Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
File: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft (raw, json)
Hash identifier: o+J6vmtetEgdNlFw7HZLvmCvaiFzqyCZJ9iFL9vKBA0=
Subject key identifier: 78:4A:63:DA:7E:37:53:24:FD:20:D1:6A:B1:20:98:18:15:8D:1B:B8
Authority key identifier: DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
Certificate issuer: /CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Certificate serial: 01A13D1358D97C87A99DF507B799729C0DC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
Manifest number: 13BA
Signing time: Thu 15 Oct 2026 01:00:40 +0000
Manifest this update: Thu 15 Oct 2026 01:00:40 +0000
Manifest next update: Fri 16 Oct 2026 01:00:40 +0000
Files and hashes: 1: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl (hash: erjjy/KjhuPIaQ8B2PI2akyHY4GNr0BwMzqQMMLm/1Q=)
2: f8-DGeBP35-N3w51zaELLHTWQhA.roa (hash: p45bmNjagtDF3HgTTRtJcWFVXkd0k7P3PfW1B+YfWgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:58:d9:7c:87:a9:9d:f5:07:b7:99:72:9c:0d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Validity
Not Before: Oct 15 01:00:40 2026 GMT
Not After : Oct 16 01:00:40 2026 GMT
Subject: CN=784a63da7e375324fd20d16ab1209818158d1bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:48:d7:9a:bb:2f:db:c0:84:76:63:a1:66:c6:
a4:d3:d2:e3:41:28:79:90:b5:d9:9a:d5:c2:3f:eb:
75:5e:1b:0b:69:95:d9:34:a2:70:91:f9:83:8d:c3:
13:9d:cc:65:74:ff:27:c0:79:3a:01:c7:a0:87:7a:
0d:39:77:de:f0:41:92:43:34:84:51:54:59:93:45:
eb:48:df:96:f1:9d:cd:c2:ad:e4:5b:87:b2:de:05:
d2:de:ee:b9:03:83:48:bb:76:a1:b8:1e:c5:3e:12:
c4:54:4f:3a:73:8c:3d:5c:f5:88:5e:b5:d6:df:d3:
32:a3:34:22:73:f2:1f:9b:fb:42:1e:c9:2a:55:1c:
40:ba:2d:d1:33:c2:93:a6:90:01:58:e4:db:6d:61:
08:54:52:38:76:56:f5:3e:92:8f:d0:6f:31:0b:84:
f4:5c:05:11:e5:45:81:d9:c9:47:89:8f:91:7b:3d:
7b:03:9d:27:c6:21:e3:92:d4:61:83:49:94:fb:4e:
b0:a2:90:7f:99:7e:87:69:27:f3:0a:e0:82:49:f7:
59:47:c1:ea:b6:33:72:9a:a9:fe:1b:c2:0f:d6:f8:
ee:99:b9:d5:73:57:04:4d:e9:3f:c6:6d:ac:53:08:
04:ff:a6:35:1d:98:d3:94:e0:9c:0b:44:80:55:4d:
49:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4A:63:DA:7E:37:53:24:FD:20:D1:6A:B1:20:98:18:15:8D:1B:B8
X509v3 Authority Key Identifier:
keyid:DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:8f:70:f6:48:a8:33:d4:20:39:5a:92:62:01:3e:b8:66:86:
a2:4d:01:17:09:fc:b2:23:a5:67:d1:03:c5:57:cc:36:58:a1:
d3:09:4b:79:e9:d1:4c:62:56:ba:24:5b:e1:be:cb:70:3c:6f:
8c:8a:50:43:6d:5d:55:c9:67:02:2f:d5:f4:86:03:39:2d:90:
bd:12:98:45:a1:34:2e:66:9e:96:71:a2:d1:c8:ba:23:0c:6a:
61:85:be:f0:ab:4d:94:2f:bd:35:52:62:ee:23:6f:51:50:03:
63:90:ef:8c:da:f5:e3:41:b1:05:8d:f8:f5:3e:96:cf:37:28:
d8:3c:f4:07:79:c6:64:9c:12:67:7f:c0:6f:df:c0:73:04:83:
30:3b:f8:7a:dc:bf:0c:bf:1f:1e:b2:ac:98:65:cb:8b:76:6d:
f9:41:c6:f8:37:60:1b:5d:22:a3:59:34:cd:01:16:1d:37:6b:
28:49:82:48:09:b0:3c:c9:e6:c0:2f:b7:31:06:9f:38:ee:1f:
72:a5:1a:82:5a:d4:3e:88:8d:63:dd:cb:31:cf:37:fd:0d:6c:
f4:83:b4:d6:61:3a:0c:d0:be:fe:2c:21:6a:7b:b2:7e:bb:0b:
11:53:fd:cb:3c:84:c4:bb:b4:2b:c6:d9:f3:73:34:09:69:3c:
0f:b0:bc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:38 2026 by rpki-client