Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
File: 3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft (raw, json)
Hash identifier: 67V/1lL9dYsNOw+4hfWq+NPEZaYImgy30B82Xf7P1qg=
Subject key identifier: 5E:07:1B:14:58:05:35:D6:25:33:BE:8B:23:52:AE:D6:69:8C:90:4B
Authority key identifier: DE:0B:59:FB:68:15:1E:21:DC:99:D6:2F:AF:03:58:9B:E4:1F:BE:A2
Certificate issuer: /CN=de0b59fb68151e21dc99d62faf03589be41fbea2
Certificate serial: 01A13F3909082B31AE96F47B71C193315C27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
Manifest number: 0EAA
Signing time: Thu 15 Oct 2026 11:01:04 +0000
Manifest this update: Thu 15 Oct 2026 11:01:04 +0000
Manifest next update: Fri 16 Oct 2026 11:01:04 +0000
Files and hashes: 1: 3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl (hash: zy0wDpW2ad+lVGeOFTBP3Zzf47tkvh3WKgDBGtf/7OQ=)
2: EpYfEYO_PBauG2EManfF8FgFl1Q.roa (hash: cXvNIHvNyPlxk30rEJGQL1sdKxLXm0Gvh2LNp2Lvi3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:09:08:2b:31:ae:96:f4:7b:71:c1:93:31:5c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0b59fb68151e21dc99d62faf03589be41fbea2
Validity
Not Before: Oct 15 11:01:04 2026 GMT
Not After : Oct 16 11:01:04 2026 GMT
Subject: CN=5e071b14580535d62533be8b2352aed6698c904b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:91:b8:ad:32:e5:d5:3c:23:e7:b1:ec:43:42:
e1:a0:37:5b:e8:47:5b:9c:83:27:b4:f4:b6:bd:b2:
40:64:f8:99:cb:c0:78:b0:c2:ec:30:11:b8:b9:11:
04:d6:57:fb:09:32:b3:cb:eb:83:09:c6:89:28:1b:
5a:97:de:2c:f0:47:7c:8d:27:7e:86:9a:d2:9f:4c:
2a:7f:cc:75:4b:fb:b6:48:d1:df:df:77:71:dd:68:
58:6d:9b:79:9b:18:fc:f1:27:b2:83:e8:1d:6f:cc:
17:dc:57:bf:34:8e:14:f5:49:b5:50:99:78:11:90:
2b:87:df:b5:4c:e3:1e:50:3c:c4:34:18:d9:cf:2c:
73:1c:e1:e3:4e:c9:89:24:13:73:4c:11:ef:89:1e:
2e:9a:b6:1b:45:65:66:2f:29:41:94:24:32:53:37:
3a:d4:b7:2b:0a:07:74:04:8a:6b:cb:a9:a6:72:b7:
ff:88:c2:88:76:b7:bf:67:41:4c:d0:b0:eb:a1:ba:
97:e4:ed:ac:95:55:a3:3a:be:5c:bf:ba:08:f1:30:
51:9b:be:7b:7c:54:27:56:9c:67:fb:22:8b:fb:b8:
a2:ce:63:d2:cf:cc:c7:b5:79:00:a8:1d:37:ae:5a:
6c:4e:0c:f4:3e:c1:a1:52:43:f1:5e:98:df:22:99:
4c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:07:1B:14:58:05:35:D6:25:33:BE:8B:23:52:AE:D6:69:8C:90:4B
X509v3 Authority Key Identifier:
keyid:DE:0B:59:FB:68:15:1E:21:DC:99:D6:2F:AF:03:58:9B:E4:1F:BE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:68:91:e5:77:bf:aa:60:08:a6:ee:4e:07:15:50:d3:9e:44:
d4:22:72:50:cc:02:6f:4f:bc:7a:03:ac:45:4b:c7:8c:dc:6b:
6e:8b:d6:fd:e8:60:23:6e:39:0d:d8:ef:be:84:de:65:a0:73:
f9:57:51:39:eb:9e:b4:41:39:89:51:4d:7c:7b:12:cf:ae:4b:
8f:a6:ad:d0:4e:50:9d:70:50:82:4c:70:03:3c:b5:65:9f:da:
08:0a:79:3e:8d:42:8a:90:12:d9:41:e4:cb:52:82:b7:42:e2:
48:20:c3:15:87:37:e7:14:80:05:34:8e:0b:be:ed:60:0f:2a:
02:82:e3:73:3b:76:d4:d7:00:10:68:76:e7:f2:b6:fe:9e:c5:
09:1e:00:e1:ff:46:03:f3:4c:0f:0b:bc:da:43:7a:09:43:bf:
3d:cd:68:f6:63:c4:6b:d5:25:ca:a3:64:78:f9:59:6b:e4:0e:
00:f7:93:ab:3c:9b:97:b8:56:7d:74:16:1c:90:bd:30:cf:2e:
3a:8a:46:c2:14:77:eb:eb:dc:ad:1b:c6:15:28:6c:5f:d7:84:
52:47:9e:f1:6e:a1:63:34:bf:63:e8:22:0b:37:eb:5e:e2:89:
08:f6:5f:f4:9a:6a:9a:3a:20:da:25:8d:e8:eb:61:4f:96:49:
f7:ce:3e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:53:54 2026 by rpki-client