Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/3gKSn1rIw0n-qYVSnBcU58yVz80.mft
File: 3gKSn1rIw0n-qYVSnBcU58yVz80.mft (raw, json)
Hash identifier: uIrkyjmxXR+dpq1IgYhyH5Ty2/bHpRVB5VOZMCyt/H4=
Subject key identifier: 1F:7A:33:D0:1E:91:B8:46:4E:D7:05:1B:3F:FA:70:C1:5C:4B:9D:F9
Authority key identifier: DE:02:92:9F:5A:C8:C3:49:FE:A9:85:52:9C:17:14:E7:CC:95:CF:CD
Certificate issuer: /CN=de02929f5ac8c349fea985529c1714e7cc95cfcd
Certificate serial: 01A0F4C4212EBB8023590F02DDC68A897CF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gKSn1rIw0n-qYVSnBcU58yVz80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/3gKSn1rIw0n-qYVSnBcU58yVz80.mft
Manifest number: F8
Signing time: Thu 01 Oct 2026 00:01:29 +0000
Manifest this update: Thu 01 Oct 2026 00:01:29 +0000
Manifest next update: Fri 02 Oct 2026 00:01:29 +0000
Files and hashes: 1: 3gKSn1rIw0n-qYVSnBcU58yVz80.crl (hash: NggBXZUh3Y01jWdTx7eeRAn95z6Q5PDrajeWLwnkMlA=)
2: qt1X8cd4EEdSt0Ko4GKZetgm0U8.roa (hash: QOME3Vz+1BFTr6N1pPVdoLgRzF0h3H4cA0/YeWP3aH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/3gKSn1rIw0n-qYVSnBcU58yVz80.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/3gKSn1rIw0n-qYVSnBcU58yVz80.mft
rsync://rpki.ripe.net/repository/DEFAULT/3gKSn1rIw0n-qYVSnBcU58yVz80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 00:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f4:c4:21:2e:bb:80:23:59:0f:02:dd:c6:8a:89:7c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de02929f5ac8c349fea985529c1714e7cc95cfcd
Validity
Not Before: Oct 1 00:01:29 2026 GMT
Not After : Oct 2 00:01:29 2026 GMT
Subject: CN=1f7a33d01e91b8464ed7051b3ffa70c15c4b9df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:90:e0:47:56:3b:b0:14:5b:de:00:26:c5:8c:
27:a3:e9:d3:fc:bf:7a:d2:40:98:f5:46:79:8b:37:
ea:b6:57:8f:9e:74:b8:41:eb:66:2f:50:3a:d0:55:
a9:a0:68:a4:c2:6d:4d:75:78:1a:72:06:17:b6:69:
ba:08:6e:19:ba:88:0a:c9:36:e6:48:90:77:26:b5:
96:98:7d:e1:df:6d:bd:24:b1:df:f3:bb:0c:de:37:
23:59:b8:24:eb:aa:d6:ab:06:b2:47:cc:8f:a6:70:
47:85:8c:b2:9c:ae:70:9f:7f:03:bc:66:53:c2:cf:
c1:74:ed:1e:d9:2d:d4:c7:3d:c0:da:36:e4:2e:d0:
af:a4:56:66:54:36:5c:61:30:c5:4c:f5:dd:c6:2d:
46:19:03:75:d5:17:44:86:45:b6:bd:5e:ad:c1:4f:
26:0e:c9:9b:0e:5e:f1:80:63:bb:28:6e:de:35:2d:
30:93:93:e1:ef:4d:bd:15:91:da:55:1a:90:23:e5:
39:d2:cf:29:3a:8b:77:d5:11:f2:d3:7e:ae:d4:37:
27:57:a3:d6:fd:a5:29:32:b8:49:ec:ef:bf:a8:73:
0f:ef:83:95:31:87:80:21:dc:c8:d9:9f:8d:9b:41:
37:77:94:4f:42:02:15:f3:20:77:85:1f:b5:84:3a:
15:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7A:33:D0:1E:91:B8:46:4E:D7:05:1B:3F:FA:70:C1:5C:4B:9D:F9
X509v3 Authority Key Identifier:
keyid:DE:02:92:9F:5A:C8:C3:49:FE:A9:85:52:9C:17:14:E7:CC:95:CF:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gKSn1rIw0n-qYVSnBcU58yVz80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/3gKSn1rIw0n-qYVSnBcU58yVz80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/3gKSn1rIw0n-qYVSnBcU58yVz80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:72:f2:29:a8:56:ed:38:64:36:4b:6b:89:b2:85:18:3a:3d:
f1:10:6d:ba:a9:1b:7c:09:40:b9:fc:26:95:34:fc:ab:24:62:
55:54:4d:9a:f2:97:6f:ba:39:2d:21:dd:e9:a6:38:06:b9:dc:
e6:3e:33:05:ec:ac:cd:91:3b:94:d3:c0:ba:e8:bf:8c:79:7f:
58:35:c7:bb:71:c4:94:b9:bd:d0:e9:96:7c:83:19:42:fa:8e:
ce:72:6e:ba:80:d0:87:5f:7a:0b:86:e7:3d:bd:fe:fe:0a:5e:
70:e1:78:30:a5:86:29:01:be:40:5b:60:60:41:2e:5e:e0:94:
d1:d9:02:be:f4:5a:6f:f0:68:c6:13:a5:02:eb:19:b4:e4:24:
6b:39:45:b0:f8:ee:ec:7e:92:3c:44:1a:9e:5c:b5:06:9c:4f:
72:5a:60:a9:aa:1b:98:e3:4f:f3:61:fc:ee:9f:51:7d:0a:c9:
35:82:30:23:c2:b2:cf:e5:be:f4:0d:a4:50:bd:b4:b6:39:6e:
35:b7:7c:df:2f:b2:2b:18:26:79:2d:08:94:9f:52:c1:d0:f8:
de:88:61:80:52:ae:1a:38:f7:17:99:32:42:83:b9:19:22:32:
39:51:7a:84:98:fb:87:1c:6b:f7:12:0a:e0:08:9d:1c:f0:1b:
f6:65:9c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 12:08:03 2026 by rpki-client