
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
File: 3iuimqARP6_TcNhl-0REmHtHMIo.mft (raw, json)
Hash identifier: E+euGoklJdWtm0fGS1WcuWn9dRjhqvGShxRFTFIZK8c=
Subject key identifier: 8C:38:C0:0D:07:C9:C7:32:CC:AD:53:6F:C1:A2:4A:DB:53:BD:CA:C7
Authority key identifier: DE:2B:A2:9A:A0:11:3F:AF:D3:70:D8:65:FB:44:44:98:7B:47:30:8A
Certificate issuer: /CN=de2ba29aa0113fafd370d865fb4444987b47308a
Certificate serial: 01A001A609FF45AF76A6D65D9C2B648604C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
Manifest number: 0E6C
Signing time: Fri 14 Aug 2026 19:00:53 +0000
Manifest this update: Fri 14 Aug 2026 19:00:53 +0000
Manifest next update: Sat 15 Aug 2026 19:00:53 +0000
Files and hashes: 1: 3iuimqARP6_TcNhl-0REmHtHMIo.crl (hash: fmrK2LdejOF/zZOlHYps1KQxvo5vUNh8/OXliwB9H98=)
2: c52XhO4YGCrU48r6aoFS0wJifx0.roa (hash: 4+paDSnGo7aoDvCfZSAugeN0kcY8+2h3yijdRS9k2EQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:09:ff:45:af:76:a6:d6:5d:9c:2b:64:86:04:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2ba29aa0113fafd370d865fb4444987b47308a
Validity
Not Before: Aug 14 19:00:53 2026 GMT
Not After : Aug 15 19:00:53 2026 GMT
Subject: CN=8c38c00d07c9c732ccad536fc1a24adb53bdcac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b0:d8:e9:55:23:4f:79:84:a2:44:18:c7:04:
35:ea:26:77:e7:ab:9e:63:71:99:fa:a0:9d:42:43:
82:42:8f:d4:5e:c2:cd:6e:2f:4a:17:2a:d0:d6:e3:
3e:0b:71:20:70:d8:98:c1:fa:d4:cb:9a:80:c1:8f:
0b:b2:14:69:f5:07:da:3f:88:41:66:87:a7:92:8b:
18:b9:6d:13:5e:eb:f2:03:06:da:da:d5:d4:03:23:
e6:98:59:eb:59:3e:2b:27:c8:8c:a9:4b:a2:9c:5a:
a6:2e:0e:f7:3b:32:39:ab:39:62:47:ef:e9:79:8f:
a7:34:54:cb:fa:80:8a:58:49:fc:a3:17:cb:0c:6f:
fe:44:d6:88:57:56:7e:6d:9e:86:7b:1d:b0:4f:3c:
7d:d2:6b:62:07:45:aa:bd:52:46:15:86:9a:bc:a8:
22:ea:42:54:63:c7:1e:52:14:8f:fb:fe:8b:77:30:
9a:dc:9f:c9:6e:0f:4f:07:92:37:30:c5:ad:dd:0a:
32:2f:7b:c6:8d:74:5e:43:98:33:4c:c1:24:1b:e3:
9f:6c:79:90:37:ab:30:59:b7:89:66:e9:c2:59:b9:
b2:7b:72:9a:36:34:22:30:21:c6:78:9f:f3:cf:54:
ec:dd:b6:72:df:dc:13:70:56:c9:01:73:db:1a:34:
ce:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:38:C0:0D:07:C9:C7:32:CC:AD:53:6F:C1:A2:4A:DB:53:BD:CA:C7
X509v3 Authority Key Identifier:
keyid:DE:2B:A2:9A:A0:11:3F:AF:D3:70:D8:65:FB:44:44:98:7B:47:30:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b5:2b:4f:f1:bc:9f:0c:7e:2c:c6:31:a3:6c:bc:53:b4:19:
72:dd:ee:8a:93:8d:7c:3d:cd:ca:74:1d:8e:40:09:b6:0f:c4:
83:3c:c9:24:71:bd:ea:96:bd:59:7b:37:01:18:9d:28:93:8e:
9a:fc:69:66:30:b8:92:13:27:20:53:7c:6e:5d:45:5d:46:73:
e9:72:92:43:16:b8:99:44:db:bb:ee:b6:aa:90:62:42:6a:59:
f6:0c:89:05:59:51:30:6c:31:03:a9:cc:a3:7a:dd:77:98:cb:
6f:f6:59:65:41:0b:6a:23:ec:5d:a5:5e:f2:af:0c:2f:15:19:
03:17:68:5b:65:fb:0d:2d:56:11:37:0f:ee:52:98:8d:bd:8a:
27:4b:60:0e:46:92:5a:3e:02:2b:6c:bd:15:80:ae:69:92:cd:
8a:28:4f:a5:a2:ae:eb:00:08:c6:22:5f:93:5a:81:69:1d:9c:
5b:08:ac:94:0d:1a:6f:fa:7d:f3:a1:9b:f7:98:4c:52:ec:97:
d4:47:a7:bf:41:73:02:06:f0:17:35:69:44:e4:42:36:eb:1a:
80:cc:c3:3e:a5:06:71:57:d5:e4:e5:59:c1:ab:39:f8:ad:61:
33:0d:1d:e0:b8:86:15:f5:ef:5c:d7:a4:0e:5a:21:21:c1:2f:
5f:f7:9a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:28:22 2026 by rpki-client