Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
File: 3eNumAISZPWoBwEGeAvinUihbGc.mft (raw, json)
Hash identifier: Ll4XOQzwgKB55GL9B8UndXC3vvOIFgXYRSmCD5PysK4=
Subject key identifier: 06:67:7C:DF:7E:58:E7:21:C5:59:CC:0A:AE:23:79:D8:52:75:0E:DC
Authority key identifier: DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
Certificate issuer: /CN=dde36e98021264f5a8070106780be29d48a16c67
Certificate serial: 01A00213C89BAC9714A4FE6FC22B1DCD4F28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
Manifest number: 1345
Signing time: Fri 14 Aug 2026 21:00:45 +0000
Manifest this update: Fri 14 Aug 2026 21:00:45 +0000
Manifest next update: Sat 15 Aug 2026 21:00:45 +0000
Files and hashes: 1: 3eNumAISZPWoBwEGeAvinUihbGc.crl (hash: s3y6vlhur3NbITzZhXYEb06Z05eJqcG87jzHv57CXOQ=)
2: XOAJzQ9VwXh6TB5qa8PPijbh2aU.roa (hash: M8IPys/5UHBrIndSXlL2fp5Vz45fcZszjNzRdsRKs8k=)
3: wGffXotQutM5YPxgbpljeS3a9Gg.roa (hash: mICd/WsUOrkWcP68fCHD3+9zyqzcoi13I1Pp/yVs0e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:c8:9b:ac:97:14:a4:fe:6f:c2:2b:1d:cd:4f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dde36e98021264f5a8070106780be29d48a16c67
Validity
Not Before: Aug 14 21:00:45 2026 GMT
Not After : Aug 15 21:00:45 2026 GMT
Subject: CN=06677cdf7e58e721c559cc0aae2379d852750edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5c:b8:3c:e2:ef:11:cf:ce:79:1b:eb:2d:79:
d3:33:54:ae:2b:58:6f:c7:24:44:47:68:58:14:0e:
57:4b:9b:4a:d2:72:61:ac:32:78:f3:3d:e7:f6:ea:
1a:89:20:5b:3b:aa:52:4a:77:b7:2a:72:cb:ba:da:
5c:46:0e:cf:77:0f:15:a9:5e:0d:af:80:60:d3:df:
2f:11:92:f0:c1:76:47:ac:0a:21:bc:40:22:be:a7:
1d:95:92:9f:71:38:09:2a:ec:ed:34:c5:f9:38:95:
bc:6c:df:fc:cd:93:c8:27:a9:81:67:02:05:15:83:
19:8e:66:42:ab:85:81:88:c7:f4:f8:9f:e1:e3:95:
4e:d3:fe:10:f5:b8:39:12:47:c5:8c:a2:a9:22:2d:
d8:6f:a0:6d:c6:4e:6b:9f:74:9d:96:d3:1d:d7:51:
bd:6c:c0:25:47:ba:0f:08:c2:ac:af:be:c9:6f:fd:
36:c8:36:d2:9a:d9:19:ea:32:f3:6b:89:b4:1e:24:
b8:e8:8a:f4:1c:a4:8d:b0:34:0d:71:a9:5e:d9:5f:
ae:8a:ae:9e:d8:b1:52:f2:93:e2:86:9c:66:ea:71:
49:1f:21:66:e0:03:24:e3:66:89:9b:4a:c8:09:d1:
84:9d:f6:5b:62:a6:01:a2:14:fa:b3:29:77:e1:f0:
37:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:67:7C:DF:7E:58:E7:21:C5:59:CC:0A:AE:23:79:D8:52:75:0E:DC
X509v3 Authority Key Identifier:
keyid:DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:18:32:c4:b0:f1:80:f3:9b:d8:f1:49:96:39:a6:e6:b5:81:
c0:2b:b0:27:ba:79:95:3c:91:7c:e2:01:00:83:04:55:89:89:
88:0f:ad:d2:9e:8d:1e:1a:d0:87:8f:c4:88:42:9e:2a:9f:a8:
45:95:3b:28:cb:bc:22:8e:58:97:30:e6:ab:5e:72:f0:73:ea:
ba:48:6c:aa:28:c8:bb:12:b5:1a:2d:f8:0a:89:9c:71:2d:74:
62:ad:3d:c0:8c:e6:f0:7f:b7:10:11:fc:56:11:d7:61:0f:8a:
cd:8a:a5:89:f7:d7:80:ed:0f:69:ed:63:0a:64:62:f7:48:9e:
4c:b4:0b:d4:cd:4a:cc:e2:93:f4:b3:26:22:30:3d:8d:c7:5a:
dc:5d:f1:73:83:64:11:09:f5:31:c4:95:bf:c1:12:7c:e5:bc:
af:63:57:57:90:ae:96:07:2c:54:65:8d:5d:6f:7a:a8:e4:8f:
af:d0:69:b8:11:aa:8f:f0:08:70:e9:21:bf:23:b3:86:c9:f9:
b4:7f:ed:a0:d1:61:de:a5:91:1e:57:f7:45:ad:2d:f1:ef:1f:
45:1e:a3:3b:84:b7:6a:88:e4:0c:14:d3:65:b5:b0:6d:69:d7:
13:a3:b8:2a:11:15:cb:46:58:e9:bf:b9:46:6d:b1:ed:93:2f:
17:ae:42:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:19:19 2026 by rpki-client