Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.mft
File: 1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.mft (raw, json)
Hash identifier: uVtm1maQgJU//wOeqf3PB+5RMggUfpIAV9rZsKIBzRo=
Subject key identifier: 3D:E7:95:0F:B9:07:65:9E:7F:D8:7D:69:90:CF:EC:A8:E1:EA:2D:CB
Authority key identifier: F8:0D:ED:D8:D4:0D:BF:23:E1:10:54:0C:43:0D:94:EC:38:78:96:3A
Certificate issuer: /CN=f80dedd8d40dbf23e110540c430d94ec3878963a
Certificate serial: 01A0404EA8873F12460CBF9BC3D11BBF62F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.mft
Manifest number: 0223
Signing time: Wed 26 Aug 2026 23:01:31 +0000
Manifest this update: Wed 26 Aug 2026 23:01:31 +0000
Manifest next update: Thu 27 Aug 2026 23:01:31 +0000
Files and hashes: 1: 1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.crl (hash: cHPGrDFLHpUBsE+YoORAqQEMuzc9CjuSL/JtDuOjb5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:a8:87:3f:12:46:0c:bf:9b:c3:d1:1b:bf:62:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f80dedd8d40dbf23e110540c430d94ec3878963a
Validity
Not Before: Aug 26 23:01:31 2026 GMT
Not After : Aug 27 23:01:31 2026 GMT
Subject: CN=3de7950fb907659e7fd87d6990cfeca8e1ea2dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:35:85:2f:5e:8d:dc:66:18:58:da:25:76:88:
53:8f:3d:d1:7f:c8:42:62:85:e4:b7:0a:1c:45:ff:
15:da:a7:41:cf:5b:e7:a3:f3:74:df:06:4b:1d:d5:
71:18:1b:37:39:ef:69:a2:12:58:51:ad:7e:0b:cf:
c4:bc:74:9c:32:fe:51:e3:4d:a7:34:68:4e:68:3f:
e8:8e:a3:a6:e1:10:5a:3a:ae:77:e0:d5:3d:8e:14:
1a:20:02:42:e3:84:35:53:6f:e8:7c:04:62:32:56:
2b:2e:e3:ab:ee:c6:b1:10:84:da:5c:7b:6d:51:52:
e2:28:d5:33:be:c0:7a:5e:50:cd:89:f5:61:1e:f0:
26:6f:60:3f:9c:a8:71:83:43:62:ac:76:78:f8:94:
25:9e:e9:12:60:e2:b4:72:69:7f:a2:e6:a9:a4:df:
69:b3:77:27:c2:3b:75:b4:7d:fa:57:a5:a3:71:12:
ee:fb:ad:bf:da:6f:f9:83:27:54:08:7c:31:b5:a0:
34:8d:14:dd:88:a6:01:fc:aa:17:6d:25:a9:af:db:
11:06:cb:dc:28:36:0f:8f:00:c3:9e:27:eb:47:77:
70:de:6f:27:60:85:2f:85:e2:44:f7:3d:72:16:c5:
d6:8e:75:32:bf:3f:e9:e4:c9:ac:4d:53:ed:5b:b5:
bc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E7:95:0F:B9:07:65:9E:7F:D8:7D:69:90:CF:EC:A8:E1:EA:2D:CB
X509v3 Authority Key Identifier:
keyid:F8:0D:ED:D8:D4:0D:BF:23:E1:10:54:0C:43:0D:94:EC:38:78:96:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:3e:0f:7a:e0:f0:c1:e1:ee:98:cc:5f:0d:c8:b2:25:f5:7a:
69:c0:80:6f:3e:29:30:87:16:12:e8:ab:ff:8c:11:73:37:ff:
a3:fd:c5:15:65:c1:ff:62:b6:36:d2:3c:52:d4:81:28:f7:0d:
69:c5:ee:37:98:bf:4a:03:6c:9d:1c:2d:23:fd:83:57:65:6d:
97:df:4e:44:84:f0:39:14:2d:97:f1:c0:de:1b:2f:5a:a4:e4:
25:8f:70:87:87:0b:45:40:75:51:0d:ce:45:0d:b3:fe:8b:fb:
18:0c:ac:c3:35:f7:e0:78:67:77:f5:66:81:56:d3:58:8b:9e:
8b:e1:e6:bf:f9:e9:1d:b0:95:26:3e:41:6d:7e:3e:51:fb:67:
a0:5b:5f:7e:e9:9a:fe:ec:fc:cb:d1:3a:85:14:d0:d9:80:ba:
53:b5:e7:72:f5:c6:6e:9c:a8:86:d0:6a:06:f8:d3:d1:51:f7:
e5:27:d0:7e:6f:49:79:c1:ae:50:65:9d:c9:ae:8b:c9:2d:b6:
88:40:6c:48:27:73:49:42:b7:fc:12:72:20:b8:25:57:dc:bb:
a8:ba:b8:7f:4b:9f:48:c5:7a:67:44:98:04:5c:e6:f2:7d:38:
19:a9:f3:ed:0c:72:c0:ce:7a:cd:8e:15:f8:e9:65:4c:24:5b:
2d:03:6e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:35:41 2026 by rpki-client