Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
File: 3Go3QvDw-xIJIrM57wHOz4f00e4.mft (raw, json)
Hash identifier: 5rB7D8K+i2XMZmK/pm0Fgu5JUbPu7EVJrtKJIWV1caE=
Subject key identifier: C6:9E:50:C8:21:99:6E:6E:98:D5:B3:4D:17:77:44:64:B1:D1:E3:13
Authority key identifier: DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
Certificate issuer: /CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Certificate serial: 01A00093D1742411E5CDB6D6304089A44D98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 14:01:22 +0000
Manifest this update: Fri 14 Aug 2026 14:01:22 +0000
Manifest next update: Sat 15 Aug 2026 14:01:22 +0000
Files and hashes: 1: 1YkIJofGDPbAKhB5ldovfVVJQaQ.roa (hash: ft15usCMKxpuecv7eKItu1OCSt1aYNUn7zhbarfUJ4o=)
2: 3Go3QvDw-xIJIrM57wHOz4f00e4.crl (hash: jBRZ9Q83tqvlCVkUWnqKjGhRk4viyc6kpjmjonGevxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:d1:74:24:11:e5:cd:b6:d6:30:40:89:a4:4d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Validity
Not Before: Aug 14 14:01:22 2026 GMT
Not After : Aug 15 14:01:22 2026 GMT
Subject: CN=c69e50c821996e6e98d5b34d17774464b1d1e313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f6:41:54:0c:4e:06:e2:83:8b:a6:46:72:cd:
4a:6e:fb:f8:fe:a1:11:ca:3b:99:95:12:f4:6b:4e:
40:a8:23:bd:cf:70:11:60:ed:51:fa:02:22:07:ff:
63:1c:13:fa:14:31:5b:24:f1:0a:c2:29:83:00:90:
e4:d1:8a:2b:8e:24:1a:b4:12:b6:7a:7f:14:40:4b:
f0:eb:d5:c3:9a:e1:1a:b6:df:bc:3f:ba:e8:a8:28:
c7:c2:7f:86:e6:b0:0c:d4:fc:06:27:f0:fb:c8:3a:
72:fb:98:06:1e:76:e1:a2:9b:9c:fe:f8:3d:7a:b1:
82:bc:64:f5:dd:fb:6c:ea:75:b4:7f:1b:a9:ce:a8:
78:54:cf:7a:f9:4b:f3:a4:2f:2b:b5:b7:6c:d8:1b:
f2:24:4a:6a:0f:a4:8e:42:15:17:69:8a:74:21:21:
50:d3:28:a8:65:d0:b1:15:36:18:d0:31:ef:43:d2:
1e:73:00:48:12:fc:b6:aa:9b:ee:e5:52:80:52:89:
00:09:c4:d0:e4:3e:c1:b7:d0:fd:6f:c5:41:27:c3:
76:ea:11:2b:54:80:1e:18:29:26:f8:6f:9d:73:74:
64:91:f5:e3:25:2e:fe:ee:ae:f3:1d:f2:bb:7c:1e:
07:12:7f:66:9d:48:70:c2:ef:10:0d:80:00:68:22:
55:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:9E:50:C8:21:99:6E:6E:98:D5:B3:4D:17:77:44:64:B1:D1:E3:13
X509v3 Authority Key Identifier:
keyid:DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:6e:e5:55:f9:6a:3c:d8:c2:90:1c:12:4c:47:fd:09:01:82:
71:18:7f:26:61:da:72:b2:9a:52:13:0d:11:c8:3d:a9:d2:80:
aa:fb:20:74:4c:f9:57:31:4f:72:c9:6e:ac:0e:64:6c:a4:b4:
1d:32:1c:89:a0:15:7e:23:d5:55:e3:83:71:ae:cd:63:cb:68:
d4:3b:1a:e5:93:9e:c3:96:81:ff:88:3b:78:4a:1d:1b:a1:0f:
01:3a:8a:47:99:f3:b6:7d:85:27:cb:36:ac:35:b0:c9:ca:32:
85:11:78:23:aa:e4:4f:5f:74:10:5f:58:0a:a5:08:d1:c2:f0:
e6:e6:be:32:4a:37:9d:40:92:60:40:83:02:dd:5e:9e:89:86:
5b:38:9a:fd:d2:96:57:4f:5e:3e:6f:09:28:64:25:bc:80:3b:
49:9e:08:20:73:bc:5f:f3:50:90:45:99:29:17:c3:f8:ee:9a:
c6:15:3a:96:a0:5d:35:d7:85:81:c3:9b:30:a0:7d:72:75:1b:
16:13:ab:65:8b:35:ac:74:89:37:51:ed:10:d1:0f:cf:7a:52:
24:eb:10:84:ff:d7:f2:2e:0d:a1:a6:88:da:f1:59:c1:71:d0:
9a:55:e4:21:c5:dd:2b:d0:b3:dd:32:18:cc:60:c2:41:e5:4a:
07:7c:ba:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:29:26 2026 by rpki-client