Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
File: TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft (raw, json)
Hash identifier: 3wLTGIPXhOm9K3QmPpp4oApx+9VYNmcgEZN7TLTuJqQ=
Subject key identifier: 75:DE:5E:C7:9C:BC:F2:BC:90:E3:EF:7B:89:AA:FA:8B:3E:D6:4B:BE
Authority key identifier: 4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A
Certificate issuer: /CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a
Certificate serial: 01A08C7B6E4F363999AFFBDC7C22B6D19009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
Manifest number: 0BE3
Signing time: Thu 10 Sep 2026 18:01:34 +0000
Manifest this update: Thu 10 Sep 2026 18:01:34 +0000
Manifest next update: Fri 11 Sep 2026 18:01:34 +0000
Files and hashes: 1: NSzxR15lxLwAdc7Ga165-6mKacc.roa (hash: 3N9qBcothKO0rosVFxeggNkLbRm7QTKDO+BXyY2NEkk=)
2: QXNEa0rLZxlRlsB-8HuZ_VSJWP0.asa (hash: 6rji+pOpggUWT3pycZRN/hU8sc0Lzb5vIQ3TtjqmA1k=)
3: TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl (hash: 3AI0EE3vp34ZqmbFjpSsrqologQuxmx+BvFmpWXZc34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:6e:4f:36:39:99:af:fb:dc:7c:22:b6:d1:90:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a
Validity
Not Before: Sep 10 18:01:34 2026 GMT
Not After : Sep 11 18:01:34 2026 GMT
Subject: CN=75de5ec79cbcf2bc90e3ef7b89aafa8b3ed64bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:80:5f:37:4a:8e:e6:94:9e:f7:41:01:cf:65:
50:71:2e:75:f2:02:71:6e:5a:b2:87:a8:b6:e6:53:
9b:4f:cb:8a:fb:d2:2e:c9:81:c7:10:67:50:f6:ea:
b1:23:f4:11:5c:53:a1:59:dc:aa:86:4d:78:88:af:
9d:d3:3a:20:bd:1c:f1:3c:9f:ce:07:c3:e4:70:09:
3e:34:51:55:bf:43:9c:6d:56:5c:ac:f3:9c:5f:a4:
a3:fa:d2:d6:f3:03:a1:35:cd:e6:c3:6d:ec:8d:65:
65:61:95:1b:18:bb:00:46:28:56:1e:db:ec:56:60:
91:42:4d:90:e5:3d:57:67:25:1e:a0:3c:a1:91:70:
88:e8:a5:6a:5b:ba:f4:40:8b:3d:8e:c6:9d:a5:4b:
fc:9e:8d:ce:80:9c:6d:5c:b3:81:c6:41:a5:47:dd:
ae:1d:f7:8f:41:8e:f9:5c:8c:ad:ed:74:fa:6b:d8:
bc:97:9b:08:e3:60:af:4b:4f:79:73:6b:ff:4a:55:
88:d1:00:06:03:67:11:bb:f3:13:bc:40:9a:36:e7:
4f:3f:dd:33:5b:74:96:35:22:d0:e5:28:2f:1f:9d:
fc:6c:fe:4b:87:9a:65:9e:93:c3:18:9a:c5:5a:06:
fc:73:92:21:d2:5e:ab:36:d7:5e:d9:8e:a8:61:3d:
bc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DE:5E:C7:9C:BC:F2:BC:90:E3:EF:7B:89:AA:FA:8B:3E:D6:4B:BE
X509v3 Authority Key Identifier:
keyid:4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f8:e8:37:1f:16:4f:88:34:8f:e2:67:49:62:7a:70:5f:2c:
76:40:95:33:8b:1d:c2:1f:2d:ff:f1:25:46:ff:bd:56:0d:22:
a2:11:b6:09:5c:2d:2e:f6:a5:51:15:08:23:cc:93:d1:8c:1e:
a3:f4:d7:ab:cb:7e:c5:b6:f3:cd:fa:90:b3:77:82:93:07:2b:
8b:ff:f7:f6:71:84:ae:0e:81:0e:0e:26:cf:7f:b9:ab:2d:68:
81:7b:03:07:58:00:5e:90:8a:11:9f:80:19:d5:17:5c:8a:b6:
8c:e9:e8:eb:e4:37:ab:60:b7:b3:f7:4d:0b:15:31:8b:9f:2e:
c5:c1:06:1d:b0:27:ce:9a:4c:3d:fd:e5:6b:d2:5e:52:55:ac:
69:32:91:72:0f:f2:2e:31:bf:c8:b6:4b:f5:0a:9d:45:63:c8:
a2:a7:38:1d:c4:84:14:71:61:bd:20:96:69:76:7a:77:9c:5c:
ad:8a:09:4a:5b:15:d8:7d:8d:98:0e:cf:be:ca:14:07:41:02:
cc:15:84:98:e2:3b:e5:76:3c:dd:80:9a:c7:56:e7:fd:c9:05:
f3:ba:7b:94:26:68:4b:57:5e:99:5f:bf:77:e8:58:94:57:f5:
19:a8:37:0d:70:9b:39:b9:bc:93:d0:39:2b:2e:49:92:d9:bd:
9d:7c:b3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:15:15 2026 by rpki-client