Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
File: 3hL5ZansM-LC6HthYb7vuL4obKM.mft (raw, json)
Hash identifier: IuJiHqmPseEMHC6mUVGqhzNlIiOmaAbm5EwI1qg+6Zg=
Subject key identifier: 35:A8:EB:C3:68:9F:E7:72:29:0E:2D:EC:ED:6D:12:18:41:FD:CC:EF
Authority key identifier: DE:12:F9:65:A9:EC:33:E2:C2:E8:7B:61:61:BE:EF:B8:BE:28:6C:A3
Certificate issuer: /CN=de12f965a9ec33e2c2e87b6161beefb8be286ca3
Certificate serial: 01A002B8BEE9EE60E63E68F4C8C6951D7CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
Manifest number: 1825
Signing time: Sat 15 Aug 2026 00:00:56 +0000
Manifest this update: Sat 15 Aug 2026 00:00:56 +0000
Manifest next update: Sun 16 Aug 2026 00:00:56 +0000
Files and hashes: 1: 3hL5ZansM-LC6HthYb7vuL4obKM.crl (hash: bVbXoT0xVa8RgV8uh5krwnCtdt1+zVrtYYffVDA3+PY=)
2: dQKWrb4274MA9TnUoPK0iLguRN8.roa (hash: iabYGi8dw6jC4+Zg8izYgwpn552JIuXwr1GRxu62hag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:b8:be:e9:ee:60:e6:3e:68:f4:c8:c6:95:1d:7c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de12f965a9ec33e2c2e87b6161beefb8be286ca3
Validity
Not Before: Aug 15 00:00:56 2026 GMT
Not After : Aug 16 00:00:56 2026 GMT
Subject: CN=35a8ebc3689fe772290e2deced6d121841fdccef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:77:0d:a3:6d:7e:99:65:24:e0:03:ef:ad:d4:
52:8e:05:fc:55:d1:ed:b7:c7:1e:88:bd:7f:66:57:
08:b9:c8:62:d0:52:2f:ff:8a:3e:9f:85:99:09:23:
d2:b1:30:f9:40:78:1b:cf:af:b9:0b:aa:ee:01:1f:
02:f3:28:15:f8:08:fb:94:09:a3:0a:dd:0e:2b:6b:
51:b0:b9:5c:f9:ea:89:05:56:7d:21:9d:91:9d:27:
74:e3:1f:8c:2b:f2:37:34:d9:b2:ea:e7:02:f6:2a:
85:e9:5c:b5:70:f7:ac:76:ad:fb:63:9f:3b:c4:c1:
59:4a:7f:60:df:6c:17:f9:c9:51:89:2a:c6:28:47:
2f:79:9a:41:fd:bb:7b:d4:92:5f:01:5a:4f:b3:10:
48:83:2e:5d:cc:cf:96:c4:21:cf:b3:18:33:e4:dd:
7c:19:b1:e5:85:60:02:b3:75:86:71:d5:ee:9f:42:
f1:90:77:de:42:01:bb:14:b8:a1:fe:91:47:28:5a:
1b:53:eb:3c:e8:84:1d:09:2d:b0:99:e3:3d:3c:ec:
db:31:01:14:b5:11:32:da:4d:0c:60:3a:56:ff:fb:
64:04:87:8e:77:48:b8:be:ee:0c:dd:f0:c0:04:67:
9c:b9:f4:bc:18:c0:15:90:1b:a4:ac:30:9f:1e:63:
d9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A8:EB:C3:68:9F:E7:72:29:0E:2D:EC:ED:6D:12:18:41:FD:CC:EF
X509v3 Authority Key Identifier:
keyid:DE:12:F9:65:A9:EC:33:E2:C2:E8:7B:61:61:BE:EF:B8:BE:28:6C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:9c:28:8e:7d:0e:8d:2c:c1:9b:e2:27:0f:6e:50:66:eb:e0:
28:9e:75:43:c9:56:70:20:0a:da:4f:5b:75:bb:90:57:92:60:
ed:17:3c:ce:ba:d0:68:4a:c8:4b:d3:4e:e2:cb:d7:96:1b:0b:
de:27:58:a8:78:3e:b2:7c:57:3d:3b:8e:77:77:c9:27:56:d2:
d4:7f:ac:1e:0f:27:93:1a:37:26:8b:90:54:56:df:39:a7:c1:
3b:f8:5f:0e:1c:4c:56:90:59:b1:a7:7c:e9:3f:fb:93:5f:6e:
98:e8:1b:ae:7b:70:13:54:8b:52:23:91:ba:a9:1d:d6:0d:02:
10:3e:15:c0:51:18:8e:3c:7e:f6:22:fb:50:3b:21:7f:00:d9:
00:48:8f:81:12:45:8d:c5:e5:a0:78:48:80:6e:27:ef:1c:14:
09:49:9c:c6:cb:0c:13:cd:b6:aa:ca:55:4d:41:ab:02:30:d4:
1f:17:92:8d:e5:6a:4f:3b:e0:70:cd:e2:bc:0a:9c:d5:b0:ca:
08:53:43:54:b9:25:ae:a9:b7:bf:ee:f4:3c:91:ab:45:1a:04:
8d:32:f9:13:43:8b:c9:10:3f:a3:94:16:31:40:a9:41:3e:07:
b0:47:cb:69:ec:fb:9b:17:72:95:50:27:7a:7f:52:52:8d:1c:
eb:73:b5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:26:59 2026 by rpki-client