Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
File: P3lU2IwK4_Y5hpe_38GVanU-g9g.mft (raw, json)
Hash identifier: Aq63q92BRIz8/F8gzGbx5E1LNqt5aI4SR3r6VaSRT+I=
Subject key identifier: 62:F0:5C:7B:75:E2:8B:58:6C:CE:F1:BD:CD:24:8B:D2:96:93:00:C9
Authority key identifier: 3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
Certificate issuer: /CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Certificate serial: 01A08C0CBFB2D84DA5EC07ECF31BA8A1D242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
Manifest number: 1A23
Signing time: Thu 10 Sep 2026 16:00:40 +0000
Manifest this update: Thu 10 Sep 2026 16:00:40 +0000
Manifest next update: Fri 11 Sep 2026 16:00:40 +0000
Files and hashes: 1: Jj1TbiCR1nmoQFDDhEUp8Nme5jQ.roa (hash: vEZJZ1EhFYSpfGBedYuhl8hXTejG4aUKraQ3lMQVDzY=)
2: O2XFtNMj5F8lYJUMSubzNUa8Fr4.asa (hash: 67is5rgLKuOUXA0v6cE8sl5V36YTQpNm07lUONgLSRE=)
3: P3lU2IwK4_Y5hpe_38GVanU-g9g.crl (hash: I0ab2R/xDRXgbwfPLMaRiW7J4PB52mx6i1UU8oJYsq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0c:bf:b2:d8:4d:a5:ec:07:ec:f3:1b:a8:a1:d2:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Validity
Not Before: Sep 10 16:00:40 2026 GMT
Not After : Sep 11 16:00:40 2026 GMT
Subject: CN=62f05c7b75e28b586ccef1bdcd248bd2969300c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1e:3d:68:9b:1f:ca:9d:f1:e2:45:95:65:79:
bb:6d:2c:2e:60:d4:42:98:4e:a1:34:1f:46:1a:6d:
25:60:b8:63:2c:87:31:90:01:c9:7d:60:bc:a3:30:
67:52:b4:a8:81:a0:ce:26:27:58:a9:e8:09:14:ca:
a4:e1:7d:5a:23:49:1f:28:4b:22:61:61:e4:47:ca:
eb:7b:ef:a0:55:67:34:95:26:41:68:e7:37:b7:d9:
58:d5:37:83:fa:76:d0:d6:9d:97:09:f5:95:84:64:
2a:47:c4:fa:a0:31:20:4b:26:d7:97:4f:2b:98:62:
7d:27:e3:b9:15:c7:2f:b0:83:1a:85:ba:1f:89:33:
2a:e4:b3:08:8e:94:a8:c8:bb:8d:59:be:21:61:60:
60:a9:f9:11:8c:86:56:1b:61:52:81:f7:3b:6f:a0:
27:c7:4e:21:f1:71:27:cf:24:58:28:1b:8a:35:8e:
db:92:0c:fd:66:39:24:51:89:32:c0:e8:82:10:f2:
d2:7b:92:30:57:2e:72:cf:4a:40:67:3d:e5:56:dc:
66:9c:d3:24:f5:f0:d4:86:73:38:8c:7f:ef:55:77:
ea:b3:ff:78:bf:79:e3:0f:29:7b:ef:c0:8c:8c:e7:
78:da:d6:d6:8c:49:99:38:10:d3:7e:d1:23:f2:22:
52:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F0:5C:7B:75:E2:8B:58:6C:CE:F1:BD:CD:24:8B:D2:96:93:00:C9
X509v3 Authority Key Identifier:
keyid:3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:9a:17:dd:b2:0c:ec:23:dc:4d:4a:e6:32:9f:3f:22:85:25:
06:7d:6e:e4:d0:70:19:05:bc:33:86:01:6b:64:44:3f:5b:50:
6f:ee:ae:d9:25:93:80:5c:cc:b7:22:6b:11:36:78:b5:08:53:
5b:24:b9:fd:1b:d1:a7:2d:8c:92:b4:c7:3f:dd:3d:f2:96:e5:
eb:eb:80:9b:73:8d:9f:96:98:12:77:13:01:10:73:46:79:0d:
cd:61:e3:35:25:f5:9b:44:d0:16:d2:54:bf:b6:29:bd:51:4f:
ed:5f:06:69:3f:53:12:19:f8:55:b1:72:54:c6:ff:25:84:fd:
5d:97:d1:5f:58:46:56:42:d1:c4:f6:37:cb:ab:d5:24:44:cb:
65:95:32:8f:52:1a:db:f0:ea:0f:9e:42:36:c4:aa:a6:af:20:
39:d5:09:6b:e8:98:bf:6e:bd:2a:5a:c4:4e:73:cc:8e:a3:f0:
13:b8:9a:3b:70:34:f8:27:4a:50:db:60:43:ba:05:06:a6:bc:
5b:36:19:4d:4d:1c:ad:d1:c1:e5:ef:46:67:dd:f9:51:07:3d:
90:51:f5:d5:b2:5d:b3:c5:bc:3d:8c:80:ff:e9:55:64:ac:fd:
ea:64:57:76:37:31:68:77:40:17:90:c1:e0:bd:cb:14:e2:69:
dc:68:9b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:03:13 2026 by rpki-client