Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/37bb89-8516-454a-80fc-bb01648fac07/1/3OEoZtsCnY-bejryd2akK-5Wi60.mft
File: 3OEoZtsCnY-bejryd2akK-5Wi60.mft (raw, json)
Hash identifier: +jf4Y9OA+pY2Mtjr5sKopbgVp7aW1A49+2W8ehqFFkc=
Subject key identifier: 46:25:85:FB:B5:61:31:08:45:ED:CB:B4:5D:A8:DA:E4:2E:ED:5F:D4
Authority key identifier: DC:E1:28:66:DB:02:9D:8F:9B:7A:3A:F2:77:66:A4:2B:EE:56:8B:AD
Certificate issuer: /CN=dce12866db029d8f9b7a3af27766a42bee568bad
Certificate serial: 01A040BBB7AF5DFDBE155F5655E17A505473
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OEoZtsCnY-bejryd2akK-5Wi60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/37bb89-8516-454a-80fc-bb01648fac07/1/3OEoZtsCnY-bejryd2akK-5Wi60.mft
Manifest number: 4F
Signing time: Thu 27 Aug 2026 01:00:38 +0000
Manifest this update: Thu 27 Aug 2026 01:00:38 +0000
Manifest next update: Fri 28 Aug 2026 01:00:38 +0000
Files and hashes: 1: 1-r60MLTZRSdgygfymOIKvkloX4s.roa (hash: af6A06NaI4rDIZj+VAritHdSnfA6HkDWGlQ9vMcojAc=)
2: 3OEoZtsCnY-bejryd2akK-5Wi60.crl (hash: myn67pkZKjDE6cnPz04qN5K8cUx6Vkc4KETx+1BPlyk=)
3: ijw9MMecXFQ1MALw3HCoNkDG7LI.roa (hash: rCEqb/EtPquuy7z0bjBCs2np62IcolwSM1fIQEnyHGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/37bb89-8516-454a-80fc-bb01648fac07/1/3OEoZtsCnY-bejryd2akK-5Wi60.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/37bb89-8516-454a-80fc-bb01648fac07/1/3OEoZtsCnY-bejryd2akK-5Wi60.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OEoZtsCnY-bejryd2akK-5Wi60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:bb:b7:af:5d:fd:be:15:5f:56:55:e1:7a:50:54:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce12866db029d8f9b7a3af27766a42bee568bad
Validity
Not Before: Aug 27 01:00:38 2026 GMT
Not After : Aug 28 01:00:38 2026 GMT
Subject: CN=462585fbb561310845edcbb45da8dae42eed5fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:56:ec:eb:1b:11:51:3b:d7:19:55:48:99:ca:
29:72:11:1c:4d:45:61:de:18:74:32:61:91:41:bb:
99:bf:e7:01:3f:4e:b1:e7:5d:08:95:ee:ed:0c:78:
b1:99:e1:a1:22:d4:8d:57:66:52:b2:39:70:ed:d7:
82:61:f8:02:9f:35:f9:10:af:4c:19:d4:13:a0:43:
5f:9d:00:3e:e7:dd:c3:57:ea:3b:ed:39:3c:03:d7:
61:10:f5:d4:8c:03:2d:db:2d:0c:73:10:e2:c8:87:
18:9a:4b:55:60:e7:d8:76:49:f2:fc:42:48:65:5f:
91:c7:d8:a5:fb:24:bd:1e:e3:ff:07:3d:5d:a4:8f:
fa:b0:52:15:86:04:72:01:79:a0:82:b4:b5:25:f3:
ce:38:1e:fb:03:ed:28:0f:10:4a:16:1a:93:a1:49:
6f:2d:8b:d4:cd:17:35:c3:6b:07:2c:86:29:c8:39:
7e:e4:28:40:4a:cb:f2:e3:67:c6:e9:12:f1:80:d7:
79:f1:72:83:46:f6:42:eb:bd:85:6e:d9:f4:27:0a:
ff:9c:06:9b:d9:5d:e7:c6:ca:d8:b9:96:81:d0:88:
e5:89:90:8d:a8:13:46:ac:90:c2:a2:06:85:84:08:
b8:b5:fd:31:92:7a:b7:49:43:f3:cd:22:93:d6:c2:
2a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:25:85:FB:B5:61:31:08:45:ED:CB:B4:5D:A8:DA:E4:2E:ED:5F:D4
X509v3 Authority Key Identifier:
keyid:DC:E1:28:66:DB:02:9D:8F:9B:7A:3A:F2:77:66:A4:2B:EE:56:8B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OEoZtsCnY-bejryd2akK-5Wi60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/37bb89-8516-454a-80fc-bb01648fac07/1/3OEoZtsCnY-bejryd2akK-5Wi60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/37bb89-8516-454a-80fc-bb01648fac07/1/3OEoZtsCnY-bejryd2akK-5Wi60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:6a:6f:9c:82:5a:a3:e8:ce:72:b8:93:2b:5d:1f:25:b9:59:
11:bd:05:c6:6f:5c:20:6c:49:2d:cf:d2:79:22:c4:a8:b7:e0:
d1:35:47:0f:96:a0:c8:04:c3:20:23:e0:f8:22:ab:8b:ff:06:
88:8e:ad:27:d1:29:5e:c3:09:00:bc:dd:22:c1:52:6f:f0:9f:
40:64:5a:b8:5d:ed:05:29:69:c3:08:17:47:0d:b7:16:47:b7:
63:42:00:e0:39:df:fe:62:bc:83:96:0f:f0:5f:72:55:d9:70:
d6:9b:a3:72:37:e9:bd:c6:83:36:ca:e1:27:bf:c3:6f:55:c8:
b7:06:bc:b1:3c:84:03:1d:2e:be:79:a2:ce:63:6e:15:a4:37:
8f:21:9e:b1:5c:cb:33:28:ed:25:be:05:a0:e0:cb:95:84:cc:
d5:ec:13:66:28:b5:0c:09:e9:ae:fb:94:63:0b:78:f2:cd:c9:
e1:24:c2:6a:ec:42:e9:79:da:39:f8:f1:d0:e2:61:8d:85:29:
0e:b8:42:18:f9:65:4f:34:ae:56:c4:e4:04:73:f5:69:cc:f3:
08:5c:5d:ef:71:d4:f3:f3:35:88:99:f8:2c:8f:09:cd:69:df:
98:d6:b0:b4:ac:4d:0f:ee:1f:7e:b0:27:c4:73:04:76:fc:97:
ff:12:48:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:50:35 2026 by rpki-client