Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
File: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft (raw, json)
Hash identifier: 0cKx8y5WWyT0afhRno5Ma8s9e16mZyrp+FFxF615AuU=
Subject key identifier: 93:F2:30:72:2E:0A:15:8D:55:F7:40:8C:84:BA:74:BD:60:D1:2C:B7
Authority key identifier: DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
Certificate issuer: /CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Certificate serial: 01A001DCAFAA64E063EA3FAFB43CF5A18835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
Manifest number: 1508
Signing time: Fri 14 Aug 2026 20:00:35 +0000
Manifest this update: Fri 14 Aug 2026 20:00:35 +0000
Manifest next update: Sat 15 Aug 2026 20:00:35 +0000
Files and hashes: 1: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl (hash: ffQevHOq89Yr15rRpXqRAdA9ddsav8k/V65GEi/LQAA=)
2: H6HTDOjZlQ2VG-BteD4I1nTRn4k.roa (hash: a6IB6fLHDx6lViiB0ReUyYalYXgmOEaBsh6fJ2aLk04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:af:aa:64:e0:63:ea:3f:af:b4:3c:f5:a1:88:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Validity
Not Before: Aug 14 20:00:35 2026 GMT
Not After : Aug 15 20:00:35 2026 GMT
Subject: CN=93f230722e0a158d55f7408c84ba74bd60d12cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7c:7a:4b:bb:52:4f:5a:a8:73:b4:a1:d4:5b:
4c:26:19:dd:c3:f1:2a:97:ce:04:ce:c7:56:df:fc:
32:89:7d:cf:36:5f:e4:4e:c6:1b:6a:3c:2a:14:ed:
88:15:c6:52:43:13:89:8c:0e:8c:b7:73:69:44:43:
70:59:eb:d3:7b:f5:56:1b:6b:d9:c8:ec:cb:f3:14:
34:ca:23:02:60:0e:26:d3:9e:c0:b5:0d:b2:1e:d9:
6a:26:5b:c6:96:21:a2:3a:27:2b:6d:9a:a6:eb:c8:
44:6a:85:13:01:8a:ba:4e:8a:1f:b9:4a:a6:9b:f2:
f8:d1:e5:a2:2a:8d:70:fd:de:7d:fc:12:c2:c8:0b:
f6:58:6b:74:88:37:44:3e:6a:bd:2b:9e:fd:6b:7a:
33:39:4b:92:68:a8:d8:1a:36:d7:b8:1a:f7:78:29:
9e:32:a0:8a:e8:56:29:6c:12:b0:07:a8:db:af:41:
1d:10:ca:26:00:c0:af:fc:6e:96:5b:96:4c:33:4d:
b0:17:47:61:cf:80:38:13:92:8e:7d:be:32:8a:00:
da:45:bb:97:df:06:5f:22:c6:5b:ac:11:6d:63:4a:
04:02:5b:18:30:6b:eb:1d:09:13:ce:57:7f:d9:46:
8b:b2:e0:2b:57:03:61:86:b0:e0:2f:d8:f4:33:a2:
b1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F2:30:72:2E:0A:15:8D:55:F7:40:8C:84:BA:74:BD:60:D1:2C:B7
X509v3 Authority Key Identifier:
keyid:DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:51:9a:6d:43:48:7a:22:4e:41:e6:92:8d:56:09:f5:a7:0b:
67:a0:e3:8c:53:9a:a5:d6:54:5e:f0:e6:0d:b3:9b:b9:63:34:
06:6b:68:b2:2a:04:7c:ff:9b:d5:a2:4a:c3:2a:64:46:3a:64:
1f:26:11:3f:ee:7b:81:8c:ca:e4:c7:6a:49:f8:4e:c5:dc:48:
6f:1b:d9:af:71:99:9e:2f:77:74:e2:c6:2b:9c:2e:4f:20:f8:
90:bc:27:5b:db:67:e0:c0:8a:f9:5e:a9:96:b8:7d:3e:86:02:
26:dc:57:8a:4e:4b:2f:55:c1:94:5e:83:69:bb:cd:2f:5f:ef:
dc:be:c7:22:c1:a5:80:44:75:fe:e6:76:2d:10:47:e6:7b:bd:
ae:7a:70:c9:fa:61:27:7d:10:61:a3:3f:bb:6e:21:ea:6d:32:
53:c4:18:e4:ce:a4:29:65:1d:25:8d:2f:f5:26:eb:45:ce:6a:
d0:72:fd:d4:ba:9d:0b:a2:26:f1:7e:5b:0e:d5:f8:68:2c:1d:
47:df:86:ee:55:83:66:a4:fa:ef:6f:fe:db:6c:46:6d:75:4d:
96:1c:55:21:74:8a:50:70:03:af:d7:78:f9:7c:ec:c8:70:c9:
2d:75:aa:b2:31:bd:fd:51:0a:b5:26:4b:a0:e6:2c:3f:6d:33:
1e:95:6c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:08 2026 by rpki-client