Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft
File: 3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft (raw, json)
Hash identifier: 7aZZLYuE586PVMIYLys9P1eggXFLjb4ERHcmJk46q+Q=
Subject key identifier: EA:12:9B:46:B3:19:73:A7:10:2D:6D:5D:01:41:CA:8D:9F:3A:74:A7
Authority key identifier: DF:15:8D:CB:29:0E:C5:AE:7F:66:C1:FA:0F:8D:96:32:11:DE:EA:54
Certificate issuer: /CN=df158dcb290ec5ae7f66c1fa0f8d963211deea54
Certificate serial: 01A03FA8EEC93E66C4CEF35AD33D4225D1CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft
Manifest number: 0534
Signing time: Wed 26 Aug 2026 20:00:30 +0000
Manifest this update: Wed 26 Aug 2026 20:00:30 +0000
Manifest next update: Thu 27 Aug 2026 20:00:30 +0000
Files and hashes: 1: 3xWNyykOxa5_ZsH6D42WMhHe6lQ.crl (hash: VZzAxSy9CetndpgX01iwVu3O76QvUnhkm7mJqdQViUA=)
2: jMWE95cdXToEzGHRnrJGNVd_shY.roa (hash: ggn3Fl2wZwmOiQ6vfdHYpUj0Mg0aJO8O6vjWtwjQjkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:a8:ee:c9:3e:66:c4:ce:f3:5a:d3:3d:42:25:d1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df158dcb290ec5ae7f66c1fa0f8d963211deea54
Validity
Not Before: Aug 26 20:00:30 2026 GMT
Not After : Aug 27 20:00:30 2026 GMT
Subject: CN=ea129b46b31973a7102d6d5d0141ca8d9f3a74a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:47:20:d4:f1:64:7f:71:ef:3f:9c:14:40:9b:
c3:fa:90:72:d8:47:a8:e4:bc:b5:7b:06:8d:04:e4:
5b:17:8d:d3:0f:fb:97:79:f1:34:b8:82:9f:ad:eb:
5d:3c:94:87:9b:a8:2a:be:cb:9f:2d:12:ef:f1:55:
20:54:fb:f7:02:a8:31:a3:9d:fa:6c:e3:02:55:e7:
5c:98:ca:2d:3c:7a:e8:51:b5:47:39:0d:40:75:6b:
99:aa:b1:e6:9f:a8:f4:25:b4:6a:0f:03:5a:2e:99:
43:7d:3d:06:18:8b:f0:47:25:63:05:02:d6:8f:4c:
58:fe:74:f9:e3:67:89:a3:ec:1d:23:72:87:af:db:
3a:15:c8:c9:89:9a:4d:2e:2a:00:ed:00:21:d0:44:
e7:f1:2f:70:75:6c:e7:ff:b3:1b:5e:e2:ec:38:fc:
0a:32:42:61:30:c2:2a:08:b8:3f:56:03:34:61:c0:
a5:a8:39:8c:15:18:82:c5:95:95:e8:be:db:b7:a3:
92:74:ae:95:51:bb:85:f9:55:1c:16:16:4a:b0:67:
e3:be:c1:df:99:77:05:e3:5c:77:7d:e9:65:30:2c:
11:5a:2b:4b:98:6b:a5:f3:38:77:4b:bd:3f:34:c4:
11:e9:61:94:50:1e:e0:6b:dd:01:32:aa:1a:63:db:
93:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:12:9B:46:B3:19:73:A7:10:2D:6D:5D:01:41:CA:8D:9F:3A:74:A7
X509v3 Authority Key Identifier:
keyid:DF:15:8D:CB:29:0E:C5:AE:7F:66:C1:FA:0F:8D:96:32:11:DE:EA:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:12:20:1e:72:7e:37:f8:92:13:b3:77:c3:0e:01:36:5a:0c:
68:66:f7:61:c8:11:20:c2:ef:18:ef:bc:02:97:1f:3d:ef:de:
be:c3:d9:88:78:e2:07:34:77:64:1e:80:ff:6a:da:22:8f:db:
60:19:f9:8d:d7:d3:e7:75:75:4c:ad:53:cf:9e:b5:4d:cd:2d:
dd:f2:fc:e9:42:a6:0b:8a:5e:92:be:64:39:92:01:b2:5d:7a:
ba:86:41:55:7e:c5:ae:be:ed:ad:df:29:49:e8:fa:5c:50:66:
1d:53:b4:64:3f:8e:9f:ac:02:41:da:26:26:94:94:b0:92:f7:
4b:bf:a0:a5:f9:8b:65:92:5e:37:dc:7d:c9:25:1a:ba:e7:f6:
78:e0:f4:32:7b:d4:3a:97:0f:e4:a2:c0:8d:2a:8f:3d:78:ac:
d2:a5:ee:a7:73:28:d9:d7:1f:c0:d3:a0:f1:15:f5:64:d5:76:
f6:ba:c2:8a:74:bc:03:fd:2e:27:f3:14:bc:d3:e4:a9:84:07:
92:ea:2f:aa:92:9f:25:67:00:7a:f0:fb:7f:42:38:0f:26:03:
96:fa:b9:07:d5:7c:ec:68:3c:fd:5d:ec:fe:a3:f2:14:58:40:
37:94:19:53:6b:7d:60:27:db:2d:d6:9e:7a:7a:37:e4:92:a4:
f2:c3:8b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:52:55 2026 by rpki-client