Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
File: 3A4bkNUSzDQC92FBQGKXleTUrEw.mft (raw, json)
Hash identifier: g6pDg9S9Z5d8cBexAC35eYD18aI7BYRY4A+CG/WjMfQ=
Subject key identifier: F8:CD:C7:DC:91:9C:7F:EC:7D:39:B4:B3:EC:A7:D1:7F:5B:58:54:B9
Authority key identifier: DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
Certificate issuer: /CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Certificate serial: 019F1265096B26E4B50E65B8BD6DAAA6A3F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
Manifest number: 1497
Signing time: Mon 29 Jun 2026 08:00:39 +0000
Manifest this update: Mon 29 Jun 2026 08:00:39 +0000
Manifest next update: Tue 30 Jun 2026 08:00:39 +0000
Files and hashes: 1: 3A4bkNUSzDQC92FBQGKXleTUrEw.crl (hash: dqRPvlcbDX00icRnGUYHP1dNnUwSjncCHaHDZ0MzWP4=)
2: oglaQX4nFsIGr-Rok7QLUW7-tlM.roa (hash: s+KJpOp9hYCyRUjA+Of2ZWgASyr4epw2ZvVJ2zuqMSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:09:6b:26:e4:b5:0e:65:b8:bd:6d:aa:a6:a3:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Validity
Not Before: Jun 29 08:00:39 2026 GMT
Not After : Jun 30 08:00:39 2026 GMT
Subject: CN=f8cdc7dc919c7fec7d39b4b3eca7d17f5b5854b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3d:80:85:ff:2a:fe:1f:13:3a:bf:bb:a0:b6:
61:58:6c:33:02:a4:27:07:55:fe:17:da:42:4d:97:
59:9f:dd:ad:59:ac:5f:e7:a9:ab:5a:8f:1e:16:20:
3b:21:ad:05:42:8c:31:67:e9:65:cf:c3:b8:dd:00:
af:7d:43:26:3f:80:34:62:3b:1a:5e:0d:33:48:11:
9c:2e:47:78:96:02:40:2f:d8:b7:53:eb:76:98:0f:
fa:59:f0:5d:51:0c:1c:17:3a:20:24:95:8c:64:64:
9b:14:ad:14:04:7c:d7:42:90:2f:06:8f:b5:6d:aa:
35:37:a5:0b:2f:b1:9a:f0:d4:87:07:ec:a3:fb:d0:
60:04:73:66:45:1e:7c:80:5f:db:f9:eb:b3:b0:52:
fc:09:82:dd:bd:7e:7a:b4:7e:3d:63:8d:24:d9:37:
a8:d2:4e:14:ce:9c:22:a1:6b:c8:95:33:4c:77:35:
2c:b0:ad:81:0d:f1:c2:9e:04:ed:db:76:d9:b0:88:
bb:ef:fb:b9:68:13:35:b0:cb:ce:80:9b:87:84:de:
b6:44:ea:11:23:18:ce:81:e9:8b:f3:68:c5:2a:08:
ce:ee:e6:e0:e7:1f:77:6b:a3:53:09:5f:59:45:04:
e7:29:60:2f:dc:45:a5:11:31:73:fb:7a:72:9f:4f:
6f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CD:C7:DC:91:9C:7F:EC:7D:39:B4:B3:EC:A7:D1:7F:5B:58:54:B9
X509v3 Authority Key Identifier:
keyid:DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:4b:88:7b:fa:a9:4e:7b:16:55:43:16:0b:11:e6:93:06:65:
ee:36:bc:dc:86:96:48:0c:b6:10:f7:4a:a3:2d:2b:46:44:89:
a8:13:8e:87:33:61:d1:74:d6:0f:2e:87:38:23:c8:7a:de:35:
f9:b5:6e:be:f8:fe:32:6f:7a:17:18:4a:df:e8:fa:cd:d5:81:
0e:a9:af:cd:3c:30:7f:c5:4c:9f:63:cc:b6:21:0a:02:39:17:
5b:4c:45:35:f9:12:71:a6:26:1a:38:3d:8e:b4:f1:b2:92:e6:
0a:98:8f:a4:75:61:16:b2:08:c2:3a:56:d2:8d:ea:d4:1e:78:
38:60:3a:86:55:e6:03:25:f4:91:39:69:7f:05:44:42:6b:eb:
6e:3d:a6:25:af:e5:43:72:97:70:54:88:c4:2d:a4:e4:84:f6:
34:f9:93:b9:99:46:04:da:72:03:c0:7a:79:9e:e4:21:d6:46:
57:65:09:4f:ff:1e:49:f3:e1:2f:22:ea:43:f1:88:c4:1f:23:
ac:7a:a5:b7:4c:45:24:22:8c:bf:b2:a0:f8:50:99:b1:d5:e9:
93:74:13:90:b5:d7:29:d6:d7:2d:89:8b:06:d6:64:cb:da:aa:
8e:b2:ef:15:5a:c8:70:14:17:03:62:ad:aa:ae:2a:8a:8b:58:
04:09:76:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:44:57 2026 by rpki-client