
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
File: 3IScc2nn5SxwUdIdunKYMIvpxCg.mft (raw, json)
Hash identifier: 0Nr6FfKidHw4BWqWHtYmuNyit4mMwq72VJD/o+Ov28o=
Subject key identifier: 9B:BE:E7:C0:7C:CC:6D:6F:2D:91:F7:77:8B:B8:29:88:5A:49:A2:B7
Authority key identifier: DC:84:9C:73:69:E7:E5:2C:70:51:D2:1D:BA:72:98:30:8B:E9:C4:28
Certificate issuer: /CN=dc849c7369e7e52c7051d21dba7298308be9c428
Certificate serial: 01A089B0A0EAC4E23400E4A4FD23DEA8A902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
Manifest number: 1A47
Signing time: Thu 10 Sep 2026 05:00:49 +0000
Manifest this update: Thu 10 Sep 2026 05:00:49 +0000
Manifest next update: Fri 11 Sep 2026 05:00:49 +0000
Files and hashes: 1: 3IScc2nn5SxwUdIdunKYMIvpxCg.crl (hash: psgCKc0eWdpkGbMb2Udj9tU1DLQhZKS9t3iGby2MOlA=)
2: EVEUejBUxMAFSM5mcutAdBHE7R0.roa (hash: qHDy6GnHP2/o9uXwJYd4YuP8Cxkyp2quR/Jtu60lrfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:b0:a0:ea:c4:e2:34:00:e4:a4:fd:23:de:a8:a9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc849c7369e7e52c7051d21dba7298308be9c428
Validity
Not Before: Sep 10 05:00:49 2026 GMT
Not After : Sep 11 05:00:49 2026 GMT
Subject: CN=9bbee7c07ccc6d6f2d91f7778bb829885a49a2b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f5:77:62:d7:31:5c:92:5d:58:0d:09:af:d3:
dc:27:30:42:61:f0:ef:0b:a9:fc:39:11:3c:9e:e7:
23:8b:fd:d3:aa:42:3d:65:09:9c:c5:c7:bc:47:3b:
d0:65:5e:c7:2d:e2:a8:fc:a6:cf:7f:0a:16:db:aa:
69:dc:18:09:b5:e8:ab:59:42:09:df:13:a1:71:b2:
42:5c:b5:62:75:ed:55:d2:f1:c6:26:22:53:ae:6f:
7d:8b:a2:e7:47:35:6d:a7:c8:c5:b7:ad:d3:cd:90:
9f:5f:26:cd:c0:23:b6:30:f1:da:ab:6d:fa:ae:e7:
23:d5:62:5a:07:60:70:b3:6a:0d:a4:90:ef:15:33:
c0:5b:90:91:dd:0c:82:3b:10:87:9c:ed:42:74:00:
1d:0f:3a:65:93:43:c7:72:2b:f8:c7:d6:03:e1:82:
35:28:84:ef:67:ab:fd:e3:54:da:fa:46:06:57:4e:
50:84:c4:21:e7:8e:ec:a9:95:eb:b6:39:4a:b8:49:
3a:23:42:6e:01:e8:d6:15:c2:d3:39:f2:f3:85:46:
40:09:51:00:be:5f:9c:7a:f1:71:65:93:51:a4:d4:
5c:18:73:dc:7d:bb:fd:a3:48:e4:17:4e:31:0b:cf:
26:6c:20:a2:9b:9b:10:7a:1e:e7:ab:f8:78:79:45:
fb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BE:E7:C0:7C:CC:6D:6F:2D:91:F7:77:8B:B8:29:88:5A:49:A2:B7
X509v3 Authority Key Identifier:
keyid:DC:84:9C:73:69:E7:E5:2C:70:51:D2:1D:BA:72:98:30:8B:E9:C4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3IScc2nn5SxwUdIdunKYMIvpxCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1be8cf-07ec-47cb-8f63-d3a06d1f5b4b/1/3IScc2nn5SxwUdIdunKYMIvpxCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:23:32:c8:17:d3:69:4d:d5:63:84:3c:d0:fe:82:ad:74:76:
68:aa:58:d6:01:93:d8:8e:12:e6:ca:43:43:06:70:5a:e3:b5:
69:ee:aa:c7:b5:f8:7d:b2:b5:b1:1f:c8:fa:d7:d2:75:81:06:
87:bf:0c:ab:72:fb:1d:e9:93:61:7e:17:72:ca:29:2c:30:7d:
32:d7:a6:d0:32:15:2e:2a:82:d4:26:c7:b8:d0:c8:8a:db:03:
ac:8f:0f:20:88:ba:e4:23:df:c8:a8:a8:4c:8c:cd:d7:52:02:
51:37:85:80:29:fe:b6:ab:2d:0c:e4:f0:84:e2:39:76:6c:36:
c0:2f:a1:d9:bb:7c:d8:94:16:6e:f4:e9:79:c6:00:18:ec:b9:
b8:86:dc:8a:59:7a:33:26:28:e0:f8:c8:45:0e:c0:2a:e7:03:
9d:38:2f:d2:7c:9e:26:7c:c1:68:ac:92:2b:89:ed:b7:b7:46:
74:65:39:8c:89:c2:4e:96:45:75:e1:80:64:8f:b4:37:32:50:
e5:12:61:19:67:ee:75:1d:17:eb:ad:46:ee:8b:63:aa:ac:97:
bb:f4:07:d0:5b:f4:2c:ef:d9:95:14:f9:8d:4e:07:b5:23:28:
cc:91:7c:fc:d5:60:ce:d6:d4:34:a3:45:bf:90:86:a0:da:32:
33:45:82:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:35:36 2026 by rpki-client