Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
File: 3-4r9D8hqBxJLG5qn8bwdNLwohc.mft (raw, json)
Hash identifier: higkXaaTUmVy/73NxyM88cK6bVLNv6CPgVnFsOasFSQ=
Subject key identifier: 3B:E5:07:8F:DC:AD:DC:92:62:E1:9E:42:3D:21:D1:B6:B3:15:56:C2
Authority key identifier: DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
Certificate issuer: /CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Certificate serial: 01A06E025EC80464AD8DECD650F0F2B05B54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
Manifest number: 1A48
Signing time: Fri 04 Sep 2026 20:00:43 +0000
Manifest this update: Fri 04 Sep 2026 20:00:43 +0000
Manifest next update: Sat 05 Sep 2026 20:00:43 +0000
Files and hashes: 1: 1fQajHTJp0S8KUunDd6YeyFtENM.roa (hash: mmAzmTwR/ELzJWO/mTGxkNnXnKiWntSSUF9kf4/Kzb4=)
2: 3-4r9D8hqBxJLG5qn8bwdNLwohc.crl (hash: RErQcfpbmxHgrZ73Ptn6iuxqQLPWFRMMB2m6l4ggyVw=)
3: 6I-aggcE89s528aMt_8CuZqJ61A.roa (hash: 1l0d6AnGSzNrEZie8Z3fZ9Fg7c3oqYcQ4vM6hMLN2Xk=)
4: F4SS2nAtZGfBCcizniZNF8kbqKM.roa (hash: HKR9CN00lz/+opq5i3oKemga0jRQrkicKz4E2CgkRB4=)
5: SnPwDc-0nTqJfXka4bMItiAxnag.roa (hash: FsxQK4FiALmdR7pjWtArDyIp4Te0b42AEfI8eyP5E4A=)
6: kvP2mI40vax4nF6kVjBW7CPEusk.roa (hash: XQESmT9q2hkU8SLAW++EjKoLyZosWL6LnbGsHkaVg6M=)
7: rrxhY0T34NFm8dBURFOGg9BvJjw.roa (hash: CAUMQZvZz6QKlQgRUZEx4oRHdyyDBXGnUQ6HYMNXgDk=)
8: ts1pF9IuOtsG6MORS9TxN4ZUynY.roa (hash: qnP47gtGKaM8m6t6aMvd42h7A8nkD9mykwqjLsAUTYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:02:5e:c8:04:64:ad:8d:ec:d6:50:f0:f2:b0:5b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Validity
Not Before: Sep 4 20:00:43 2026 GMT
Not After : Sep 5 20:00:43 2026 GMT
Subject: CN=3be5078fdcaddc9262e19e423d21d1b6b31556c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:02:87:6d:7e:09:a3:54:9f:5d:e0:33:96:ff:
15:99:5d:f8:26:a3:57:46:e2:9e:0d:cc:3d:52:50:
3a:bc:45:53:85:92:33:a3:d5:6d:b1:04:be:87:98:
e1:1f:1f:48:e4:ba:84:14:2d:a5:ee:c3:e3:67:31:
f8:e4:af:e8:ab:17:82:a0:dc:6a:29:d0:9c:98:d3:
4b:6f:82:d2:46:82:06:a9:00:5d:12:4a:8d:fe:8f:
2d:d2:cc:0b:6c:34:07:42:b2:0a:bc:78:f2:f5:e1:
bd:7c:55:e0:e2:0d:91:85:bc:07:58:33:86:24:75:
71:f4:f0:a3:3f:81:3c:d5:1d:79:eb:ec:1e:c4:c8:
b8:87:59:4c:a5:c3:cf:4e:fd:18:1d:c0:7a:a1:f9:
4e:07:e8:14:6b:8f:40:4d:80:fa:49:86:55:db:f4:
de:92:43:63:e5:b6:06:a4:16:4e:7b:8e:f6:d4:f9:
a3:9b:05:03:80:26:3e:63:f9:6e:75:9c:63:ed:5d:
0a:32:6a:50:f4:69:2b:f6:52:da:a4:ca:19:ec:c8:
bf:3a:d9:66:db:55:14:46:05:b2:2c:62:3b:f4:ac:
6a:bb:e0:4d:88:6d:28:7f:05:98:1d:07:82:d8:3d:
3c:a6:33:13:83:e8:05:5a:ba:8e:ac:fa:f1:8c:a7:
d6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E5:07:8F:DC:AD:DC:92:62:E1:9E:42:3D:21:D1:B6:B3:15:56:C2
X509v3 Authority Key Identifier:
keyid:DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:31:6e:78:1b:f5:02:03:ec:34:70:99:91:96:50:72:d7:8e:
b4:3b:c4:58:2c:1e:9a:7c:29:42:f6:5b:7f:3f:83:c6:f2:c1:
54:5f:88:3a:98:db:ce:0c:32:8a:f9:de:cd:72:b1:5a:c8:9e:
46:46:f9:80:77:89:55:5a:c9:d2:e2:3b:9d:f6:df:f4:16:2d:
a2:40:60:1a:56:e1:3a:f3:ea:91:26:fb:47:31:12:48:83:dc:
bb:46:0b:a6:af:ad:ba:2e:5e:37:6c:5b:20:c5:54:90:95:37:
1a:5d:7e:d6:a4:5c:1f:7d:a1:e5:1c:be:88:ac:f4:9b:05:9a:
50:2b:1c:3f:4e:c3:54:32:22:c7:0a:c4:2f:75:1e:65:09:06:
dd:6c:5b:cb:98:fa:18:c4:d7:99:e2:70:d2:fa:18:18:0e:5f:
65:1a:e1:a5:87:19:41:24:0a:42:72:51:5a:ac:80:7d:66:98:
f2:f6:73:54:41:84:13:c8:ae:1b:1b:d2:82:e7:d5:a1:01:7f:
18:b7:9c:fa:6c:84:a3:1e:0d:3c:8d:2f:0a:8e:7a:93:c2:2e:
10:9b:75:e8:a8:0a:0c:66:99:0c:4c:8a:cf:73:cb:3c:ef:e3:
05:8d:fe:df:09:65:e0:fc:2a:f5:88:b9:4d:4d:7f:57:40:8b:
ef:fb:34:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:57:33 2026 by rpki-client