Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
File: 3K5LBHGmGHLEBBQuH5D1B08NbxU.mft (raw, json)
Hash identifier: xMHy9ERrBrTh0UfvpXsYpDH0g7B9uoYYAVnkvUwTeEM=
Subject key identifier: 51:EA:70:98:9E:DE:97:49:1C:E5:B3:BD:A0:51:66:AF:F5:D1:15:D2
Authority key identifier: DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
Certificate issuer: /CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Certificate serial: 01A000CA3E29B05A8A8BA2C30BC7FBEF1628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 15:00:49 +0000
Manifest this update: Fri 14 Aug 2026 15:00:49 +0000
Manifest next update: Sat 15 Aug 2026 15:00:49 +0000
Files and hashes: 1: 3K5LBHGmGHLEBBQuH5D1B08NbxU.crl (hash: 2U4zQxlmt2SCgQrNOdURml7fKE/IqwE8ZOcD1hHThFI=)
2: 9ZJf1K0dS9GGEr-7vJUqYcT4VlM.roa (hash: 4biyXnO/yjSxTlfFAVtaFC6Bi7sH2DQW0oH896Enc7I=)
3: qsdjnJflN-hqMusJ8mRO3QvIelE.roa (hash: SE6UiCw/dJG6vG+istEe6e9u75qYp7RLjIy5NUM722g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:3e:29:b0:5a:8a:8b:a2:c3:0b:c7:fb:ef:16:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Validity
Not Before: Aug 14 15:00:49 2026 GMT
Not After : Aug 15 15:00:49 2026 GMT
Subject: CN=51ea70989ede97491ce5b3bda05166aff5d115d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8b:94:bd:02:1c:22:e4:39:0f:e4:76:b4:5d:
de:b7:7e:0c:c5:87:50:7b:d4:0c:10:11:59:a9:b5:
08:5e:f2:66:8a:d2:45:e0:1b:4a:6d:77:94:3b:32:
fb:a9:ad:f6:f1:bb:f1:1c:f8:bf:b7:54:a3:92:fd:
c4:a2:e3:c7:b0:c2:20:3d:76:7f:24:64:81:9d:4c:
ea:c9:6d:14:95:71:e9:91:3f:39:a6:fc:16:57:cd:
f2:b4:e8:04:99:b4:c9:bf:98:58:c5:d2:53:d2:3a:
53:20:49:9d:61:18:d7:b1:b3:07:1f:31:13:e0:23:
01:4b:07:67:35:e4:0d:97:9f:fe:ee:05:a0:04:a1:
01:e4:0d:b6:8e:d2:12:b4:26:97:b1:e2:e4:fd:88:
a3:92:81:97:8c:3f:90:ee:39:a5:ef:60:17:e4:6f:
3b:94:0e:58:c2:84:d5:46:f5:75:5a:6c:3b:39:56:
22:26:ef:d6:ab:d3:72:16:31:2c:9f:1f:68:94:2b:
21:b9:17:da:90:3e:42:03:df:fe:65:eb:ef:91:ef:
81:81:d6:81:47:d9:3f:37:b6:ed:5f:cb:04:e1:b9:
00:f9:c8:03:d0:46:dc:48:53:16:fb:71:06:1a:a9:
8b:15:6f:15:7b:25:89:9a:af:ba:59:0d:8d:52:a5:
67:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:EA:70:98:9E:DE:97:49:1C:E5:B3:BD:A0:51:66:AF:F5:D1:15:D2
X509v3 Authority Key Identifier:
keyid:DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:ea:a2:a5:1b:e3:c8:86:df:0a:53:42:7b:b8:71:7f:31:4c:
1c:ab:3b:61:61:5b:fb:e6:d7:a2:e6:35:88:77:a1:23:e0:65:
7a:38:eb:1e:e8:dd:a5:b1:6c:6a:23:ff:35:9f:d3:41:f7:fe:
41:8a:a4:97:3a:a4:37:f5:6c:e2:62:f4:3d:fe:cd:1f:5b:65:
e6:84:3f:c9:09:4c:fa:51:3e:98:1b:30:e7:33:c5:c7:62:c9:
5d:5c:1a:bc:98:46:f4:df:48:79:72:7c:9f:7c:6d:58:50:31:
14:d3:b4:4d:2a:d3:26:0c:2b:5e:fe:a2:27:d9:73:f6:60:27:
3e:9a:66:00:13:b8:b2:6f:b1:27:e8:70:65:e4:31:c7:2a:f9:
30:54:73:13:40:7c:d9:a6:59:93:be:a9:b9:4f:01:e4:c8:a1:
87:e2:a1:f5:d6:a3:33:0a:5f:81:a1:0e:42:94:e3:19:fc:00:
8e:eb:4a:ce:91:af:e5:8a:e6:16:81:7e:be:f1:bb:5d:aa:41:
1c:6f:1d:38:87:97:14:bd:8f:07:4c:1d:37:0c:f2:0c:91:e6:
25:42:c4:0b:c8:30:5f:e1:71:64:dd:16:a0:83:a8:a3:09:5e:
6f:da:c2:cf:62:49:8b:3f:88:60:3d:a7:1d:12:06:97:6e:17:
37:98:24:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:43 2026 by rpki-client