Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.mft
File: 3fwxxRjdlxX93slYJSfshEjXhA0.mft (raw, json)
Hash identifier: wA/732Wf5K3Q9ZolmuGVgjIMuy13yrkMgf141M0UfJs=
Subject key identifier: 06:73:B6:C6:13:D8:64:3C:AF:B7:D6:F1:D3:65:87:CF:1C:C7:86:2C
Authority key identifier: DD:FC:31:C5:18:DD:97:15:FD:DE:C9:58:25:27:EC:84:48:D7:84:0D
Certificate issuer: /CN=ddfc31c518dd9715fddec9582527ec8448d7840d
Certificate serial: 01A0E73FE9DAD5BD34EBFCE4D07629C9E365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fwxxRjdlxX93slYJSfshEjXhA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.mft
Manifest number: F1
Signing time: Mon 28 Sep 2026 09:02:00 +0000
Manifest this update: Mon 28 Sep 2026 09:02:00 +0000
Manifest next update: Tue 29 Sep 2026 09:02:00 +0000
Files and hashes: 1: 2rI5z9MKWkWLbN4Ac0mrTh9wI0Q.asa (hash: gEb+fnmGtGeQVf4nv5uRoOoaQszHv4xPq/xVWvjZho4=)
2: 3fwxxRjdlxX93slYJSfshEjXhA0.crl (hash: Nz0c2yd38KfZBFS5Ty+Rd2wrXyAwZostRwBxidTKtlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fwxxRjdlxX93slYJSfshEjXhA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 09:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:3f:e9:da:d5:bd:34:eb:fc:e4:d0:76:29:c9:e3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfc31c518dd9715fddec9582527ec8448d7840d
Validity
Not Before: Sep 28 09:02:00 2026 GMT
Not After : Sep 29 09:02:00 2026 GMT
Subject: CN=0673b6c613d8643cafb7d6f1d36587cf1cc7862c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6d:1e:53:3f:b7:2a:cd:26:04:0e:70:b3:6d:
cb:7f:1b:17:fc:b0:f8:5e:b0:f4:0d:e2:99:fa:5e:
42:f2:04:cc:f9:17:ba:49:be:6c:66:0f:37:0d:10:
be:43:67:c0:b6:b2:c4:48:12:d0:e1:12:f2:27:63:
e1:a3:0a:92:f9:ea:78:11:a0:af:19:69:d7:fe:4d:
cb:b6:af:ed:94:3b:2f:d9:36:d3:50:8e:2e:a5:51:
2d:22:e6:6d:08:72:7e:ed:43:09:0a:33:85:95:b6:
36:de:46:30:6a:d8:1f:4a:d7:26:c7:71:a9:24:c9:
0c:e9:69:57:3a:2a:64:02:db:c1:dc:99:12:a0:37:
7a:b5:8a:63:fe:22:6a:0a:76:c1:bc:7a:12:a2:4a:
dd:00:9a:85:91:6d:93:f8:cd:2e:16:21:f3:b6:0b:
d5:39:a0:35:4f:2f:fa:5e:51:20:87:d1:92:98:bc:
51:45:5c:a0:5a:92:06:79:5a:9c:63:43:95:2f:9b:
4e:49:1e:1f:3d:ff:69:74:1f:0b:89:15:91:1c:6c:
7f:19:65:9a:6e:4b:8f:d7:98:21:55:f8:b8:d7:6f:
a8:97:46:15:f6:8d:e9:c8:99:e8:e3:d6:50:a2:26:
6c:47:58:23:e4:17:0c:66:2e:d7:38:be:38:3c:53:
f5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:73:B6:C6:13:D8:64:3C:AF:B7:D6:F1:D3:65:87:CF:1C:C7:86:2C
X509v3 Authority Key Identifier:
keyid:DD:FC:31:C5:18:DD:97:15:FD:DE:C9:58:25:27:EC:84:48:D7:84:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fwxxRjdlxX93slYJSfshEjXhA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e2:09:0d:8d:72:c8:85:87:45:46:5f:e8:03:1c:d5:20:9d:
7a:cb:ca:c6:64:e5:ea:5a:8e:6f:fe:65:ce:d4:ed:f7:29:c7:
47:c0:0b:29:ae:cc:0d:d5:94:5d:f8:a2:7e:23:fe:db:5f:86:
eb:19:04:0b:7e:25:d5:ed:45:fa:b3:02:b6:54:2d:5e:25:3a:
76:39:eb:a2:a2:7f:9a:de:17:19:ab:1d:2e:5e:c5:8a:11:50:
df:43:b6:b0:74:22:fe:ce:11:de:c8:0b:81:0c:19:5d:20:81:
45:8a:6b:31:76:d2:b0:5b:6e:15:03:5b:4c:77:bf:f5:fd:ad:
f4:69:c1:bf:84:d1:13:03:ea:a6:ac:43:d1:5e:c9:20:d1:18:
21:1a:e5:49:c7:70:fc:e2:61:78:18:2b:3c:cb:b9:ab:5c:d4:
00:a7:4b:07:a4:de:67:00:2c:68:0a:18:d8:7b:a4:03:3a:e0:
11:82:b5:35:8b:08:34:52:99:0b:c8:44:d4:8f:5e:d5:8a:04:
90:06:25:f7:d6:f4:12:0d:b2:3b:bf:a1:18:30:fb:55:21:11:
eb:b6:23:6c:86:d0:29:75:be:63:88:34:82:3a:49:a6:1c:83:
f4:38:2b:53:13:bc:98:6b:0b:8e:88:bf:49:0f:35:93:6c:fe:
aa:62:b9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:33:51 2026 by rpki-client