Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
File: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft (raw, json)
Hash identifier: uGAePexNEKAKJb14OrhRb6Rrj440Mng52RTsp6VgYeI=
Subject key identifier: B4:89:4A:E5:E3:51:12:4D:D7:A5:75:B2:9B:AF:04:0C:52:44:FE:9A
Authority key identifier: DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
Certificate issuer: /CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Certificate serial: 01A0005C72127AABEE0FE8C8875840D9C56F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
Manifest number: 1316
Signing time: Fri 14 Aug 2026 13:00:53 +0000
Manifest this update: Fri 14 Aug 2026 13:00:53 +0000
Manifest next update: Sat 15 Aug 2026 13:00:53 +0000
Files and hashes: 1: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl (hash: MN9qOPHIQosX0DVY8sA/cgfJ2fhwu+oD8r0R9x0zlME=)
2: f8-DGeBP35-N3w51zaELLHTWQhA.roa (hash: p45bmNjagtDF3HgTTRtJcWFVXkd0k7P3PfW1B+YfWgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:72:12:7a:ab:ee:0f:e8:c8:87:58:40:d9:c5:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Validity
Not Before: Aug 14 13:00:53 2026 GMT
Not After : Aug 15 13:00:53 2026 GMT
Subject: CN=b4894ae5e351124dd7a575b29baf040c5244fe9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c3:d0:e7:3a:92:55:9f:6b:68:04:6c:40:70:
ee:d0:25:1d:8e:ed:52:dd:f0:59:b3:7f:fb:c4:9f:
ad:c7:96:2a:17:78:fb:df:f9:f8:ef:80:80:6d:26:
91:66:ed:8a:2a:8e:83:08:57:d2:d5:37:b8:80:bc:
fe:8c:90:17:fc:cb:91:33:30:aa:2b:50:aa:2e:58:
0e:17:19:5b:15:c7:ce:cc:03:d5:bc:bb:a8:bc:fa:
7a:61:f6:b8:f6:4d:31:ba:77:ae:ad:a2:a2:76:42:
ed:41:f7:47:08:2c:8b:f5:ec:a0:71:dc:17:44:6e:
78:f2:f9:6b:89:31:d5:25:01:d4:b4:bb:10:39:56:
fb:9c:86:21:60:a8:9d:e2:29:c3:0a:e6:3a:42:fc:
80:92:bd:78:79:ed:a3:08:58:67:0c:58:3e:a0:a5:
5c:4d:d7:3b:79:a6:af:c9:51:63:a7:89:47:d1:5b:
3a:dc:a9:13:54:18:cf:7e:82:b8:7e:9a:8c:e7:3e:
e3:1b:f5:64:0b:32:25:3c:21:a0:e6:9b:1b:06:44:
26:9f:b2:25:95:23:e7:12:d6:a2:da:58:b3:e1:b3:
7b:b0:17:ae:30:47:a2:5c:4c:01:3f:24:75:a7:f0:
bb:10:2e:2d:86:5b:7a:f3:d7:93:59:b2:61:98:99:
16:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:89:4A:E5:E3:51:12:4D:D7:A5:75:B2:9B:AF:04:0C:52:44:FE:9A
X509v3 Authority Key Identifier:
keyid:DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:01:74:df:0b:c8:e0:4c:39:6a:97:2c:91:7d:5c:1c:bd:19:
d5:b5:b5:2f:c4:47:dd:10:20:96:1e:61:58:df:5e:35:be:70:
b6:d3:32:f2:66:b3:3d:1f:6e:4f:cb:c5:76:af:d4:3d:ca:11:
4e:31:e9:7b:1f:48:cf:2d:12:3c:f0:7c:ec:0a:09:3e:d6:db:
6a:4f:c9:d7:cf:04:21:91:83:2b:79:18:8a:0d:94:7b:17:71:
92:6a:cd:4a:5f:36:5a:d0:68:cb:a9:b3:3e:42:0b:13:1e:42:
22:a6:73:bc:b4:f0:f0:f0:f6:0c:f0:68:88:9e:82:22:0d:9a:
9f:c8:c2:64:8d:47:c8:46:88:ee:e3:9a:25:02:58:38:4b:73:
a4:63:c1:76:f6:fc:09:51:19:03:cb:e6:de:98:d9:4e:ac:fd:
40:49:1e:04:dc:bf:8a:a6:81:70:b8:45:3b:57:c6:f6:20:87:
99:ad:2d:91:3e:0a:26:15:ab:d0:0b:3b:f7:5a:94:88:ab:1c:
d0:84:79:17:0d:b6:42:e7:fa:49:fc:4d:d1:73:18:9b:52:cb:
3b:66:4e:26:d0:4c:b2:94:a5:0c:cb:7f:af:d6:92:5c:4b:7c:
6d:7b:a3:c0:60:25:65:68:69:05:76:88:47:91:2f:ad:fb:3e:
85:05:82:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:06 2026 by rpki-client