Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
File: 3Zgvl5otJeuy2rJlS4wnySjPWsc.mft (raw, json)
Hash identifier: xH9Da5XUv5ZLe9cpnVR7owZ5srlKTHXXzY9gelF5dfI=
Subject key identifier: 8A:A4:AD:22:A8:4F:F7:88:62:D5:6D:47:16:C2:77:63:28:31:B9:01
Authority key identifier: DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7
Certificate issuer: /CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7
Certificate serial: 01A11FAE6D08D6B958AB3C6C57FF87E4E1E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
Manifest number: 1A41
Signing time: Fri 09 Oct 2026 08:01:26 +0000
Manifest this update: Fri 09 Oct 2026 08:01:26 +0000
Manifest next update: Sat 10 Oct 2026 08:01:26 +0000
Files and hashes: 1: 3Zgvl5otJeuy2rJlS4wnySjPWsc.crl (hash: 4dnaPvjp+UA9jum/kCvDee3YWi4oYo8YhniI1AkKEXY=)
2: 66xj8nJZJDodIpTEFYfIO2lI0pg.roa (hash: cnTcAyScXe7FLebnmc+X1hADlgaMe8Kz4UH8Ho7fCks=)
3: YC7q8GupNzZHSH1s2Vu8MGm0c2Y.roa (hash: TnzlosbHJ70+TNYLJ5XWl/2V3tal0xrZM8UfJyyEdK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:ae:6d:08:d6:b9:58:ab:3c:6c:57:ff:87:e4:e1:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd982f979a2d25ebb2dab2654b8c27c928cf5ac7
Validity
Not Before: Oct 9 08:01:26 2026 GMT
Not After : Oct 10 08:01:26 2026 GMT
Subject: CN=8aa4ad22a84ff78862d56d4716c277632831b901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b4:e4:27:8f:dd:fa:26:61:40:50:0f:06:c0:
a6:b0:7a:af:19:50:5d:31:b3:97:d7:93:a7:d3:ae:
57:a6:51:1f:3a:a5:49:75:c6:67:57:c8:f3:d3:ae:
a0:46:0b:aa:55:3b:58:07:c9:b7:c0:08:44:e3:d0:
ea:0f:a8:d9:9d:4d:16:1e:7c:b5:15:f6:d2:ca:db:
22:63:da:64:05:c9:e6:fe:58:fe:c9:eb:d1:d3:4a:
ec:2e:1f:79:c1:bf:c4:9d:2a:ec:c9:07:ef:cc:28:
cf:9b:52:da:b3:32:6f:43:4b:77:1f:11:a6:86:8b:
0d:0c:fc:59:9f:fe:8e:83:29:50:7c:30:cb:c4:11:
c4:33:ab:79:5c:d7:c1:e3:15:59:c4:1a:8e:73:60:
e9:0a:12:ec:03:13:f9:18:2d:77:b7:b0:11:37:8e:
9f:aa:62:07:b3:d2:c2:ea:1f:66:ee:22:b2:a3:34:
87:b0:99:e9:46:1b:73:09:46:6e:12:6b:a8:01:c6:
7d:2b:56:2e:0a:f3:ad:8e:c6:fc:7a:7f:3e:ca:9d:
b4:0a:f1:4a:80:85:c1:24:fc:d2:08:35:9f:f8:4c:
5b:bb:b1:4a:90:16:66:40:45:02:87:87:af:87:f4:
68:f5:64:0b:77:4b:f1:43:c4:87:05:77:a8:3e:2f:
b4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A4:AD:22:A8:4F:F7:88:62:D5:6D:47:16:C2:77:63:28:31:B9:01
X509v3 Authority Key Identifier:
keyid:DD:98:2F:97:9A:2D:25:EB:B2:DA:B2:65:4B:8C:27:C9:28:CF:5A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Zgvl5otJeuy2rJlS4wnySjPWsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/37ea19-6f25-42bc-ad27-9886cb1b640e/1/3Zgvl5otJeuy2rJlS4wnySjPWsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ae:60:87:9d:1d:e2:ba:df:cf:0f:67:fa:d7:a8:24:9c:79:
f6:72:f8:76:41:fe:4b:29:cb:9f:7d:04:af:65:3c:8a:1e:a7:
8d:2f:ef:c5:93:2a:86:3c:ae:94:36:c6:bb:5e:c0:7f:3f:95:
57:ea:a8:29:5b:9d:55:82:e5:67:97:2e:65:65:65:35:9f:71:
38:8f:53:ac:7e:4b:ad:51:04:87:63:5b:57:d2:7d:03:fb:b5:
af:17:03:46:db:47:1a:33:9f:df:5f:4a:4d:32:db:3f:98:96:
ec:25:90:90:5d:23:2a:fd:04:30:d0:7a:7e:a2:53:f7:25:21:
90:d2:fc:f3:d7:cf:51:a6:53:ad:0b:21:00:50:95:f6:27:71:
a6:b3:b8:07:81:2b:7e:5d:9b:5e:ad:f4:eb:a7:be:26:3f:fa:
c3:f1:2f:31:5a:40:13:81:a5:0d:41:97:b3:11:38:bb:b6:27:
ad:24:00:d3:76:ec:97:e2:5b:7c:16:5d:2f:f3:f4:32:de:e1:
b0:c8:1a:80:a1:5b:d6:77:db:8c:f9:e9:fb:19:08:e9:89:35:
08:0e:70:a6:56:bb:38:28:22:fc:b6:40:de:35:c4:ed:4e:72:
85:35:4b:42:8c:0c:51:ed:75:00:ff:75:02:60:ac:17:1d:d3:
86:12:33:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 18:27:30 2026 by rpki-client