Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
File: 0TAReuHNwt8cWIFuAOVFH4fvs3A.mft (raw, json)
Hash identifier: B9ettXiT78/s6/3iJ+DWBuh2dyBKt2l0S04mn09ex5s=
Subject key identifier: 3C:E1:3A:46:75:8C:88:91:1C:66:FD:BE:79:7B:8E:7C:6A:36:F0:B3
Authority key identifier: D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
Certificate issuer: /CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Certificate serial: 01A0016FEC58F12A1EA4413652888649B2A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
Manifest number: 0A8F
Signing time: Fri 14 Aug 2026 18:01:47 +0000
Manifest this update: Fri 14 Aug 2026 18:01:47 +0000
Manifest next update: Sat 15 Aug 2026 18:01:47 +0000
Files and hashes: 1: 0TAReuHNwt8cWIFuAOVFH4fvs3A.crl (hash: 2vaG5fl+/Voc+F9pHXiAyxnh+5ssCcTpS0gxcvZCS+I=)
2: p9tR_YPIsnjcSaCfQzqt0nEYrrM.roa (hash: ELI33Gpd5gDnI+1hXpA3k3XALmGCvJJlHqj3mPxtk9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:ec:58:f1:2a:1e:a4:41:36:52:88:86:49:b2:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d130117ae1cdc2df1c58816e00e5451f87efb370
Validity
Not Before: Aug 14 18:01:47 2026 GMT
Not After : Aug 15 18:01:47 2026 GMT
Subject: CN=3ce13a46758c88911c66fdbe797b8e7c6a36f0b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0e:a0:f2:b0:5a:fe:6a:f3:93:55:cd:fe:ca:
9c:39:47:8a:be:dc:7c:26:a9:04:4f:97:a4:fd:91:
6c:28:08:b6:b7:5a:dc:ad:b2:cd:a0:6a:78:63:59:
36:34:de:95:29:2e:27:29:51:47:47:4f:e4:15:5d:
df:ca:f9:bd:31:81:c4:66:fe:2a:b6:6f:2b:41:f7:
72:ed:f6:18:9d:14:d6:03:b8:af:d6:ec:50:98:1b:
8b:57:83:67:ed:8c:a2:42:a6:b9:07:76:17:e7:fc:
28:d5:0e:f9:1b:d3:35:ec:9a:fd:f9:17:e3:87:cb:
47:d4:fa:d8:fe:73:9f:22:00:2b:c3:ed:c6:a4:4b:
00:ca:28:be:3c:5c:b2:59:90:07:a1:e7:dd:1a:fe:
74:c6:df:c1:55:a4:e4:9f:f5:74:50:39:4e:09:58:
67:07:18:69:bf:52:7e:33:43:ce:2d:27:55:53:ad:
9a:2b:71:00:72:b8:69:c7:c7:60:40:0c:aa:35:04:
ef:8b:60:b1:88:fb:86:e9:dd:6e:8d:3d:14:51:eb:
a3:3a:5f:2f:6a:97:67:a0:66:f9:36:fc:8e:61:88:
ec:e3:88:47:9c:30:88:e7:35:21:91:2e:a7:b3:b0:
e9:ee:ec:63:f3:59:c9:72:5b:66:f7:28:bb:d4:b5:
45:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E1:3A:46:75:8C:88:91:1C:66:FD:BE:79:7B:8E:7C:6A:36:F0:B3
X509v3 Authority Key Identifier:
keyid:D1:30:11:7A:E1:CD:C2:DF:1C:58:81:6E:00:E5:45:1F:87:EF:B3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0TAReuHNwt8cWIFuAOVFH4fvs3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/10ce73-3d4f-43ef-b685-250a4d777ba6/1/0TAReuHNwt8cWIFuAOVFH4fvs3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d5:72:25:a3:bd:2e:fb:3a:ba:ca:d7:3c:d8:b9:ed:c5:d4:
f5:0a:be:f9:fb:83:40:3d:64:3a:f0:3f:77:82:0a:78:45:3f:
30:51:4e:e4:16:0d:86:0b:d4:f0:8d:66:ff:a5:e9:a4:bb:ff:
60:b6:3a:43:88:c2:1b:8e:a9:25:47:1a:0a:04:b2:51:be:1d:
c0:1b:70:65:43:0b:45:7e:33:88:5a:77:49:20:1c:92:55:5c:
f4:03:98:58:bc:d0:70:06:7e:38:f6:5c:e3:d2:d2:d1:56:2d:
7b:7a:2a:66:06:bd:d9:10:6e:7f:e4:f5:da:d9:a9:32:85:7d:
1d:5e:1f:99:1b:a9:f1:b3:b4:13:14:a9:b8:d4:55:07:ad:87:
99:83:f0:71:89:2e:15:e9:5d:4e:50:4b:c6:f7:ea:99:76:cf:
bf:10:e6:3f:a8:47:f1:f0:e2:4f:bb:ab:42:75:c1:e0:d9:6a:
c5:cd:7f:77:8c:d7:4f:d0:2e:7f:5e:15:6a:fd:a3:fa:8a:21:
9d:dc:eb:05:a7:92:6d:2e:9c:23:a9:96:4b:e0:6d:4f:cc:94:
1f:dd:54:b3:9d:a5:65:fb:0c:0d:21:8b:d7:bb:38:15:36:d7:
cc:fc:fb:a2:da:1f:c3:79:6f:f9:db:b3:49:c8:06:a1:1d:91:
bd:24:c5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:37 2026 by rpki-client