Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
File: 3A4bkNUSzDQC92FBQGKXleTUrEw.mft (raw, json)
Hash identifier: bOvpPIKpqmcHnzQxf5Un9cpso5RX3kzU4AAV70BheRk=
Subject key identifier: BE:EB:70:4E:7A:78:AE:1B:6E:75:45:FB:A9:82:45:B9:48:11:A8:29
Authority key identifier: DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
Certificate issuer: /CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Certificate serial: 01A001DD2D7F4D74B5677F94DE3AA7AE4B3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
Manifest number: 1513
Signing time: Fri 14 Aug 2026 20:01:07 +0000
Manifest this update: Fri 14 Aug 2026 20:01:07 +0000
Manifest next update: Sat 15 Aug 2026 20:01:07 +0000
Files and hashes: 1: 3A4bkNUSzDQC92FBQGKXleTUrEw.crl (hash: b0h/huHFppLrR0zkCoN4g9OYFzF82H6zlXGaN9mft2I=)
2: oglaQX4nFsIGr-Rok7QLUW7-tlM.roa (hash: s+KJpOp9hYCyRUjA+Of2ZWgASyr4epw2ZvVJ2zuqMSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:2d:7f:4d:74:b5:67:7f:94:de:3a:a7:ae:4b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Validity
Not Before: Aug 14 20:01:07 2026 GMT
Not After : Aug 15 20:01:07 2026 GMT
Subject: CN=beeb704e7a78ae1b6e7545fba98245b94811a829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:75:37:cd:dc:dd:2f:f5:ea:7a:87:6f:8f:31:
41:17:9a:d3:12:bc:cb:34:a1:2a:cb:b4:fe:9e:72:
d8:79:f0:d8:67:f4:9e:04:72:d2:75:00:a5:86:0c:
56:60:8f:5b:72:f3:dc:87:59:91:f8:65:7c:fd:fe:
d2:b8:0d:a2:2e:7a:11:a6:7c:ba:6b:b2:90:70:03:
56:22:92:20:59:a9:61:9a:61:ec:98:38:70:ef:29:
48:13:5d:a9:da:fe:49:c7:e8:2e:9f:11:3d:f1:8b:
96:9e:d3:76:07:9a:ba:4f:e8:d4:b8:cb:1c:87:62:
e3:7a:70:0d:bd:97:2c:85:42:ae:69:23:28:8a:03:
7c:9b:33:ea:51:a5:35:42:04:4b:6d:6d:c1:b1:b6:
99:20:f2:7f:e8:1a:0e:4d:32:e2:d6:e3:f6:4c:94:
eb:4e:32:0a:9d:0e:82:15:05:64:2f:8d:10:52:a6:
42:69:b8:3d:8d:c8:d5:00:f1:c4:1f:5f:c9:af:e7:
57:c2:c9:20:49:93:0c:24:f6:ff:1f:be:4a:85:47:
34:13:b5:d4:c6:f3:a5:3d:b7:11:2d:cd:00:fc:3d:
8e:e6:9d:5b:e7:99:e4:f2:3b:f5:02:18:ce:50:b8:
f2:90:9e:29:ae:95:a2:0a:75:0e:fd:ab:f6:28:94:
11:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EB:70:4E:7A:78:AE:1B:6E:75:45:FB:A9:82:45:B9:48:11:A8:29
X509v3 Authority Key Identifier:
keyid:DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:76:ff:1f:3f:09:d1:8e:f2:a5:d7:1c:c5:05:31:1c:5c:4b:
68:b7:16:57:69:39:a3:16:3a:91:4f:c1:d9:09:75:86:60:f3:
3e:6a:1a:c7:5d:f1:91:6e:23:82:b1:2d:a9:ce:af:91:fd:cb:
c3:c9:3f:09:20:a2:cb:df:6a:80:6c:72:16:dd:07:93:3e:cc:
0d:1b:ad:14:df:79:49:7f:52:27:75:8e:12:b8:3c:08:d0:9b:
22:a8:d6:76:bb:a6:75:35:1f:a1:fc:48:e4:26:66:23:7d:18:
80:a7:5d:7f:43:34:0c:8e:d1:79:5b:64:b3:60:6e:76:f3:3f:
a7:ef:f0:d2:7e:89:7c:05:92:cb:55:ca:d2:31:e2:fb:32:c0:
82:3f:33:a0:83:df:01:c3:23:68:9c:9d:7e:9c:d8:52:39:61:
a2:22:cd:f5:09:c8:90:36:3c:ef:ff:f8:ea:03:d5:26:9f:7a:
dd:ad:fb:9f:86:9f:c5:44:9a:84:8c:f6:4b:de:5b:da:f8:68:
cb:03:84:fd:28:79:66:68:c4:9c:91:f6:8f:0a:aa:72:04:5e:
3a:84:57:2a:7b:46:29:2a:45:b6:6b:31:8f:10:d7:8f:c1:3f:
8a:87:06:ef:62:41:0e:c1:63:32:b0:0e:21:fd:d6:56:35:3c:
7b:a0:fa:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:35:56 2026 by rpki-client