Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
File: 3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft (raw, json)
Hash identifier: M58Aj0tEuxqCm1YjVKq91PjwQ90uELWUsX8IvxQnLHc=
Subject key identifier: 9E:A8:A7:8D:F3:90:F5:C8:53:B6:4E:3C:C5:58:46:D0:83:CB:D6:47
Authority key identifier: DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
Certificate issuer: /CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Certificate serial: 01A0005C844E5FCF713DA810FCB12D4B09F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
Manifest number: 11E1
Signing time: Fri 14 Aug 2026 13:00:58 +0000
Manifest this update: Fri 14 Aug 2026 13:00:58 +0000
Manifest next update: Sat 15 Aug 2026 13:00:58 +0000
Files and hashes: 1: 3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl (hash: EAZuwxYagrKk10h6I06gPffXDVpy9rMneCBlNRqKQ7U=)
2: ZupcI2nbSj0kv3bOiTJw_7ju_nM.roa (hash: 8lfURhp4+6wvfeyaLwrd59nHvD9zLaiHI+8CWa149w4=)
3: uRzlID_nfuupcIGUXbHpyyUrxts.roa (hash: 5LvqBXGtCHTt2jvIwKxCsctM10tlaiQJ5CWlpcE9cx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:84:4e:5f:cf:71:3d:a8:10:fc:b1:2d:4b:09:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Validity
Not Before: Aug 14 13:00:58 2026 GMT
Not After : Aug 15 13:00:58 2026 GMT
Subject: CN=9ea8a78df390f5c853b64e3cc55846d083cbd647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c9:66:3f:86:11:92:db:46:02:18:3e:04:cc:
e3:ec:2a:bc:0a:98:e2:0a:1e:0f:87:cd:6f:78:7f:
08:8f:cd:05:a7:59:61:56:58:3c:1b:59:ae:7c:bf:
c0:c9:bb:48:98:fd:df:0f:55:19:2e:94:76:f7:8a:
53:f7:63:2e:da:b8:25:74:f4:49:37:e2:57:32:a9:
c5:b8:6f:75:00:d9:4d:d5:19:56:42:f7:28:fa:25:
9d:12:d0:72:24:4c:06:11:b9:8e:14:4d:3d:84:f4:
1a:06:94:56:a2:49:6a:ea:ed:86:6f:e2:28:dc:3b:
95:c5:d2:a9:58:bb:67:fe:75:e0:da:c0:bc:9b:9f:
ae:07:40:02:bb:53:f1:2c:05:d1:84:7e:fb:9f:2e:
33:14:da:da:1b:c3:c4:54:30:72:bf:9c:49:1b:2e:
87:82:85:04:ea:0f:bc:00:38:7c:1e:56:64:c3:ee:
aa:6d:46:91:40:a8:31:2c:ab:27:72:21:a1:40:ef:
4c:c1:c4:3d:9a:68:35:b8:27:24:ca:9b:59:ce:83:
67:33:a1:b0:a1:3c:cf:ad:6e:0a:11:62:a0:83:72:
0c:9f:5d:05:61:9b:16:22:0b:6a:29:06:79:b7:b4:
2e:63:5f:30:a3:87:f6:91:ea:19:cf:97:e4:f0:b7:
9c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A8:A7:8D:F3:90:F5:C8:53:B6:4E:3C:C5:58:46:D0:83:CB:D6:47
X509v3 Authority Key Identifier:
keyid:DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:79:c9:bc:10:2b:e2:63:b1:c2:63:f7:69:05:00:fa:20:62:
c2:75:d1:cb:0c:3f:4e:1d:70:1e:df:56:d4:ea:09:3d:51:ab:
ef:89:b7:0d:66:b5:67:88:dc:19:cc:4d:51:99:a0:df:83:b0:
3d:6d:9f:4f:c6:74:fe:65:06:4c:35:75:cb:5c:b3:b5:46:b3:
5a:10:7a:48:48:84:59:36:5d:04:b4:c5:61:69:d7:45:a7:d2:
e4:ef:29:6f:60:e5:0c:7e:e5:18:38:42:0f:b5:e6:98:06:fb:
c9:ee:66:1a:96:30:70:27:5e:f0:f1:ed:14:60:34:5b:d7:4d:
83:da:fd:0e:d4:26:84:98:e4:1f:69:98:ce:6f:5c:ee:5a:70:
b4:1c:39:3d:75:02:79:24:a7:ac:76:10:fc:90:c0:ed:88:d4:
ba:eb:67:aa:67:ec:eb:74:96:91:15:b2:cd:e7:94:8e:82:af:
6c:3a:c1:0e:e1:9f:0a:d7:1e:46:55:77:a4:f0:62:ab:95:73:
07:7f:aa:1f:e0:d4:c3:28:5e:76:4c:1a:75:1a:0f:b1:97:50:
c4:96:b6:b6:1a:7a:19:1f:d9:5e:4f:d4:be:02:83:85:32:a0:
39:a9:91:78:bc:ec:fa:28:20:2f:03:63:6d:16:55:cb:5e:31:
d0:20:e5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:12:49 2026 by rpki-client