Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft
File: 3dBY7vGdEboOq68EbnKibl5XJkM.mft (raw, json)
Hash identifier: 7FfNlM6Fw2ElX5dudw+k2tRTk79EXjkNl+fM5swr6l8=
Subject key identifier: DD:E1:2D:FF:CE:9F:F7:2F:02:B8:05:C0:25:C9:20:78:83:EB:BD:57
Authority key identifier: DD:D0:58:EE:F1:9D:11:BA:0E:AB:AF:04:6E:72:A2:6E:5E:57:26:43
Certificate issuer: /CN=ddd058eef19d11ba0eabaf046e72a26e5e572643
Certificate serial: 01A08C0D75908CD3E99C3CFF4144E532D576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dBY7vGdEboOq68EbnKibl5XJkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft
Manifest number: 0260
Signing time: Thu 10 Sep 2026 16:01:27 +0000
Manifest this update: Thu 10 Sep 2026 16:01:27 +0000
Manifest next update: Fri 11 Sep 2026 16:01:27 +0000
Files and hashes: 1: 3dBY7vGdEboOq68EbnKibl5XJkM.crl (hash: X8ozaTmIAxRneIluLrGOkLN+cb3xOzjmYV+ZO2hNDYM=)
2: 6w_LmvhXnOF2ik3DDNvsrEWVCI8.roa (hash: 6W4Vav7RSMNSHDF7FWCiUK0cI2saEqhD9eRkDI4fbG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dBY7vGdEboOq68EbnKibl5XJkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:75:90:8c:d3:e9:9c:3c:ff:41:44:e5:32:d5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd058eef19d11ba0eabaf046e72a26e5e572643
Validity
Not Before: Sep 10 16:01:27 2026 GMT
Not After : Sep 11 16:01:27 2026 GMT
Subject: CN=dde12dffce9ff72f02b805c025c9207883ebbd57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:22:c4:82:9c:dd:74:b7:a9:63:57:21:ac:ae:
a1:e4:a4:0e:16:c8:ef:e0:4a:23:df:e9:f8:a1:dc:
dc:54:50:81:78:fd:2f:86:a5:3e:30:53:82:75:33:
49:80:17:be:75:39:fa:87:7b:e1:30:47:ae:f4:29:
a2:72:48:b2:91:7b:53:67:b7:a5:4c:a5:dd:95:29:
1b:e7:bc:45:5a:e6:ef:25:45:eb:4c:43:c1:2e:b2:
1a:df:c6:7a:14:da:a1:8c:5e:18:c2:67:b2:0a:44:
de:a3:74:e9:3f:1e:bf:da:7b:5e:8b:51:39:6f:d6:
da:b3:3d:3a:a3:38:ad:68:4e:a2:79:f7:56:4d:ee:
ef:6d:1b:8b:4c:d0:b8:1a:93:37:07:28:aa:ca:53:
26:b6:c5:41:4d:0b:e8:71:5b:88:b7:eb:0e:c6:2d:
6f:cb:d4:35:51:5b:fd:5d:75:bb:88:3e:0f:cf:75:
43:44:14:aa:c0:11:8a:32:b0:31:3b:2a:d2:a8:b3:
af:4b:81:bb:49:06:bc:df:10:10:ed:c4:1f:46:f7:
f7:c4:18:3e:96:19:c7:3a:25:30:f6:86:c4:71:ff:
d5:1a:6e:09:90:b9:87:42:36:28:0a:23:a0:98:ca:
ac:0b:06:b8:66:b7:b9:11:80:9b:8d:64:ef:b0:d3:
3a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E1:2D:FF:CE:9F:F7:2F:02:B8:05:C0:25:C9:20:78:83:EB:BD:57
X509v3 Authority Key Identifier:
keyid:DD:D0:58:EE:F1:9D:11:BA:0E:AB:AF:04:6E:72:A2:6E:5E:57:26:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dBY7vGdEboOq68EbnKibl5XJkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:50:22:41:50:c5:bf:70:0f:02:3f:0e:23:27:a9:6c:61:4c:
fc:84:f1:8d:e7:79:89:aa:32:41:17:8d:08:cb:f7:d4:cf:d1:
d5:cd:13:1b:94:e2:5f:f9:b4:09:dc:d3:28:90:4a:62:22:d0:
51:25:4b:b2:08:39:7c:24:b3:3c:30:df:81:c2:1e:6e:33:55:
2f:b6:d2:50:20:73:49:f5:97:d9:80:57:4e:71:c4:2a:b1:95:
a5:5d:fe:c7:85:5d:f9:d2:ee:63:5f:aa:b1:63:96:db:7c:d8:
ac:e8:df:f5:c4:43:c0:4a:6c:e5:71:f1:90:91:23:f1:ee:77:
98:bb:5c:86:d6:88:c4:6a:88:31:32:1c:5c:fe:09:37:3c:61:
64:e9:ac:f0:21:83:d1:78:6f:a8:95:75:f4:31:57:13:2f:bd:
00:ad:33:c4:65:03:db:11:a9:80:c2:55:f0:d5:07:ab:90:9c:
d9:27:cf:13:ba:ca:06:9a:46:71:d5:0d:c4:68:b8:58:a4:70:
0f:67:ba:82:a0:37:28:6d:c7:70:c4:39:75:09:28:4b:63:a8:
be:d4:68:d5:82:68:3b:75:d2:15:e7:6f:d3:45:c5:a4:fd:a1:
75:0b:e1:6b:38:4a:4a:46:8d:f6:3a:b6:91:9f:12:09:e4:47:
43:f9:79:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:40:16 2026 by rpki-client