Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/993f7b-d970-4d0c-af35-260ff107ee75/1/3OXgIlmwLxipnQnkvc5BnGrgo7g.mft
File: 3OXgIlmwLxipnQnkvc5BnGrgo7g.mft (raw, json)
Hash identifier: HvMRpWHi1Ut+hGTsXkPpPZIYLFdodyi3eIbtCVi07Lw=
Subject key identifier: FD:89:03:4F:5C:78:10:F3:04:9E:98:BB:F6:99:1E:F5:AE:8B:2B:74
Authority key identifier: DC:E5:E0:22:59:B0:2F:18:A9:9D:09:E4:BD:CE:41:9C:6A:E0:A3:B8
Certificate issuer: /CN=dce5e02259b02f18a99d09e4bdce419c6ae0a3b8
Certificate serial: 01A040F32C6D6725CE81E94A8DAE3E3DF09F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OXgIlmwLxipnQnkvc5BnGrgo7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/993f7b-d970-4d0c-af35-260ff107ee75/1/3OXgIlmwLxipnQnkvc5BnGrgo7g.mft
Manifest number: 0159
Signing time: Thu 27 Aug 2026 02:01:13 +0000
Manifest this update: Thu 27 Aug 2026 02:01:13 +0000
Manifest next update: Fri 28 Aug 2026 02:01:13 +0000
Files and hashes: 1: 3OXgIlmwLxipnQnkvc5BnGrgo7g.crl (hash: iaSthsKyI8ypIbettxWdDqcHifnsB+Kxn1mxsRrQA2k=)
2: dzwsdq_p19qeWq1sVjAo8n8DF3A.roa (hash: ypz0q9rJFOFUluO/EXbahQLlxxipPvEZdWT5c5RYe/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/993f7b-d970-4d0c-af35-260ff107ee75/1/3OXgIlmwLxipnQnkvc5BnGrgo7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/993f7b-d970-4d0c-af35-260ff107ee75/1/3OXgIlmwLxipnQnkvc5BnGrgo7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OXgIlmwLxipnQnkvc5BnGrgo7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:f3:2c:6d:67:25:ce:81:e9:4a:8d:ae:3e:3d:f0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce5e02259b02f18a99d09e4bdce419c6ae0a3b8
Validity
Not Before: Aug 27 02:01:13 2026 GMT
Not After : Aug 28 02:01:13 2026 GMT
Subject: CN=fd89034f5c7810f3049e98bbf6991ef5ae8b2b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0c:a2:9d:3b:b0:05:4b:e1:cc:61:c5:91:36:
92:5d:bb:14:b1:7c:68:70:17:1c:8b:3a:f4:33:2e:
87:ae:51:ba:42:1f:a9:93:50:6f:7b:e3:43:e3:33:
5b:fd:f8:57:3e:d7:cf:29:09:ad:63:c7:da:d0:64:
1d:68:c4:7c:34:2a:2c:88:b4:9d:bf:b8:7f:a2:15:
94:50:2d:b8:88:37:e0:ef:62:0f:cd:06:08:86:d1:
8a:f2:a0:1b:9c:3b:cd:4b:6e:f4:b8:81:23:22:e6:
a1:12:4c:a5:d0:fd:ca:ce:96:aa:16:b4:2e:c3:a8:
48:af:3d:24:2b:4c:ec:15:82:05:df:1f:97:e7:21:
e0:7c:59:a7:2c:c8:6e:f8:93:e9:3c:1d:68:35:58:
d5:5e:b6:7d:8d:ff:90:65:00:75:ce:de:95:6b:01:
97:74:01:70:da:dd:6c:94:f5:06:96:84:85:db:60:
b7:29:8d:81:3e:00:d1:a4:e8:fb:f7:79:62:92:3d:
79:57:25:56:a3:b7:77:27:95:c1:0e:ab:2f:31:01:
a4:f4:6a:61:02:1b:41:9d:f1:bd:f2:b8:a0:d8:c7:
9e:4d:50:57:35:fd:0b:77:77:17:fb:04:3b:03:9f:
6d:23:a5:d1:12:aa:4e:71:76:d6:97:9a:c4:b6:23:
ba:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:89:03:4F:5C:78:10:F3:04:9E:98:BB:F6:99:1E:F5:AE:8B:2B:74
X509v3 Authority Key Identifier:
keyid:DC:E5:E0:22:59:B0:2F:18:A9:9D:09:E4:BD:CE:41:9C:6A:E0:A3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OXgIlmwLxipnQnkvc5BnGrgo7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/993f7b-d970-4d0c-af35-260ff107ee75/1/3OXgIlmwLxipnQnkvc5BnGrgo7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/993f7b-d970-4d0c-af35-260ff107ee75/1/3OXgIlmwLxipnQnkvc5BnGrgo7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ec:01:8a:ce:84:87:8f:dd:f5:27:c2:9f:9f:62:57:5d:ee:
86:09:fe:bf:b3:a1:d6:c1:54:6f:0e:be:96:61:13:3e:50:09:
be:78:fd:26:e2:9b:cf:4f:1c:45:98:9e:0d:ca:0c:d8:ae:84:
82:51:75:01:77:ff:3b:44:9b:8a:d0:39:d9:63:d0:15:5c:9b:
e9:20:6f:49:0a:43:d8:75:5c:d2:b7:99:6c:97:cb:12:44:c1:
f1:6d:1b:60:55:b8:56:08:3e:5e:b3:f0:ab:c8:2c:e9:91:9c:
77:05:fe:43:e0:5a:a5:58:ce:ac:83:9d:22:e8:41:49:2d:97:
f3:64:ce:94:bd:8e:d9:54:7c:2c:d7:89:40:7e:d1:ef:77:9e:
72:6f:a7:4c:85:2a:a0:27:3e:fd:1f:8a:f4:58:ac:0d:7e:3d:
81:5f:b5:88:9e:cf:1e:e9:cf:4a:0d:73:b6:fc:19:61:1c:aa:
fe:e9:0e:4f:60:df:c1:61:12:24:e0:79:d4:37:70:a0:42:c1:
17:32:de:9b:53:f4:f5:7f:b1:78:36:5c:5e:35:61:f3:97:2e:
23:d8:27:9b:18:df:ae:46:ac:55:01:d9:2d:9a:69:24:e3:f5:
4f:58:3d:68:ba:c7:58:1e:fc:91:d9:ee:9c:52:6f:c6:c8:d5:
21:90:0b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:04:36 2026 by rpki-client