Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
File: 3o5guxEQh9CAP8P8xK8yeqhcC4E.mft (raw, json)
Hash identifier: HK8FMo+R0woxJ8a7VVR9WIzHfM+olsNOjap3zalgZM4=
Subject key identifier: 0A:95:FB:61:56:60:54:3C:F3:10:AD:8F:F4:CF:4D:08:81:EE:00:DF
Authority key identifier: DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81
Certificate issuer: /CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
Certificate serial: 01A1287AF2877133F2D56133688D9CBE30B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
Manifest number: 1A99
Signing time: Sun 11 Oct 2026 01:01:48 +0000
Manifest this update: Sun 11 Oct 2026 01:01:48 +0000
Manifest next update: Mon 12 Oct 2026 01:01:48 +0000
Files and hashes: 1: 3o5guxEQh9CAP8P8xK8yeqhcC4E.crl (hash: /3MLq5s4q51T/EfbbhnX2LC0+DoLmI2u2oohIJJ4Drg=)
2: F4NwjEYLDI-yBZ05DnMh2xIsZFs.roa (hash: VPrSJkixuSKsLbMS0Mdq/HH4JbtRsGR6fruBx7JJjhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 01:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:7a:f2:87:71:33:f2:d5:61:33:68:8d:9c:be:30:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
Validity
Not Before: Oct 11 01:01:48 2026 GMT
Not After : Oct 12 01:01:48 2026 GMT
Subject: CN=0a95fb615660543cf310ad8ff4cf4d0881ee00df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8b:90:50:fa:53:a4:72:a8:87:51:17:90:11:
5f:dd:7a:f1:9e:53:28:d2:92:d4:de:8b:0b:65:17:
c2:e5:d0:64:64:42:10:02:e3:a0:03:e7:eb:40:d6:
67:63:f3:4b:9f:1c:ca:a0:f1:81:14:a1:67:79:b2:
f5:fd:81:01:4f:4b:2e:54:f4:85:f5:5d:70:a8:7f:
4d:98:6e:1a:9b:6d:53:09:6d:60:04:96:4e:66:3e:
9d:e4:2c:da:91:f5:4b:ae:94:6a:e0:7f:b1:69:57:
d4:90:78:cb:bb:c8:c9:b1:c4:be:86:ef:85:be:e4:
94:2d:78:96:3e:2c:28:99:0b:97:0e:ed:f3:18:0e:
af:d0:a9:f9:88:f2:3c:3c:51:4e:16:fb:8a:a1:25:
e8:fd:06:ce:9c:dd:95:7c:dd:3a:5b:8b:51:94:0f:
39:a1:87:af:f6:bb:1f:ca:9f:9b:cb:8e:a0:8a:f8:
f5:55:59:9e:a6:17:33:e6:b3:18:a1:bc:d8:48:6f:
d6:1c:5b:ac:83:be:86:e4:fa:9c:a1:ff:a5:fe:e1:
dc:c8:d4:a5:57:06:50:f1:74:26:0c:73:d5:f8:51:
34:98:4f:d8:70:22:f2:bb:d0:a2:82:6f:33:b2:10:
6e:5a:dd:58:cd:72:0e:15:c6:b1:93:be:b4:a7:68:
6a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:95:FB:61:56:60:54:3C:F3:10:AD:8F:F4:CF:4D:08:81:EE:00:DF
X509v3 Authority Key Identifier:
keyid:DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:63:a3:42:2b:1b:b1:cc:d2:04:f7:f9:8f:6f:f8:2e:23:18:
6b:96:dc:5b:94:50:3f:c3:c0:3c:e8:a0:38:75:04:ce:97:35:
d2:f9:a4:ce:66:d4:7b:b2:9f:2b:ae:f3:29:35:38:9e:d8:dd:
d4:0b:42:99:66:99:be:08:5e:0f:ba:e5:44:8c:22:eb:b3:97:
06:0f:df:33:99:40:2c:3a:32:b4:a7:23:2c:0e:b7:ac:2b:ff:
2a:6a:0f:67:b0:69:8e:60:6e:ad:ea:58:b3:d0:a4:b7:18:43:
32:7a:df:e8:a7:75:d7:36:38:3e:a7:04:0c:92:a9:27:79:95:
58:fd:e6:bb:d6:5a:a1:6a:aa:ba:19:2a:d1:6f:c1:71:2b:3d:
4c:a2:89:d0:7c:60:b1:56:5f:f1:55:c8:7c:d9:93:78:f4:58:
42:df:7f:52:44:eb:1f:97:1c:51:f9:6c:a6:d6:b7:e8:89:b8:
35:3a:1b:b6:e0:0d:55:30:bb:ac:7d:75:62:c6:64:4d:ef:66:
69:fe:92:e5:fa:ea:d9:0d:87:d8:ac:7a:94:2a:2a:ba:1d:26:
2f:7b:d8:09:8d:af:05:27:c7:2b:52:1c:a9:ee:d2:f7:98:99:
2c:cc:98:69:c1:aa:fc:e8:37:49:bb:8d:64:ca:3a:55:08:30:
6c:33:d2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:55:10 2026 by rpki-client