Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
File: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft (raw, json)
Hash identifier: jcQE4BfQjyAHA3U0VO4+qluS8u9K3oQnwYLU5/3h08w=
Subject key identifier: 36:E0:1D:EC:D8:06:50:69:8A:15:B8:C0:36:FE:9D:7D:4F:F3:B4:57
Authority key identifier: B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
Certificate issuer: /CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Certificate serial: 01A06EA766D2F5B9A122390E06604BA6ED34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
Manifest number: 1A41
Signing time: Fri 04 Sep 2026 23:00:59 +0000
Manifest this update: Fri 04 Sep 2026 23:00:59 +0000
Manifest next update: Sat 05 Sep 2026 23:00:59 +0000
Files and hashes: 1: QXMTv56aBNAUruAXJC7IVsSmMG8.roa (hash: jId8pBbIUwFi+HQiN7AbLv5/eBeeSyed+4bqRVzluB0=)
2: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl (hash: USymFm9JKcGPG747t13r0A4Imiwq940xvQk47HVpjl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:a7:66:d2:f5:b9:a1:22:39:0e:06:60:4b:a6:ed:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Validity
Not Before: Sep 4 23:00:59 2026 GMT
Not After : Sep 5 23:00:59 2026 GMT
Subject: CN=36e01decd80650698a15b8c036fe9d7d4ff3b457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:aa:e8:fc:38:e0:e9:a6:0e:89:76:39:3b:33:
c4:6a:1b:d3:b4:71:1b:b1:66:97:c5:e1:db:cc:8f:
97:81:f7:35:33:e1:a7:42:8b:42:65:9d:e1:05:a3:
bd:6e:45:6c:dc:4a:b0:54:9d:b6:14:15:5f:1d:34:
99:7f:8b:07:74:53:f5:c3:c8:95:c0:92:fc:9d:5a:
2e:0f:6a:6a:54:56:e6:e6:f1:66:1f:5b:43:98:fd:
20:35:f5:4c:5f:50:e2:6d:8c:ed:18:cf:fe:57:ec:
b9:b7:a3:ed:02:20:57:33:d6:55:22:78:e4:72:63:
d5:fd:4d:09:2b:3c:0d:1d:25:43:11:46:e6:df:7a:
4c:50:60:59:a2:80:fa:b5:07:e0:e1:b4:03:58:83:
61:1c:3d:00:91:df:75:17:2e:93:6c:4a:f4:39:6f:
ab:ab:6b:94:1b:2b:38:13:ff:5e:45:c1:e8:60:f9:
63:98:9a:9c:4e:94:79:5c:07:4f:e9:b1:b8:69:bc:
c0:3c:8d:c3:8d:81:b3:d6:d1:ad:18:d2:31:2c:87:
7c:b7:88:71:9e:62:e6:f8:03:7b:82:dc:44:24:e8:
8c:76:40:ba:d0:f2:a1:7a:8c:88:9b:fc:69:10:1d:
c3:4b:31:c5:6c:e6:f2:fa:c0:aa:55:13:c8:0c:2c:
e0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E0:1D:EC:D8:06:50:69:8A:15:B8:C0:36:FE:9D:7D:4F:F3:B4:57
X509v3 Authority Key Identifier:
keyid:B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:3d:fb:58:05:57:3e:6c:31:27:fd:53:46:ab:1a:ba:6d:7f:
7c:c2:72:bf:61:91:ba:ab:f4:ad:2f:b8:e4:d7:d9:bb:0e:8b:
05:9f:ac:98:fe:f7:a0:06:a1:3d:1d:79:aa:53:5b:63:f1:b7:
53:08:ec:fb:c1:51:af:89:23:83:0d:86:ca:c0:3a:f1:ae:00:
09:60:ce:ce:c3:ff:2a:ec:c9:e3:cf:c3:58:d8:b0:96:dd:93:
c9:2d:02:86:cf:7f:1b:b5:13:19:86:84:43:df:86:e6:ff:f4:
a8:11:d3:9a:f5:e0:bd:b1:da:79:3e:58:73:fb:61:f6:bf:1a:
28:2a:4f:ae:a1:92:a4:25:de:4f:86:88:79:32:f1:c5:41:a5:
76:89:0a:d4:c1:31:2c:6c:02:8a:39:ab:3a:fb:eb:c4:98:aa:
24:75:be:5f:db:f7:5a:46:86:5f:02:2e:67:f8:5e:75:47:51:
3a:94:9a:23:c7:de:3f:ba:f0:9e:56:2d:36:a1:ee:d2:78:3e:
fc:2d:af:2c:93:17:7a:fe:54:68:8f:6b:63:c8:9c:bf:3b:d1:
f0:a9:6b:34:fb:4c:3e:d9:5c:a0:e8:d7:a4:df:05:33:27:87:
1f:3e:fc:59:b9:8d:c7:59:b6:f2:28:ec:03:2e:8d:80:71:d1:
d8:51:10:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:54:19 2026 by rpki-client