Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
File: 3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft (raw, json)
Hash identifier: eiZ0pR9L9Kvt9FyLw2Be0beekVQQyFLJUi07PM9T4Js=
Subject key identifier: 20:5E:66:2D:D6:3C:21:39:B1:FE:66:C3:1D:A6:C5:76:D2:92:75:29
Authority key identifier: DE:23:F1:8C:57:6D:6F:A6:09:13:35:33:C0:D0:E3:8D:77:32:C6:52
Certificate issuer: /CN=de23f18c576d6fa609133533c0d0e38d7732c652
Certificate serial: 01A0024AC3E66D71D14ED1B8891BB60D3913
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
Manifest number: 06A9
Signing time: Fri 14 Aug 2026 22:00:49 +0000
Manifest this update: Fri 14 Aug 2026 22:00:49 +0000
Manifest next update: Sat 15 Aug 2026 22:00:49 +0000
Files and hashes: 1: 3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl (hash: U8zaqULVSVmPNHrHfknasLHTPyr1kV0uvYogpLJ/JUw=)
2: GUtmTasoYg9vC_X6TeYo5LqnthI.roa (hash: h4pcOYZGVhmcTnXyyDF08GhSsY9jTxf6Vxsbll0E63Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:c3:e6:6d:71:d1:4e:d1:b8:89:1b:b6:0d:39:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de23f18c576d6fa609133533c0d0e38d7732c652
Validity
Not Before: Aug 14 22:00:49 2026 GMT
Not After : Aug 15 22:00:49 2026 GMT
Subject: CN=205e662dd63c2139b1fe66c31da6c576d2927529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:28:12:b9:77:59:1f:2a:7b:96:41:8b:11:43:
37:5f:db:a5:45:ed:af:71:5d:d7:45:6d:76:a0:88:
60:2a:20:e3:01:5f:c5:b6:45:d9:0b:13:9b:a8:f7:
8b:cf:a8:82:c4:c9:d5:0d:81:c3:4f:1b:3d:8f:3c:
80:ba:ca:51:c7:b1:a7:be:e4:f3:4a:04:fd:e6:d7:
69:af:52:d7:92:b1:08:04:91:23:e7:5a:64:02:60:
cf:a9:b3:7e:40:10:e8:56:18:14:ca:ad:4f:9c:c2:
21:87:fe:20:03:f0:57:92:25:97:be:85:f4:00:a1:
a1:88:f8:2e:65:dc:5f:ae:fb:fc:72:30:3b:27:1f:
2a:02:ec:ce:52:95:a2:ce:55:22:73:61:71:15:5b:
70:05:80:ed:be:4f:61:fd:c6:14:d9:f0:30:e0:81:
39:06:d4:c2:a6:1f:e2:9f:b8:b5:b6:08:1a:1d:5d:
f8:d5:0a:f2:de:0d:59:9b:a5:57:7a:05:b5:1e:82:
5a:d9:de:c8:1c:7a:1d:88:b5:77:af:81:57:56:cf:
03:ee:f2:fd:19:b9:b6:62:1c:46:08:ab:f9:4a:bc:
da:64:aa:fb:e9:63:18:12:d1:c5:ff:9c:9c:19:2d:
4e:d0:23:a7:14:44:60:3c:dc:6e:a4:b9:be:91:83:
f9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5E:66:2D:D6:3C:21:39:B1:FE:66:C3:1D:A6:C5:76:D2:92:75:29
X509v3 Authority Key Identifier:
keyid:DE:23:F1:8C:57:6D:6F:A6:09:13:35:33:C0:D0:E3:8D:77:32:C6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:32:ff:a6:14:4b:fe:d1:93:af:d6:31:fc:ef:8a:b4:93:26:
bb:03:42:3a:39:a9:b6:c6:29:ea:44:68:7a:61:8b:76:5f:b4:
1e:a8:fb:a2:0b:43:ad:18:bd:94:5e:e0:00:69:da:ba:f0:33:
35:d5:3e:e8:c5:92:74:a9:f9:a2:0f:69:6b:88:f9:30:07:c3:
1c:7e:58:3e:f6:90:c7:c5:9b:23:db:e0:4e:31:25:51:3c:e9:
9d:cf:f8:29:22:f3:80:8b:69:5b:a0:fa:26:55:3e:31:b7:b9:
58:51:30:3d:bc:a5:90:f6:11:94:4d:25:fa:d2:e0:c1:2d:84:
c5:60:a9:b3:f2:c8:a3:a2:28:4b:c3:6a:df:69:48:6f:31:55:
30:62:b8:9d:2a:a8:af:21:58:5e:f8:2b:34:58:f5:1a:20:65:
99:59:7f:b8:75:f8:af:fd:a9:41:82:8b:d7:fb:a8:0d:82:fd:
dd:aa:a5:24:6b:79:df:e6:5a:a0:64:51:6d:18:4a:a0:2d:63:
cb:c3:92:ef:f0:80:e9:24:86:fe:b8:43:e2:91:29:93:de:01:
f3:75:a8:8e:3e:a3:7f:4a:26:d3:1f:9d:5e:c1:4a:bf:73:31:
c1:df:a4:ac:b5:20:1a:49:e4:85:11:df:3a:97:a9:3a:2f:c8:
b4:99:ae:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:11 2026 by rpki-client