Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
File: 3A4bkNUSzDQC92FBQGKXleTUrEw.mft (raw, json)
Hash identifier: 5HU/TCOMe/WBnPm5cKSTxaSGE8JzChJm4YQ+y/oZSyg=
Subject key identifier: 1E:3D:3D:02:BB:B5:B4:0D:65:B0:CA:A7:E7:13:22:71:1E:19:C3:97
Authority key identifier: DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
Certificate issuer: /CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Certificate serial: 01A127678799525A577AC6AE0E71B1EA23D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
Manifest number: 15AB
Signing time: Sat 10 Oct 2026 20:00:58 +0000
Manifest this update: Sat 10 Oct 2026 20:00:58 +0000
Manifest next update: Sun 11 Oct 2026 20:00:58 +0000
Files and hashes: 1: 3A4bkNUSzDQC92FBQGKXleTUrEw.crl (hash: aQLPn1B/cQd4Zjh3zmbhUUiAKtyiPdpdpqITo+JuM6M=)
2: oglaQX4nFsIGr-Rok7QLUW7-tlM.roa (hash: s+KJpOp9hYCyRUjA+Of2ZWgASyr4epw2ZvVJ2zuqMSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:67:87:99:52:5a:57:7a:c6:ae:0e:71:b1:ea:23:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Validity
Not Before: Oct 10 20:00:58 2026 GMT
Not After : Oct 11 20:00:58 2026 GMT
Subject: CN=1e3d3d02bbb5b40d65b0caa7e71322711e19c397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d8:54:c9:bb:f5:e1:c6:ce:19:0d:73:2e:b1:
39:46:2b:d9:c3:85:3d:25:d7:32:f9:d9:41:dc:63:
1b:cc:8a:3a:65:c1:f2:59:ea:50:f4:c0:a4:6c:a6:
0e:65:56:cc:ae:90:91:c3:c6:8f:df:c8:ef:75:0c:
24:65:c3:37:df:88:eb:9f:02:41:e3:cb:72:f4:16:
d2:dd:e1:21:92:ae:3b:27:96:5f:78:bf:93:8e:f3:
9d:70:0f:b4:37:e4:15:a5:4d:0f:c0:27:85:96:94:
94:65:0a:bb:1d:b3:cc:3f:48:a3:13:48:37:c3:d6:
1e:f6:0c:b9:37:f8:c2:15:4b:72:10:a9:99:7f:6b:
79:bf:ba:ab:ca:6f:ca:6b:0a:6c:f4:25:48:09:60:
24:23:43:f2:31:b6:9f:5f:40:a6:f8:11:c2:23:66:
6f:67:1a:f7:f6:ea:bc:fa:d8:c6:fd:a5:0a:98:0c:
5b:b5:bd:46:a5:3b:18:5b:d4:da:9e:eb:25:9e:d2:
44:3d:9e:5a:a7:72:1a:59:d5:8f:ad:c8:4c:6a:98:
c2:72:f4:e3:22:ff:46:48:d6:90:09:8f:71:50:86:
6e:be:07:80:be:71:26:5e:ed:d6:4d:24:ba:ea:64:
77:9c:70:a9:0f:ff:86:9b:90:8b:c0:8f:4e:3f:35:
f8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3D:3D:02:BB:B5:B4:0D:65:B0:CA:A7:E7:13:22:71:1E:19:C3:97
X509v3 Authority Key Identifier:
keyid:DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:84:bc:f2:7b:9a:5b:f6:83:2c:8c:5b:ec:7c:93:37:1e:7d:
ac:e0:02:ca:e3:0d:cb:eb:c5:2e:9e:08:83:6e:fd:df:6d:34:
c6:18:b9:af:9b:e5:d2:b7:2d:16:c3:26:cb:75:7b:cb:cc:17:
0a:6a:5d:5c:9a:6b:4a:a2:47:62:c4:42:bc:ca:c1:4c:84:ff:
7e:05:f6:5e:89:71:a7:be:02:03:9c:1a:51:b0:49:45:3d:4a:
c2:bf:91:68:58:23:5f:ca:4c:89:0c:c4:f1:48:ed:30:8a:64:
9e:97:33:53:f6:93:20:10:a8:54:1d:f7:24:7f:cf:83:6c:ad:
1b:7c:d0:e4:5d:20:8f:8e:7c:3c:8f:b5:c1:0b:98:84:63:b5:
23:db:71:2a:2b:63:f9:17:3d:05:a8:15:ca:f5:41:99:ab:c8:
20:82:9f:38:92:95:2e:77:1c:2e:a0:0e:88:88:e7:e0:29:2b:
d8:45:44:62:d4:1d:14:f5:b7:c8:18:8a:a4:49:72:41:51:ea:
56:d8:cb:89:0d:0b:1f:c2:b7:f1:4b:0b:9e:68:ba:a0:ad:77:
c4:9e:36:c5:47:d5:67:70:1d:5a:15:8b:18:31:ff:82:45:13:
d3:65:6f:c9:5e:10:74:52:38:48:76:3c:b1:e6:b9:45:2f:4f:
25:e7:30:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:18:14 2026 by rpki-client