed:d3:ff:46:e7:6a:3e:b7:05:ff:23:f0:c8:
12:67:f8:fc:7f:9a:c6:a1:03:89:08:95:1d:cc:c4:
e3:7c:e8:a0:b1:46:0f:b3:2c:ea:15:ab:2f:b0:14:
f6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A2:86:AA:08:A8:03:D5:C4:0B:7E:30:DB:61:77:59:1F:7D:B1:A9
X509v3 Authority Key Identifier:
keyid:DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:87:11:1c:d6:15:83:87:3b:1a:29:e6:66:f5:fa:12:85:81:
32:ab:54:58:b3:c4:7a:93:4a:6d:60:00:76:90:c3:6a:2d:9e:
cf:1c:38:5f:18:4e:6f:35:57:9e:b3:07:4e:86:f8:f7:b5:05:
16:c7:ab:5e:d3:57:23:c2:94:8b:a5:cd:2a:b1:8f:e2:df:ef:
cc:d6:02:86:36:53:c3:e6:fc:c1:e4:71:83:9f:e0:ee:e4:fc:
81:8a:9c:53:76:e5:33:92:44:09:4c:ef:d4:1a:f1:13:0c:dc:
98:63:6e:d9:94:f6:8a:5a:cf:5f:42:a5:ec:53:9b:2e:97:65:
bc:a4:c4:7b:e0:cf:01:b6:44:80:71:c7:71:8d:f4:94:55:c6:
da:a9:bb:53:83:5d:8f:f7:4f:91:40:15:5a:d1:d1:a7:3f:33:
75:60:e0:a1:80:cc:9c:bb:3b:14:a7:da:fd:81:f4:fa:3e:c4:
59:75:78:02:32:d6:a8:8c:0f:86:d4:0c:67:9d:02:63:cf:a0:
67:66:17:57:aa:eb:99:15:ea:4c:12:f7:01:4c:11:0b:d7:6b:
d1:0e:1b:ac:49:8f:07:2d:b1:66:7d:ce:7f:f8:e2:af:37:35:
7e:d1:a7:0d:0b:87:2b:c0:b5:0f:9b:47:04:4f:7c:0b:49:bb:
e3:ee:06:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:16:29 2026 by rpki-client