Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/bb476e-4d66-4672-b1e1-b19e9edcbb34/1/3kX5u4JjMlKIEVvl5OV3-AvJpc0.mft
File: 3kX5u4JjMlKIEVvl5OV3-AvJpc0.mft (raw, json)
Hash identifier: +4DKzyYLDuUYMoH9UIdbukTAyxF235Y2lWGDvvUXr/U=
Subject key identifier: 3D:D0:E8:C1:4A:F0:1C:A9:34:16:DF:48:DA:C0:89:4F:FA:83:85:2A
Authority key identifier: DE:45:F9:BB:82:63:32:52:88:11:5B:E5:E4:E5:77:F8:0B:C9:A5:CD
Certificate issuer: /CN=de45f9bb8263325288115be5e4e577f80bc9a5cd
Certificate serial: 01A0412ACD32854637DDFF63F854F520316C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3kX5u4JjMlKIEVvl5OV3-AvJpc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/bb476e-4d66-4672-b1e1-b19e9edcbb34/1/3kX5u4JjMlKIEVvl5OV3-AvJpc0.mft
Manifest number: 84
Signing time: Thu 27 Aug 2026 03:01:58 +0000
Manifest this update: Thu 27 Aug 2026 03:01:58 +0000
Manifest next update: Fri 28 Aug 2026 03:01:58 +0000
Files and hashes: 1: 3kX5u4JjMlKIEVvl5OV3-AvJpc0.crl (hash: Lm4Lp8xljlsJthKKMBAxL4bsM8sesraLYDb6QohkbGw=)
2: MBj5kGluPT5_HSR9ElprzeHWlR0.roa (hash: bTpK8jvE50MfOz8I4rdcfBf2xLTGRw3SAiHk9+mLUjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/bb476e-4d66-4672-b1e1-b19e9edcbb34/1/3kX5u4JjMlKIEVvl5OV3-AvJpc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/bb476e-4d66-4672-b1e1-b19e9edcbb34/1/3kX5u4JjMlKIEVvl5OV3-AvJpc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3kX5u4JjMlKIEVvl5OV3-AvJpc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:2a:cd:32:85:46:37:dd:ff:63:f8:54:f5:20:31:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de45f9bb8263325288115be5e4e577f80bc9a5cd
Validity
Not Before: Aug 27 03:01:58 2026 GMT
Not After : Aug 28 03:01:58 2026 GMT
Subject: CN=3dd0e8c14af01ca93416df48dac0894ffa83852a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d9:47:c0:47:3d:b0:25:e8:9a:85:8c:71:96:
5c:ea:4e:8e:ad:01:c2:46:a0:1e:d5:47:c1:37:7c:
ad:3e:46:4e:58:91:de:29:74:70:73:fb:ba:ef:6b:
b3:b3:c8:41:33:66:0e:39:71:68:9a:81:ae:0d:63:
b3:56:38:49:ee:96:47:69:38:f3:62:6a:e3:be:01:
8d:60:36:54:e8:fa:dd:bd:9f:43:cd:a9:4c:95:da:
99:9b:55:4b:2b:0f:d2:9f:59:11:f7:fb:c2:f0:3d:
80:d7:e8:77:9a:6b:05:0a:3f:d8:6c:52:20:73:00:
ba:c7:54:cf:db:43:59:bc:9f:1e:0c:8b:a6:c3:b7:
38:3f:2d:ac:66:8c:5b:33:8c:a0:0f:15:22:17:a3:
b9:e8:d8:b8:40:b5:81:6a:7b:1c:75:fa:3e:74:eb:
b3:16:24:28:07:68:06:a3:03:04:e5:35:f0:76:fc:
eb:dc:d6:27:79:96:f6:e3:ff:67:68:b3:b1:0f:e6:
22:82:b2:95:6d:28:7e:65:21:02:1c:5e:70:d5:dc:
37:a4:e5:52:65:43:db:12:d7:a7:f3:03:d5:e3:82:
2e:9d:b2:df:66:a4:14:e3:dc:28:d9:82:27:23:89:
2f:96:a8:11:70:69:65:da:fe:0d:9e:08:9e:96:74:
ce:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D0:E8:C1:4A:F0:1C:A9:34:16:DF:48:DA:C0:89:4F:FA:83:85:2A
X509v3 Authority Key Identifier:
keyid:DE:45:F9:BB:82:63:32:52:88:11:5B:E5:E4:E5:77:F8:0B:C9:A5:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kX5u4JjMlKIEVvl5OV3-AvJpc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/bb476e-4d66-4672-b1e1-b19e9edcbb34/1/3kX5u4JjMlKIEVvl5OV3-AvJpc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/bb476e-4d66-4672-b1e1-b19e9edcbb34/1/3kX5u4JjMlKIEVvl5OV3-AvJpc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:ac:9d:b9:82:f9:12:46:86:1d:44:d3:47:a8:58:0d:52:1c:
dc:d2:d7:9c:46:32:a1:72:28:23:9f:21:19:ed:64:5e:f9:27:
f6:97:10:03:94:f8:8e:0c:5a:d0:2d:8d:a7:86:c9:a0:6e:57:
80:50:18:a2:f8:ec:5b:c2:93:47:25:c0:f4:fa:3f:c5:ab:a8:
f3:fc:9c:a8:3b:b5:bf:20:5b:76:4c:0d:b3:8f:e6:15:d1:8f:
af:55:e0:b8:b8:13:4b:45:64:ed:74:56:04:fc:a5:dc:12:f7:
e3:bd:f8:f9:ef:47:21:38:03:d1:f9:67:80:3a:29:1a:ad:df:
3c:cf:89:36:e8:ae:7e:ee:f6:d2:46:31:10:e9:41:5d:b1:09:
4c:16:99:8a:44:fd:a8:3b:05:16:a3:d8:3b:4d:5c:3a:0f:b8:
4a:6d:7a:e3:18:48:d5:66:9b:eb:ac:8b:dc:8a:14:c9:56:b7:
88:9e:ce:de:b8:00:37:b5:89:44:f5:81:d2:27:7c:07:76:94:
c8:53:e7:cd:b3:3f:d1:4c:27:46:1d:f1:8b:f1:52:28:75:5d:
32:c1:22:27:1d:10:d7:9c:e6:22:0c:a4:fd:6c:c2:23:3a:f6:
66:da:19:2f:22:71:75:2a:01:7d:b2:ba:c1:0f:0b:21:ce:a3:
0b:ff:89:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:47:07 2026 by rpki-client