Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
File: 3erZGbhaEwUdAgi34o3cyzmLFNY.mft (raw, json)
Hash identifier: +UEYqG5btdQ2s5hb0IqeAMm9eMkGphdAbedcoygJ5BA=
Subject key identifier: 4F:2E:54:84:1E:7C:3F:66:00:BD:E9:5B:AC:3E:45:EE:29:E9:A1:2D
Authority key identifier: DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
Certificate issuer: /CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Certificate serial: 01A00093098A1905B8F6431DA06FEEE1889E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
Manifest number: 1A06
Signing time: Fri 14 Aug 2026 14:00:31 +0000
Manifest this update: Fri 14 Aug 2026 14:00:31 +0000
Manifest next update: Sat 15 Aug 2026 14:00:31 +0000
Files and hashes: 1: 3erZGbhaEwUdAgi34o3cyzmLFNY.crl (hash: cG/iNU463mn3rp7FMPebAtChk29UTKx7KHIIAr+96DU=)
2: iKwLG1q1sDs9tvR7rIxpNbBHq4g.roa (hash: 5Al8Pm91tYMp0+j7fJGmguSqWX96C92TH8gJMDHEyyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:09:8a:19:05:b8:f6:43:1d:a0:6f:ee:e1:88:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Validity
Not Before: Aug 14 14:00:31 2026 GMT
Not After : Aug 15 14:00:31 2026 GMT
Subject: CN=4f2e54841e7c3f6600bde95bac3e45ee29e9a12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b7:cc:29:ad:d5:c8:e6:17:f7:5f:ca:24:0c:
de:f9:4e:02:af:36:f4:aa:af:56:91:89:c0:a1:7e:
36:5f:db:71:1e:9d:8d:d1:c7:fb:b8:75:dc:9c:3f:
83:58:bc:d5:9d:68:14:48:04:00:49:6a:3a:99:d1:
bf:5a:90:8c:0b:a1:b4:d9:b5:93:f2:84:27:db:e0:
32:51:60:9d:f7:09:31:b2:a0:76:94:cc:f2:fc:1d:
b0:f3:05:6f:42:46:71:52:43:d0:37:65:9f:35:38:
7f:0b:04:0e:ed:0c:44:f6:31:1b:06:8a:96:77:81:
fd:b0:6c:44:7b:fa:48:fa:2a:8a:00:47:19:12:11:
ff:14:de:15:b9:5f:d7:9f:58:2d:64:bf:3a:de:19:
61:36:12:19:f1:67:e2:19:03:3f:78:da:dc:5c:51:
c9:5f:b2:09:8c:e0:b6:f0:7e:bc:f6:fe:af:1b:f5:
f7:72:31:64:29:14:82:30:3e:e8:56:e2:1d:5a:bd:
d5:10:eb:c0:6e:bc:73:e1:81:a9:e9:24:d2:40:ea:
68:d6:c9:4e:72:91:69:b6:68:79:dd:f9:97:81:eb:
de:66:d2:89:e8:20:23:9a:32:29:bf:46:dd:b8:e4:
fe:be:39:cb:c2:d7:cf:ff:3e:e4:ac:f4:76:a8:f5:
11:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2E:54:84:1E:7C:3F:66:00:BD:E9:5B:AC:3E:45:EE:29:E9:A1:2D
X509v3 Authority Key Identifier:
keyid:DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:56:87:66:fb:90:2a:e0:73:fb:83:da:48:46:34:82:80:ca:
ca:e9:27:6d:57:4c:36:ad:6b:17:b0:ff:78:8c:81:88:a2:f8:
9f:a3:7d:17:89:6f:d4:3c:72:21:9f:5d:05:5f:3f:a9:5e:29:
c6:a2:f4:d4:9e:8b:4d:f0:f6:88:ce:46:68:9e:af:58:35:7b:
68:05:30:79:e4:47:e7:68:b1:0b:af:9e:d6:ce:c4:d6:2b:8e:
7d:6d:40:90:c4:76:04:31:b7:f6:8d:a6:cf:d1:4f:52:88:ce:
91:95:a0:35:29:42:63:cd:af:99:a7:bf:49:f9:05:26:92:df:
07:31:21:6b:8e:bc:37:34:73:76:bb:46:6d:89:69:8a:0b:a7:
47:10:25:c9:27:a7:1d:f8:20:9e:df:e2:1e:20:68:18:6d:85:
ca:2a:c3:ed:f8:34:75:8b:f8:6c:66:ea:b0:26:39:e2:d4:34:
e2:e6:b0:b8:5c:aa:fd:18:96:ae:ab:bb:b5:14:2a:62:7b:ce:
dd:7c:e4:16:99:9d:f1:57:99:9e:e3:8f:60:fe:aa:b2:01:67:
83:e1:13:9e:f5:04:c4:5e:c9:41:4e:ca:01:ec:14:af:80:ff:
9f:8c:ed:69:3c:27:1e:b3:7c:ef:7d:7d:0b:a5:dc:74:28:2f:
59:2a:b3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:46 2026 by rpki-client