Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/7c7786-75e6-4760-8390-2dd1b4ee0e63/1/k3Xyq9mZghjDpF_hf0Qnv8xyP3I.mft
File: k3Xyq9mZghjDpF_hf0Qnv8xyP3I.mft (raw, json)
Hash identifier: YcASkjmqNbw4aOwNbmctjFQfQHSm9/rDehv5iZfPdcY=
Subject key identifier: 06:C7:34:B0:C8:84:AA:B4:D4:47:EA:36:7E:0A:73:07:BB:C9:C0:43
Authority key identifier: 93:75:F2:AB:D9:99:82:18:C3:A4:5F:E1:7F:44:27:BF:CC:72:3F:72
Certificate issuer: /CN=9375f2abd9998218c3a45fe17f4427bfcc723f72
Certificate serial: 01A12B7B5A6C578ABA787E98D635EFCF69FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3Xyq9mZghjDpF_hf0Qnv8xyP3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/7c7786-75e6-4760-8390-2dd1b4ee0e63/1/k3Xyq9mZghjDpF_hf0Qnv8xyP3I.mft
Manifest number: 0F
Signing time: Sun 11 Oct 2026 15:01:06 +0000
Manifest this update: Sun 11 Oct 2026 15:01:06 +0000
Manifest next update: Mon 12 Oct 2026 15:01:06 +0000
Files and hashes: 1: _5Kz249xlvnbhQYdV9jRus4ricw.roa (hash: VJ6XiAWwRRFVBrYfxjNlzUDq3S4vmUxTlhhkc3Uwgwk=)
2: e-BKxknrj5Rc5DgLNPOkIybj4bA.asa (hash: g0gYQx1auMLoa/k8os+VIaK8Q4U4RrRHMiA12p/YpYQ=)
3: k3Xyq9mZghjDpF_hf0Qnv8xyP3I.crl (hash: ERXuk5rj00oYkOQWkrATcKae0FGWFsVKVp+zC7xfsLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/7c7786-75e6-4760-8390-2dd1b4ee0e63/1/k3Xyq9mZghjDpF_hf0Qnv8xyP3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/7c7786-75e6-4760-8390-2dd1b4ee0e63/1/k3Xyq9mZghjDpF_hf0Qnv8xyP3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/k3Xyq9mZghjDpF_hf0Qnv8xyP3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:7b:5a:6c:57:8a:ba:78:7e:98:d6:35:ef:cf:69:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9375f2abd9998218c3a45fe17f4427bfcc723f72
Validity
Not Before: Oct 11 15:01:06 2026 GMT
Not After : Oct 12 15:01:06 2026 GMT
Subject: CN=06c734b0c884aab4d447ea367e0a7307bbc9c043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7c:65:c5:99:da:6a:b9:3e:b7:15:bb:d3:6c:
2f:a5:4e:b4:1d:58:13:64:fc:9a:61:bf:c8:dc:fd:
1d:13:de:83:04:47:e7:5b:b0:9e:5b:56:18:0c:ae:
0f:7a:0c:01:0b:27:8c:bd:b6:d9:46:c1:03:c7:75:
0d:57:ea:0d:2e:28:dc:a4:94:ca:71:ce:71:d1:e3:
f4:f5:db:8e:e2:a0:96:d9:28:19:ad:30:94:97:1b:
ef:78:a5:5d:2b:a0:60:af:e5:d8:19:ea:ff:a4:14:
50:3b:f2:cd:6b:02:19:82:b9:87:09:8e:27:4f:63:
f8:33:a7:db:c2:b4:4c:d3:ff:fb:2f:e8:f6:73:b3:
b4:bf:9a:c1:4b:b2:ad:c7:6f:1c:3b:13:4f:b8:24:
1c:71:65:72:eb:6e:af:db:9a:29:39:6a:8f:dd:cb:
c2:a9:68:14:d2:0f:84:8a:5f:5f:22:a2:b2:e5:a1:
68:10:cc:3f:c5:75:bf:7d:d5:62:c6:11:5c:44:46:
cf:ef:79:b0:3e:53:93:dd:d1:84:c1:aa:78:42:35:
54:ae:ae:97:02:0e:11:2f:bc:53:e7:c7:9f:92:cc:
b0:7d:e0:af:f6:d0:34:2b:90:b1:36:f0:1a:00:02:
89:c7:af:93:87:c9:a5:26:2e:a4:68:73:b2:e1:8a:
59:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C7:34:B0:C8:84:AA:B4:D4:47:EA:36:7E:0A:73:07:BB:C9:C0:43
X509v3 Authority Key Identifier:
keyid:93:75:F2:AB:D9:99:82:18:C3:A4:5F:E1:7F:44:27:BF:CC:72:3F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3Xyq9mZghjDpF_hf0Qnv8xyP3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7c7786-75e6-4760-8390-2dd1b4ee0e63/1/k3Xyq9mZghjDpF_hf0Qnv8xyP3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7c7786-75e6-4760-8390-2dd1b4ee0e63/1/k3Xyq9mZghjDpF_hf0Qnv8xyP3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:df:50:7e:1e:15:82:b9:79:36:11:30:f2:eb:ee:bb:b7:7c:
33:2e:60:41:a7:4d:1a:4d:f1:4e:ff:ab:92:a0:b9:14:87:89:
69:64:03:48:39:f4:b2:da:91:cb:39:51:c6:69:a6:3d:d8:05:
19:d0:74:02:04:5e:14:4e:8d:c2:f9:79:10:6b:5f:bc:56:36:
d2:f4:38:0a:8d:dc:01:03:20:2f:1d:72:dc:e3:cf:4f:c8:43:
c5:cc:15:68:0f:d4:56:07:03:16:d2:dd:ae:5d:60:4d:44:6f:
02:1a:e2:99:96:ec:57:6b:cb:ee:f4:0a:7d:cd:55:c5:44:d1:
02:95:98:e1:68:55:f6:96:28:1e:bc:4a:8d:26:08:77:0d:86:
94:5d:62:b4:38:a3:c0:56:40:23:49:d0:69:06:6e:cb:96:a9:
ca:d7:59:4d:06:a9:97:89:bf:6b:76:33:11:c0:e2:aa:c0:1f:
1b:45:b3:38:ee:60:98:91:cd:48:74:c2:3e:f8:d7:45:7b:29:
2a:d0:b9:c3:81:0b:80:ee:10:b6:fb:08:c8:a8:e5:76:72:4e:
03:15:2d:17:26:8f:6f:90:8f:a2:24:fc:e4:84:d0:b2:9c:ef:
c6:67:8e:d0:28:29:73:dd:60:80:db:cf:e0:e1:55:96:2a:19:
72:63:b7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:17:02 2026 by rpki-client