Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
File: rr3q1PHRyN2pbRzReJ2d0-I78VM.mft (raw, json)
Hash identifier: Eg5mMlWtKEojA7ylcueCIa6IyXjIDXmnQOCWYDCEE0Q=
Subject key identifier: FD:7B:FB:AB:28:C0:95:07:C9:5C:CC:00:23:DE:72:AA:A4:84:CD:77
Authority key identifier: AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53
Certificate issuer: /CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
Certificate serial: 01A06E70E3BF1ADAA999E3C85666C31F485A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
Manifest number: 1120
Signing time: Fri 04 Sep 2026 22:01:27 +0000
Manifest this update: Fri 04 Sep 2026 22:01:27 +0000
Manifest next update: Sat 05 Sep 2026 22:01:27 +0000
Files and hashes: 1: 2XECgtpjsen86VkC8yydIYPOl1c.roa (hash: BPZBQJjMYkB0nrNJVAIozX1sKQI4gxMXxsPOFyAaAE0=)
2: _2RVkv-dG4-YIAymCk1yOs7NK58.roa (hash: o6HUJs0cl57DuL7YAIkgRklqKfSqkx4WuloF1lwdZUE=)
3: rr3q1PHRyN2pbRzReJ2d0-I78VM.crl (hash: TLwKyzXieJvV9FCRrX/mivoe70oRyaxBhlgp4GFlO2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:e3:bf:1a:da:a9:99:e3:c8:56:66:c3:1f:48:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
Validity
Not Before: Sep 4 22:01:27 2026 GMT
Not After : Sep 5 22:01:27 2026 GMT
Subject: CN=fd7bfbab28c09507c95ccc0023de72aaa484cd77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ea:03:0e:03:7b:87:28:31:42:c4:d3:78:c3:
41:d1:b8:e9:ad:34:51:c7:7b:b4:e9:48:89:66:d8:
3a:d8:a1:e1:0b:4e:a1:b7:c9:99:30:67:c5:13:87:
f9:26:35:87:73:67:5f:4c:09:2b:4f:e0:40:e6:0e:
aa:1b:ad:e2:ba:b5:c9:97:17:36:55:61:5d:60:1b:
07:94:2f:22:7b:3a:cd:b9:3c:e9:7c:f1:2d:04:8a:
e4:c3:0f:4e:28:e6:70:7b:f7:75:05:47:e8:33:50:
8f:64:05:f4:de:af:46:dc:cf:2b:9a:d9:aa:b1:73:
fd:1c:cb:06:cb:bc:e6:e6:f4:4c:28:19:45:84:fd:
0a:7c:19:b0:63:da:3e:bc:2f:6a:80:99:b1:47:97:
1d:f9:5f:f2:b4:cf:59:d3:76:a1:15:e3:e9:44:7b:
cf:50:8e:c1:b7:fa:e4:e0:e8:05:db:98:e2:e1:ab:
ee:ec:4a:8f:54:cb:e6:17:74:b5:ca:76:df:25:25:
d0:37:e4:20:51:28:eb:e2:32:0f:53:90:2b:35:01:
9b:2f:de:1e:6b:ac:9c:7b:d6:30:12:5b:9b:fb:d1:
9d:b5:a1:02:46:e9:57:15:b4:50:25:23:70:fb:9b:
49:2b:55:32:4a:de:ae:1b:7f:5c:1a:42:1c:af:e9:
4a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:7B:FB:AB:28:C0:95:07:C9:5C:CC:00:23:DE:72:AA:A4:84:CD:77
X509v3 Authority Key Identifier:
keyid:AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:3c:15:c6:3c:2f:91:ab:4e:79:1e:08:08:f5:74:b3:f3:49:
5f:4d:7a:13:39:34:3e:95:1c:dd:6e:02:d2:98:c5:97:3e:bb:
4b:c4:64:2a:6d:ba:4b:30:a3:fc:08:03:39:6e:67:99:4a:43:
d6:91:27:0f:b3:5d:3d:98:e3:ea:31:eb:07:49:4b:f4:95:0f:
2f:c9:24:1e:97:84:0f:36:c6:23:9a:f1:6c:57:b1:89:53:09:
5e:15:21:ea:f5:68:ed:90:31:87:b4:cc:8c:e0:0b:a9:c6:d1:
58:16:5c:1c:7a:8e:60:61:19:04:cc:88:1c:93:a9:0c:8d:49:
dc:84:c1:7d:fc:28:c1:a9:e0:45:66:4b:da:5f:34:62:d9:c6:
5c:68:c4:ee:af:3b:54:88:fa:90:6a:f6:e7:9e:60:04:59:8f:
49:41:3a:34:1c:b1:d7:be:2a:d2:0d:42:87:6f:c2:7f:47:63:
9c:af:89:eb:5b:bf:ae:22:b3:38:b9:15:30:68:ab:39:ec:25:
25:d1:17:b5:bf:b2:94:01:f9:fa:ae:82:fe:98:52:0c:a5:a4:
3c:29:f9:36:aa:f8:ab:88:af:83:09:0f:0c:a7:da:fd:ac:85:
ad:39:1a:e6:28:31:1f:ed:f9:ed:c2:f8:c3:f9:44:46:89:36:
d9:7f:d1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:22:54 2026 by rpki-client