Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
File: 3A4l4XpRaWkjpcApZnh0CarJqjY.mft (raw, json)
Hash identifier: ghC+q50wnWC82OnUzJZtcSgEXCd3FzYgm2L1164ewHA=
Subject key identifier: 4D:C6:85:F1:7C:10:0E:D6:95:34:4B:DE:87:1B:32:E8:A5:26:D2:B2
Authority key identifier: DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36
Certificate issuer: /CN=dc0e25e17a51696923a5c02966787409aac9aa36
Certificate serial: 01A000935922E7B0DF4B077F64F887A4AB9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
Manifest number: 0D89
Signing time: Fri 14 Aug 2026 14:00:51 +0000
Manifest this update: Fri 14 Aug 2026 14:00:51 +0000
Manifest next update: Sat 15 Aug 2026 14:00:51 +0000
Files and hashes: 1: 3A4l4XpRaWkjpcApZnh0CarJqjY.crl (hash: JbPQLWh6hAIlwNSB1SjCW0O6u0nWKIGrzQXsb0wLWUI=)
2: 8eKxWvb4zfv90IxvIhC6Agnivz8.roa (hash: G16RKdZkVBD70lbGrNUAVc96E/zqs6SATLQUigTHejI=)
3: L7UW-pXnvlYkWrXuWl-BHGTptSA.roa (hash: 1E6LvcCv88x4DMY8tXMsH9q68BaOLR9gOeVWD7ScU5g=)
4: QlpFZfLz1Y4DlrHdUhzjCaGVsGA.roa (hash: gUEpTIDwhLoGCia5nrrt2yolqAa+IzFI1lHWvsOT9xI=)
5: fN8fa7ozPQ5m74ttWUFKBBiIQSc.roa (hash: JResCQGe6T+nLKqGjLFvLBJ3SMA0WiHLKq1Aux/XqUI=)
6: yJQ9nBonMQnEt_O9rr5CmMqvpwA.roa (hash: eo5bnMB5ExtqJKvflsj0G9k/9EeksB8fwhEsz05U4Zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:59:22:e7:b0:df:4b:07:7f:64:f8:87:a4:ab:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e25e17a51696923a5c02966787409aac9aa36
Validity
Not Before: Aug 14 14:00:51 2026 GMT
Not After : Aug 15 14:00:51 2026 GMT
Subject: CN=4dc685f17c100ed695344bde871b32e8a526d2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b4:aa:ab:5a:6a:e4:01:db:cf:58:f8:13:44:
82:57:70:a5:b0:7f:ca:6a:1c:e1:50:6e:90:d2:bc:
af:a5:ce:5e:12:58:1e:a1:fa:1a:37:fd:06:7a:58:
17:ef:92:cf:91:cb:ab:ed:a2:d2:28:8e:3c:60:76:
c4:56:30:f0:63:5c:f0:4f:3e:f1:55:df:cd:2c:33:
ee:c3:35:f2:1b:0f:e8:40:97:ad:94:4c:7e:6b:02:
30:44:d0:15:cb:73:4d:e0:be:7f:57:e3:92:06:4f:
83:80:81:d4:74:16:63:73:7a:c2:47:51:69:8d:20:
df:07:e1:0d:be:b0:e2:c9:ea:f1:45:f5:97:c2:59:
5f:d5:73:2c:e1:59:31:dd:f3:ad:2c:51:ae:1d:54:
1d:2e:c4:5b:20:1b:81:70:a6:e3:72:8c:df:24:c7:
59:cd:66:ba:34:dc:d6:8d:10:08:8e:c2:bc:88:5c:
ab:08:e2:a5:75:6f:97:b9:44:18:10:19:0c:c3:73:
c5:22:90:04:ca:0d:b3:66:0d:64:fe:a3:79:34:a7:
ee:46:ef:b4:c9:15:54:7e:a9:37:68:e7:1a:ca:69:
8d:dc:95:a0:62:f4:3e:75:84:2a:64:2f:20:0d:cd:
cc:d5:66:89:2f:c3:20:00:e1:3e:78:3a:fd:da:3a:
3a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C6:85:F1:7C:10:0E:D6:95:34:4B:DE:87:1B:32:E8:A5:26:D2:B2
X509v3 Authority Key Identifier:
keyid:DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:6d:65:19:1c:6c:80:ac:d9:70:3c:5a:84:b3:c0:ec:bc:a8:
c1:b1:02:9e:14:f3:7f:90:d2:45:36:f1:1c:f5:49:c0:60:56:
6e:12:7c:e9:85:9c:75:94:04:f5:0d:73:8e:bf:3e:cb:c3:9c:
be:06:99:a3:f3:26:0b:77:a7:b7:c4:95:90:15:2d:f2:9c:a6:
c8:89:25:c5:8c:7f:b1:54:d9:fc:4c:68:fc:e7:9c:e9:5c:c0:
83:fa:9b:4d:db:6b:a2:05:88:63:bc:73:a7:08:41:0a:79:b8:
0a:96:af:b5:40:bb:8b:a6:ce:3a:f8:fd:19:53:36:ec:1d:51:
6a:31:71:37:72:d7:49:e7:a4:1c:cf:7b:ee:2f:6d:6c:c2:ee:
75:01:ea:66:93:de:b6:71:e9:b0:b9:68:a3:25:c6:09:a1:9f:
70:8d:fb:c1:87:01:de:98:c7:00:43:cd:82:ed:07:f5:31:a1:
49:53:da:cb:0d:a6:28:dd:fd:86:28:6b:a4:20:ab:f3:e1:c5:
62:fc:61:37:95:fc:4d:93:57:86:05:88:d4:dd:33:92:22:b6:
66:ff:55:95:fc:56:c0:d5:10:1b:fe:c4:f7:96:8d:db:d3:f9:
e9:77:90:42:5f:df:bb:d3:6f:4b:0b:49:c8:ff:62:59:19:e0:
3c:5d:4c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:59 2026 by rpki-client