Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
File: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft (raw, json)
Hash identifier: cECQbUdK/IBFgL0exgRmEKD0ku7wyFqYbrelIcdikuU=
Subject key identifier: 9B:6F:E8:C8:21:A3:47:16:16:B6:5C:0E:4D:4A:3C:21:E8:C8:62:46
Authority key identifier: DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
Certificate issuer: /CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Certificate serial: 01A13D13AAF3A96C5EED274943C21C1E1D1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
Manifest number: 0FB1
Signing time: Thu 15 Oct 2026 01:01:01 +0000
Manifest this update: Thu 15 Oct 2026 01:01:01 +0000
Manifest next update: Fri 16 Oct 2026 01:01:01 +0000
Files and hashes: 1: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl (hash: IbWJqKdILYJTbjjT+Q+Jwrg0f5+NQq+uvqcpRGq4ONI=)
2: 7oc8a8fS3DJKvtS40qTcpFXQvEM.roa (hash: 8aVVJ9t5PeC1jL7SS/bu2hleqTmY1JsdKhA8bRBNWso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 01:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:aa:f3:a9:6c:5e:ed:27:49:43:c2:1c:1e:1d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Validity
Not Before: Oct 15 01:01:01 2026 GMT
Not After : Oct 16 01:01:01 2026 GMT
Subject: CN=9b6fe8c821a3471616b65c0e4d4a3c21e8c86246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e4:5e:eb:d0:31:9e:68:50:d5:f5:3c:00:13:
ea:ca:44:fb:4d:2d:04:e9:12:e1:89:21:d6:49:23:
71:29:77:20:33:cf:e9:7f:73:63:ce:5c:3b:af:74:
4f:bb:3a:53:65:4b:a6:bc:c1:0f:78:67:94:f0:52:
6c:48:4f:c7:c0:d2:6c:29:4e:3a:3b:e8:64:cf:0e:
cf:4e:65:e4:0d:45:77:9d:74:92:21:c1:77:ff:10:
63:b1:ba:5d:79:c1:fc:21:b8:51:cd:4e:5c:53:5a:
71:38:ae:14:95:ca:72:df:ce:31:3e:71:2c:8c:97:
84:68:94:c7:46:2b:97:29:de:5d:20:cf:3b:e9:77:
3a:5d:bb:7c:d3:87:fa:d0:49:cf:6a:91:e9:f7:9e:
fe:9d:65:b7:ac:5d:96:30:ac:1a:a1:d1:a9:1e:87:
05:79:11:8b:02:00:3d:df:40:64:c6:ae:8d:a9:86:
b6:2d:28:9b:d6:c3:06:10:54:95:bb:16:ec:a7:c2:
50:46:de:40:83:b8:64:0d:32:b2:1e:0b:34:3d:18:
ea:0d:f7:3b:7d:31:49:ca:07:a4:05:2b:f9:58:43:
10:93:be:ff:0d:12:cd:f6:40:3e:48:59:0c:12:17:
bc:cb:3a:c8:9b:91:eb:c4:54:ff:92:54:40:94:e1:
93:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6F:E8:C8:21:A3:47:16:16:B6:5C:0E:4D:4A:3C:21:E8:C8:62:46
X509v3 Authority Key Identifier:
keyid:DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c1:e3:d0:f9:21:d9:0a:3e:6d:88:be:fb:7a:51:cb:fe:da:
0f:f9:d8:31:6c:73:57:c9:1b:67:15:c0:ce:e7:d1:b8:c6:ae:
47:fc:dc:f1:34:67:e8:9f:9c:25:f3:0c:06:7a:df:20:ec:b8:
1d:e3:5b:e1:b7:1f:f4:0c:b8:0c:df:81:56:5b:df:6a:e8:2a:
b6:84:08:65:5b:ec:86:0c:25:68:6e:ca:ca:8a:33:24:8f:b6:
2d:2e:43:d8:c0:94:fd:fd:2a:86:d7:ce:66:f5:03:1b:fa:d2:
15:2a:f5:98:c2:1a:1f:45:fc:09:0c:8c:8e:55:4f:a6:e6:09:
0d:35:e7:2e:57:51:c5:80:94:75:04:2f:af:ee:f0:e6:ac:b5:
37:fd:b9:8c:fe:b0:56:74:9a:45:81:fa:46:c6:68:a0:53:d0:
fd:1d:ff:fc:cf:89:ca:53:3c:d5:cf:c8:a7:af:c7:a3:4d:89:
a8:0b:55:5d:73:f3:b1:04:60:31:ba:ae:c4:9b:96:1f:31:4d:
b9:aa:48:49:3b:3c:74:d3:92:ba:ce:fa:20:ce:97:61:97:25:
37:dd:37:b1:70:11:ee:ec:32:4c:a0:90:4c:34:52:d0:0e:2a:
44:10:41:3f:be:d3:9b:6b:c1:ec:0f:a4:03:79:69:fa:90:d4:
91:94:94:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:32:03 2026 by rpki-client