Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft
File: 3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft (raw, json)
Hash identifier: lpGjDzsNbNI/rx95T210ZXq0eEkeiZgvCxWnzrs8A0E=
Subject key identifier: 5B:44:1F:9A:92:86:49:C1:12:42:AA:AA:83:A7:22:B0:41:C4:47:C3
Authority key identifier: DF:14:F4:79:AD:A9:A9:7A:62:04:DF:0E:A9:8A:23:EA:76:1D:47:36
Certificate issuer: /CN=df14f479ada9a97a6204df0ea98a23ea761d4736
Certificate serial: 01A0046FDCA4D654B44CD435290A8441BF4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xT0ea2pqXpiBN8OqYoj6nYdRzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft
Manifest number: 01EF
Signing time: Sat 15 Aug 2026 08:00:34 +0000
Manifest this update: Sat 15 Aug 2026 08:00:34 +0000
Manifest next update: Sun 16 Aug 2026 08:00:34 +0000
Files and hashes: 1: 3xT0ea2pqXpiBN8OqYoj6nYdRzY.crl (hash: 1eGYaeblhccvWHiXzpCb0V3XSeA/kOMFeMUsgoHLsh0=)
2: Eczgp2EFr8e_XSlXUgSdJTrIAak.roa (hash: FsSSezhMi82MyPxKqmo1dtY5pOhu7CRckdx69CzRJss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xT0ea2pqXpiBN8OqYoj6nYdRzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:6f:dc:a4:d6:54:b4:4c:d4:35:29:0a:84:41:bf:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df14f479ada9a97a6204df0ea98a23ea761d4736
Validity
Not Before: Aug 15 08:00:34 2026 GMT
Not After : Aug 16 08:00:34 2026 GMT
Subject: CN=5b441f9a928649c11242aaaa83a722b041c447c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4b:62:5c:3b:b4:c2:27:8d:7a:2a:09:57:bb:
4c:9f:2f:51:bc:a7:6d:dd:bb:06:11:0f:92:fe:9d:
60:f4:f2:d7:f3:5d:55:07:1e:02:b9:4e:37:fc:7a:
ee:53:d9:be:73:a3:9e:63:92:c0:e2:09:e0:52:ca:
3d:9b:2d:33:2c:af:ac:07:6d:58:6c:1e:b3:fc:ba:
a6:b9:85:21:5b:e6:4c:9d:5b:1b:da:f7:cf:f4:e4:
b9:45:03:84:49:6f:fc:b9:6f:5f:b2:be:f1:ea:12:
6f:c9:a3:14:6a:82:ec:b9:d7:6e:3f:a8:85:93:97:
62:c8:43:13:24:2d:35:a9:ad:41:7b:02:bd:87:a5:
b7:86:0e:8e:b9:78:86:c4:1d:73:0f:43:65:11:fe:
db:ab:45:38:f8:60:69:e7:cc:01:ad:a4:07:04:2f:
ca:47:a5:ad:07:04:7a:18:10:f2:85:f8:25:ed:91:
5e:ef:91:ab:7f:a2:6a:72:5d:9b:70:7b:cf:99:af:
86:ce:35:35:4d:e6:25:71:4c:e6:1c:0b:36:f7:f0:
a4:8a:74:34:b6:9b:d6:59:61:3a:1d:aa:3c:0e:63:
58:8e:4d:26:62:97:8b:31:fe:0f:ed:82:1c:83:9a:
52:bb:85:d5:f1:10:67:71:62:e3:1c:38:1c:0e:14:
01:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:44:1F:9A:92:86:49:C1:12:42:AA:AA:83:A7:22:B0:41:C4:47:C3
X509v3 Authority Key Identifier:
keyid:DF:14:F4:79:AD:A9:A9:7A:62:04:DF:0E:A9:8A:23:EA:76:1D:47:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xT0ea2pqXpiBN8OqYoj6nYdRzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:5d:58:c6:92:35:0e:ec:8a:70:2c:49:ce:e3:5a:0e:0e:93:
eb:e3:43:2f:21:ae:0a:74:05:5d:34:5e:9b:7b:c9:e0:d2:02:
3e:c2:70:f0:c6:03:45:3e:34:15:e5:e9:44:67:c1:05:5d:c0:
47:25:fd:67:02:7e:ea:30:9e:b1:98:69:28:25:72:2b:ba:53:
7e:84:9e:81:e8:32:5a:18:9c:d7:9d:c6:c4:09:6d:74:f3:ee:
9f:89:42:fa:ac:e2:32:70:d4:be:80:60:fe:6d:2c:c2:a5:1b:
79:82:52:b3:de:bd:81:5c:8c:b0:08:87:f0:12:79:b7:4f:27:
d7:d0:7f:e3:54:0f:ee:5c:47:20:bf:a2:2e:40:33:eb:ee:e4:
d1:01:f9:c7:14:3a:2c:16:26:fa:f0:eb:d4:5c:bd:02:4e:02:
57:7b:f8:27:60:1b:ad:bf:04:04:16:b7:78:2b:d0:a1:d6:af:
33:7f:63:27:6c:13:aa:3c:6f:5f:37:00:a5:1f:ff:29:13:8e:
e6:d2:91:ed:aa:0c:72:99:7e:72:87:db:a8:bf:2d:64:87:1f:
23:19:1d:fd:8f:0b:18:aa:2c:a3:64:e9:30:12:9e:a8:9a:37:
af:92:ac:94:f4:27:63:4a:04:d7:41:76:e2:e4:1f:52:19:d1:
c7:09:91:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 11:15:14 2026 by rpki-client