Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
File: 3Hgh4by_bgdOpIFKqlxj47qBPF8.mft (raw, json)
Hash identifier: 655E9E9NKcFdmP5Z37OHpOwFgX15o/yvpjm4JB59ya4=
Subject key identifier: 05:1E:3F:80:56:10:C6:3B:2D:AB:05:2C:62:B6:C0:09:DD:BF:57:35
Authority key identifier: DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
Certificate issuer: /CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Certificate serial: 01A1144EFFCA8BDD46BB73E79C1FFB805E6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
Manifest number: 1AB2
Signing time: Wed 07 Oct 2026 03:01:23 +0000
Manifest this update: Wed 07 Oct 2026 03:01:23 +0000
Manifest next update: Thu 08 Oct 2026 03:01:23 +0000
Files and hashes: 1: 32lYY6uEr5NQiZ36Yw1PDpEB0LE.roa (hash: nbIrlyDfM/OsIW8q6DxR5+MKnNJS4Cwv/h7ugS3W6kw=)
2: 3Hgh4by_bgdOpIFKqlxj47qBPF8.crl (hash: aR1L5bylMoGY/6SGKs+Fi6smKHHGKlZlQmpOTJoh5x4=)
3: 4brBRSXd-3J0XI6W1cQMml969rM.roa (hash: HAAIbdurASwhGqOl0EqIaoNlObK5qBtHlNL6sAbPYAw=)
4: CV0Da0hDhTImPAfNEKg1Zmq-t4Y.roa (hash: gRQv5O+XgMBfojo8WrrSJ295oJBia/Hac6oJn0s/JA4=)
5: NS8B9quAxg9DaONCvo-F09E4aHg.roa (hash: 611N6cJ08ljysAfZN/DDvW2PaFTUCRX+l4eXQLoeFWE=)
6: YorSmVSKuGvPWA7DA6m1cRcL1FY.roa (hash: qU63ylCGxnEyiZbz76RKuCXngXRAm2RLSoEhfEzs9Wk=)
7: ZkI0BKv7hf_ucyX53-0WeS2FZU0.roa (hash: /W5mPhl5tNlOLzwA/Si8gsOL5g4fr6fls1AqWYZxDGY=)
8: hsVsux8sHzZqQOz9MIXAz_SM6VI.roa (hash: 3Hc4odb8fRJz6qv0eC3Z9gpTtQGDv+DPG+2jWtEDSs8=)
9: vulmYW4p9PU9wnTvn-jVp44qOCM.roa (hash: MXgO5bfy+NsKZlh8zhQJtMRiH5fhuEIemBIGiWuNsdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 03:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:14:4e:ff:ca:8b:dd:46:bb:73:e7:9c:1f:fb:80:5e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Validity
Not Before: Oct 7 03:01:23 2026 GMT
Not After : Oct 8 03:01:23 2026 GMT
Subject: CN=051e3f805610c63b2dab052c62b6c009ddbf5735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:45:c4:e3:1e:c5:58:ae:8f:be:96:8d:c0:52:
e9:a8:9e:42:1a:5b:19:f0:df:3c:e8:72:5b:b7:92:
87:b3:09:ac:97:74:53:e4:d1:0c:ae:84:85:00:41:
bb:31:9e:26:92:6d:18:7c:a5:1e:ec:55:66:16:2f:
77:79:38:55:22:d5:82:fb:b2:8f:b0:37:a9:14:5e:
5b:c8:08:92:6d:cd:0b:19:11:e5:49:cf:52:2b:04:
69:f6:56:02:96:e3:3a:18:45:29:69:1c:ea:f2:51:
c2:0c:5c:09:d9:47:c2:66:29:7f:11:8b:a6:1e:39:
cd:28:2a:da:96:45:5b:db:c9:c7:04:c2:5f:47:6b:
d6:fb:04:01:eb:08:67:bd:2d:0a:72:34:3a:44:d9:
0f:c2:e5:d7:c3:59:53:27:a0:dc:08:60:30:79:96:
f9:f4:d9:ff:86:61:09:89:d2:a5:ba:5c:4e:f7:1e:
96:d7:10:ac:34:33:d3:68:e4:31:47:f3:d8:04:c4:
40:01:4d:13:c3:a1:7b:58:c1:e8:d2:9d:4f:21:52:
a0:c5:22:f0:9b:37:a5:9e:97:83:00:6a:e6:ca:0b:
c6:c8:1a:12:e5:ef:b8:8c:ef:da:08:de:ea:a3:38:
c3:e5:ed:a5:1b:fd:c0:53:29:db:79:30:1a:e3:35:
aa:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1E:3F:80:56:10:C6:3B:2D:AB:05:2C:62:B6:C0:09:DD:BF:57:35
X509v3 Authority Key Identifier:
keyid:DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:24:ef:1f:b2:a7:e7:de:9c:63:09:46:8c:fd:9f:f3:c5:60:
54:cf:50:b1:b5:de:71:89:91:ca:66:5f:f0:52:ad:16:c9:f6:
af:5c:98:3d:90:af:d6:79:16:38:7e:22:91:4e:3e:43:cc:fe:
e2:ff:60:57:0c:ea:75:f1:cd:2e:b9:b6:41:91:a9:89:83:28:
55:c9:8a:46:97:35:61:95:46:b1:7d:b4:0c:2b:d9:07:ec:f8:
15:c0:cc:69:5c:b7:a9:b9:09:8f:8c:84:e0:dc:12:34:70:26:
47:46:98:08:5e:29:7e:3d:56:5c:71:c9:c1:f8:29:13:de:46:
5f:09:46:01:48:d0:9c:df:d7:49:64:75:44:4f:ff:da:48:5b:
03:e0:7c:bc:d3:bc:5d:9a:1c:31:5f:c8:34:c8:35:79:d9:d9:
d7:d2:0c:e3:0e:43:e5:b5:16:03:01:de:90:6e:24:bf:bf:85:
dd:9e:66:8f:9b:11:54:5f:f3:c7:5c:57:ab:68:d6:85:72:1d:
2c:6b:48:f0:06:d9:1e:70:8e:ab:81:df:da:2b:81:97:6f:70:
eb:f8:d2:86:2f:be:b8:45:42:48:df:bb:f0:be:02:9e:37:15:
f1:01:8b:67:0e:54:78:d0:5d:1c:36:04:ba:58:23:d6:35:e4:
a5:dd:7e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 11:25:35 2026 by rpki-client