Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
File: 3o44GHrnDLx77WlXWfDgMpn7swI.mft (raw, json)
Hash identifier: Jfvkoh0FI9M3lSbC7499Ke5rHqzVSUC6+9FvuR6h8ZA=
Subject key identifier: A9:CB:37:3B:CC:9D:B9:C3:EB:F0:7F:7D:9D:50:CA:2C:8F:64:E0:E9
Authority key identifier: DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02
Certificate issuer: /CN=de8e38187ae70cbc7bed695759f0e03299fbb302
Certificate serial: 01A00138063DA325027C78514A45E911CA07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
Manifest number: 0689
Signing time: Fri 14 Aug 2026 17:00:43 +0000
Manifest this update: Fri 14 Aug 2026 17:00:43 +0000
Manifest next update: Sat 15 Aug 2026 17:00:43 +0000
Files and hashes: 1: 3o44GHrnDLx77WlXWfDgMpn7swI.crl (hash: EaDQIqCZv6wHiTK+tg4cHcBXZzmSIXLK6Xi9/stqqlA=)
2: RPnqpd4QiTnwCz1MgHARgUiKRfA.roa (hash: EMQ9uAHdxhy6q4kC92RKeDGjFCm7FDg8EbfwYcj/lNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:06:3d:a3:25:02:7c:78:51:4a:45:e9:11:ca:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8e38187ae70cbc7bed695759f0e03299fbb302
Validity
Not Before: Aug 14 17:00:43 2026 GMT
Not After : Aug 15 17:00:43 2026 GMT
Subject: CN=a9cb373bcc9db9c3ebf07f7d9d50ca2c8f64e0e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c5:af:ce:b7:87:79:7a:aa:91:61:9a:20:d3:
be:2c:3b:63:e0:0d:fa:05:7e:54:98:1c:14:29:27:
11:ec:ba:1f:9f:73:53:5f:8f:08:72:bb:f0:36:23:
23:50:97:cf:ac:d8:38:f8:f9:4f:46:c7:f3:1e:f5:
f7:8a:28:3f:e0:ea:f0:b2:61:69:b4:86:4e:5d:bd:
96:09:2c:a7:dc:f7:be:ad:55:b5:6e:b4:b3:4e:01:
fa:fd:7d:a4:07:47:2f:e7:6b:ac:d5:38:b0:ea:7e:
a2:65:78:82:fa:73:7d:4b:0b:af:e4:42:25:f6:ba:
23:5c:fd:dc:6c:be:8d:7a:82:2f:34:67:3f:c3:b9:
15:83:26:43:af:33:3a:93:52:5e:c8:41:85:7d:7c:
4e:ef:5e:92:ca:89:75:25:0c:24:15:99:66:38:47:
52:13:4e:41:9e:6d:bf:bd:e1:f2:1f:f0:98:d2:45:
2f:f6:2d:0a:12:d5:58:72:9d:a8:8b:d7:26:21:ec:
63:9f:c4:ff:a7:77:8a:3c:e5:2c:de:c9:d2:6d:23:
f5:6f:46:07:ba:5f:22:f3:d4:8e:b0:e8:7a:30:fc:
3c:cb:c8:82:5c:dd:c2:86:e3:68:6b:d0:29:da:eb:
7c:98:a8:25:28:a1:19:cc:ec:2b:85:f7:6c:a9:5d:
2b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CB:37:3B:CC:9D:B9:C3:EB:F0:7F:7D:9D:50:CA:2C:8F:64:E0:E9
X509v3 Authority Key Identifier:
keyid:DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:06:ee:28:85:9c:5d:54:a6:aa:61:fd:c2:b0:8d:5a:82:4f:
f4:d9:5c:ad:31:0a:11:ad:aa:e4:de:89:9d:65:02:7d:c8:f4:
ae:a7:30:f6:05:17:94:f4:ee:77:29:9b:3e:a7:e0:39:3f:88:
ea:ab:8f:35:13:8d:6c:1e:0d:ea:70:6f:b4:94:42:21:7a:24:
c9:9a:64:dc:64:ff:9a:0f:ad:63:f2:1b:8c:8b:b5:bb:d9:6a:
f8:92:1b:5d:ae:d4:3f:6e:f7:56:f7:2e:29:08:f0:99:33:94:
43:18:af:21:b3:b3:f4:68:38:2d:fc:2f:57:58:1e:c8:bc:e4:
85:04:bf:b5:68:66:ab:83:e0:8c:e1:d0:7e:1d:c9:f3:45:71:
ac:f8:08:b1:ca:ad:b1:06:ec:3c:c1:aa:33:53:d4:fb:16:fb:
00:71:e8:21:a6:01:d7:04:1a:8d:4a:d9:f1:95:77:e9:b6:ad:
5a:df:38:ee:b1:48:da:a6:ec:8c:e6:fc:2e:0f:43:f1:69:32:
e9:20:97:6e:61:59:da:27:41:98:15:63:a8:c2:6b:77:94:ee:
0b:13:e3:33:f0:2d:5b:7f:23:b8:3c:4d:ce:53:84:c2:c3:b7:
77:42:6f:db:cd:ce:38:da:ee:6c:02:47:75:42:6e:d1:39:6e:
61:d2:36:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:23 2026 by rpki-client