Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
File: 3Os5Sq4INtNDQfetMZSUdlq1awc.mft (raw, json)
Hash identifier: 7/9yZKliBijw6qrF2G2BixRQZtXXxIlFZFTM78rrhCA=
Subject key identifier: 1C:1C:C1:CF:99:0C:37:27:A5:5E:9F:36:D5:91:09:71:82:4C:BD:59
Authority key identifier: DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
Certificate issuer: /CN=dceb394aae0836d34341f7ad319494765ab56b07
Certificate serial: 01A0859D40A39DA7ABCAB54CED3FDA77227D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
Manifest number: 05EA
Signing time: Wed 09 Sep 2026 10:01:10 +0000
Manifest this update: Wed 09 Sep 2026 10:01:10 +0000
Manifest next update: Thu 10 Sep 2026 10:01:10 +0000
Files and hashes: 1: 3Os5Sq4INtNDQfetMZSUdlq1awc.crl (hash: oan2EUZ/tfTiCvSZ2jDbjGl5fUBC8mm+MVIh/SS2mRg=)
2: RwZ9F-pdINA65vVgGDGApgyfhto.roa (hash: eZaWhNjBT1qB/UTcePoZ/N6A45ILygXPpUHwGv0YfOw=)
3: SFQQoJg97TGHjrgzii8KpRT8xfc.roa (hash: iv/LMo2P0Oa29pglyapnh+eYTODXjJUku1HA9y8udbA=)
4: sOAijZZYpwie6wu7M4Wlx6kerB4.roa (hash: H5sz+pWO9A1d2Sg5RORtCUGJSuWJhTFvhX/iRzLdtRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:9d:40:a3:9d:a7:ab:ca:b5:4c:ed:3f:da:77:22:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dceb394aae0836d34341f7ad319494765ab56b07
Validity
Not Before: Sep 9 10:01:10 2026 GMT
Not After : Sep 10 10:01:10 2026 GMT
Subject: CN=1c1cc1cf990c3727a55e9f36d5910971824cbd59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d4:c7:c0:a5:95:77:b7:76:a9:06:3e:1f:f4:
6c:ff:67:bb:c3:3e:7c:a4:29:77:39:d2:c2:fc:da:
a7:1c:8c:78:f6:41:d7:b4:85:67:32:04:11:28:58:
e0:87:50:f3:76:63:f4:57:5d:ab:00:b8:0e:d0:64:
b2:42:9f:b8:1c:90:19:89:00:68:2b:b2:d5:e7:f1:
d3:7b:68:7f:9f:79:48:47:b0:4f:19:c6:3c:43:3a:
68:4e:07:2d:81:8f:30:9d:66:2e:35:89:13:de:fe:
09:93:25:3b:86:b3:da:98:3c:c8:e5:48:19:b5:bf:
bb:56:89:7a:59:1c:35:17:20:c0:3a:4c:03:43:2a:
ce:13:0a:86:d8:00:3b:b3:20:8c:d3:c1:8f:80:e1:
4e:55:fd:43:7a:8b:f9:8c:97:91:45:1e:0e:0d:0f:
40:01:7e:65:9c:f1:27:64:bd:9b:9c:5b:df:a2:74:
46:f3:45:78:12:9b:d5:d1:f7:17:93:c0:91:11:0f:
c0:ed:fa:87:ae:6c:20:7b:b7:6b:e1:f6:c9:bc:c0:
a8:9a:63:4f:58:f0:6d:90:42:a0:c1:2d:71:ac:d1:
71:e7:0d:85:93:d0:6f:34:3e:ae:19:34:82:be:d4:
12:0a:2d:26:cf:be:dc:12:f4:14:25:9b:1a:a9:eb:
e3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1C:C1:CF:99:0C:37:27:A5:5E:9F:36:D5:91:09:71:82:4C:BD:59
X509v3 Authority Key Identifier:
keyid:DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:1b:3b:19:15:14:d9:4c:0e:0b:2b:4d:e1:19:57:cd:ca:19:
76:5f:39:34:73:73:5b:80:dc:66:0d:27:4c:26:04:85:bc:73:
5e:14:7a:84:96:98:01:4c:1c:4a:64:58:4f:d1:1a:37:4a:19:
e2:61:f2:4f:33:40:ef:eb:d9:4a:f1:35:01:fb:3b:9f:f0:d6:
bc:41:e7:97:7c:db:e2:31:64:ce:88:9c:f0:70:d7:5b:38:ab:
2a:e0:94:9f:33:14:2f:9e:8c:eb:0b:33:fa:de:82:65:ec:9c:
02:fd:be:19:65:2a:e2:42:fe:3b:6d:14:22:6d:bb:7b:b3:9b:
1a:91:ae:89:72:95:b1:17:83:d9:16:2f:85:04:35:65:df:2b:
de:1d:1a:72:e7:fa:62:65:e8:42:ac:81:d9:ff:2a:77:9d:eb:
21:cb:58:3a:8e:72:f2:1a:a0:23:15:b7:82:d4:45:d0:43:c9:
de:10:1c:69:b5:33:9d:4e:90:73:fa:e8:b1:f9:cd:1a:20:20:
ec:4e:ba:c1:12:c0:76:e1:18:88:cd:85:cb:94:21:e9:67:c5:
e0:08:6b:5c:2a:2c:4a:03:c9:3e:26:cb:ed:91:e2:1f:e7:cd:
d8:4c:f9:f3:e2:c1:74:78:aa:ae:a0:f6:20:8b:29:6d:2d:d2:
00:97:cd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 19:06:41 2026 by rpki-client