Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
File: 3KLzDk5paSsbT-zrrpH9VgS97JM.mft (raw, json)
Hash identifier: oeSawyVWQdOTMb/vBdiHClbLHOht9ObUGsPei1bQg9Q=
Subject key identifier: 96:68:BC:C8:E6:21:D2:4B:53:C8:83:FB:33:78:1D:35:82:F4:B1:F3
Authority key identifier: DC:A2:F3:0E:4E:69:69:2B:1B:4F:EC:EB:AE:91:FD:56:04:BD:EC:93
Certificate issuer: /CN=dca2f30e4e69692b1b4fecebae91fd5604bdec93
Certificate serial: 01A0E098CE4CB5A54330E61089FD567D8350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KLzDk5paSsbT-zrrpH9VgS97JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
Manifest number: 0A2D
Signing time: Sun 27 Sep 2026 02:01:45 +0000
Manifest this update: Sun 27 Sep 2026 02:01:45 +0000
Manifest next update: Mon 28 Sep 2026 02:01:45 +0000
Files and hashes: 1: 3KLzDk5paSsbT-zrrpH9VgS97JM.crl (hash: XaDLvRG6Ef2ow2omFrzjw5o+3cy8gzlSDk2dqgS89LU=)
2: xSDhChXyrgpPczPrq9N_lmr5FEw.roa (hash: f8x2Ffld+Joqpjyz5VMQ9d3wfsE4pU4+FNaMK65q5CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KLzDk5paSsbT-zrrpH9VgS97JM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:ce:4c:b5:a5:43:30:e6:10:89:fd:56:7d:83:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca2f30e4e69692b1b4fecebae91fd5604bdec93
Validity
Not Before: Sep 27 02:01:45 2026 GMT
Not After : Sep 28 02:01:45 2026 GMT
Subject: CN=9668bcc8e621d24b53c883fb33781d3582f4b1f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7d:40:ce:5d:3f:19:43:78:07:dc:59:8d:64:
4f:ca:39:38:bf:8d:81:a2:da:cb:76:d9:f9:c9:b0:
86:05:3c:0c:33:a2:c3:ab:36:19:35:d3:f1:86:c3:
e7:30:c0:cb:25:a4:83:19:66:a4:c0:36:1e:93:f5:
3a:ee:0b:57:58:61:f9:b4:0c:da:4a:fe:eb:1c:ad:
e8:83:e4:aa:c1:14:bd:fb:2d:22:40:e6:a1:b2:41:
8e:0b:cc:72:91:2b:5b:a5:43:e6:7a:e0:f4:2d:c3:
df:28:fe:9b:de:b5:47:68:f6:2a:57:71:40:d3:4e:
b6:15:9a:bb:17:fd:a8:93:69:be:89:be:c3:e9:c3:
de:b9:0e:00:6f:2e:ab:6c:3e:8e:ed:ce:d2:b3:1b:
7f:82:36:ae:c7:73:15:93:54:f5:4d:a1:57:3d:f3:
89:9f:15:12:43:54:ba:fe:8e:57:95:e3:ec:88:40:
15:e9:39:a2:d1:d1:75:0c:bd:b4:9a:16:01:0a:da:
e8:4e:e9:ee:68:6e:29:08:17:17:5b:1e:22:92:ae:
56:7d:70:5a:dc:ce:8e:85:12:ee:e0:b3:2d:20:c2:
3e:65:a1:03:c9:fc:8e:62:e6:d3:ec:c7:03:ca:c0:
31:e8:03:95:ca:21:36:47:31:8a:61:14:3b:a6:b8:
e2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:68:BC:C8:E6:21:D2:4B:53:C8:83:FB:33:78:1D:35:82:F4:B1:F3
X509v3 Authority Key Identifier:
keyid:DC:A2:F3:0E:4E:69:69:2B:1B:4F:EC:EB:AE:91:FD:56:04:BD:EC:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KLzDk5paSsbT-zrrpH9VgS97JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/036549-45d0-4565-828f-eb3e785d9097/1/3KLzDk5paSsbT-zrrpH9VgS97JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:0d:4b:62:2b:db:00:e7:e8:61:e9:03:06:f0:75:e3:10:b8:
4a:31:ed:4d:63:f6:f9:29:f6:70:95:db:97:91:f9:a0:99:51:
86:8a:5a:2a:98:fe:57:c8:eb:64:d1:89:7d:b6:96:cb:01:a0:
8b:11:01:b9:b2:2b:99:7b:f3:2d:e4:d1:29:7b:85:76:f2:e9:
12:25:67:fe:df:2a:42:69:62:6b:cf:b5:61:90:d5:ca:e4:a7:
ea:4f:0f:a6:67:d4:5d:02:f4:82:bf:6c:59:54:cc:94:48:10:
2a:87:25:8f:96:de:b7:b6:ca:07:ac:f6:f7:bf:55:b9:88:a9:
40:4f:e1:07:85:91:1a:1a:ae:87:c4:06:1f:56:27:f6:8d:a9:
e6:67:5d:04:0d:48:3f:f9:cd:99:ff:3f:40:4d:e0:53:42:fd:
5b:7f:cf:bf:17:d3:09:c1:5b:c2:8b:38:75:02:4b:fc:d8:7b:
51:23:1b:59:40:d1:f9:99:c7:14:f0:d1:b6:8a:b8:1e:4b:91:
30:b2:df:58:34:03:26:2c:2a:4e:5b:c6:ae:08:65:4b:40:a3:
29:b0:33:0f:b3:12:14:82:64:1a:7f:cd:85:1c:1c:0a:c0:31:
44:de:70:b9:c1:1e:36:d2:56:08:b1:d1:92:43:91:5a:01:5b:
f8:38:65:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:57:33 2026 by rpki-client