Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
File: 3I4FnV63dkn78ZuErzX2iR2cWAc.mft (raw, json)
Hash identifier: TH2CchLVGCR4eDHCAvoN76yS79+S2hcGb/NW+BkMTp4=
Subject key identifier: A4:9A:81:A6:A1:3A:6C:F2:21:03:D7:ED:6A:CA:85:9B:DA:E1:74:98
Authority key identifier: DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
Certificate issuer: /CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807
Certificate serial: 01A0016F4FCD8860F715368E9120B088965C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
Manifest number: 1131
Signing time: Fri 14 Aug 2026 18:01:07 +0000
Manifest this update: Fri 14 Aug 2026 18:01:07 +0000
Manifest next update: Sat 15 Aug 2026 18:01:07 +0000
Files and hashes: 1: 3I4FnV63dkn78ZuErzX2iR2cWAc.crl (hash: EYgHhPzs+dI8lTTwAMm87SCZ1IhBJPvWi21Sp0/jLPA=)
2: TmN-dr45oTfR8pksVoCNgmVOGLU.roa (hash: vnALMBgUiF5Ge/N8pDhGThN8hB7OAP8KLzkie3WI7N8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:4f:cd:88:60:f7:15:36:8e:91:20:b0:88:96:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807
Validity
Not Before: Aug 14 18:01:07 2026 GMT
Not After : Aug 15 18:01:07 2026 GMT
Subject: CN=a49a81a6a13a6cf22103d7ed6aca859bdae17498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1b:a0:36:5a:8b:28:ff:8b:31:f6:f7:0c:5d:
93:13:a4:81:c2:74:45:ba:18:99:d5:fb:37:a0:95:
ab:51:c3:68:be:6f:ec:a6:c1:bf:f3:db:96:91:cc:
ea:0d:13:88:c7:71:05:dd:3d:a4:94:6d:f0:24:db:
63:31:e7:c3:9b:09:c2:8d:45:46:99:b3:2c:db:85:
d3:bf:9a:91:99:f9:63:fe:0a:15:b1:31:26:20:bb:
35:e5:fe:b1:99:b3:dc:96:00:37:b5:60:6a:08:6f:
c9:09:8e:e8:11:c7:bd:a1:bb:69:8f:ca:01:73:8c:
e2:f0:c2:b9:fa:dd:1f:7a:a4:1b:80:f8:d7:cc:60:
12:36:54:9a:d6:cc:a2:56:43:5a:be:af:ec:a8:a2:
6a:6c:74:fe:5c:96:d5:74:6c:51:57:57:90:9e:9b:
25:14:1f:05:2d:c8:f7:55:34:bd:98:d6:ce:b4:0b:
f8:ae:0d:38:1d:6f:74:21:84:df:01:a5:60:07:f5:
93:9a:96:ea:f3:af:0b:b1:e9:dd:53:8f:b6:e7:dd:
da:80:37:46:e8:5e:6b:76:6c:d5:33:7d:6a:c0:3a:
f1:39:e8:f2:5f:41:22:af:02:d9:0f:d0:64:35:6a:
42:04:22:d1:d2:e9:99:78:c6:65:96:7b:89:e7:fc:
45:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9A:81:A6:A1:3A:6C:F2:21:03:D7:ED:6A:CA:85:9B:DA:E1:74:98
X509v3 Authority Key Identifier:
keyid:DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d9:6e:19:7a:cc:7f:24:e5:19:6e:8a:e3:cb:5a:3b:91:81:
91:ac:17:39:05:b9:b4:ce:fc:a2:5f:bb:f5:18:d1:0f:6b:cb:
af:ac:c0:ea:ed:0b:81:1d:ec:5c:87:a6:5f:37:70:65:72:17:
85:29:4b:10:89:6e:6d:1c:3a:ad:7a:fa:71:3f:8c:2a:63:dd:
47:51:0f:d4:e2:93:d2:98:db:64:3b:3b:b0:48:21:04:09:9d:
ba:2e:78:cd:b2:4a:39:89:8e:22:f0:7d:70:00:57:69:aa:bd:
82:8a:2a:da:8f:02:6e:04:1b:5a:68:c3:12:c4:b2:d5:0b:6a:
3b:cb:c2:b7:48:9e:1a:b1:c9:92:e1:db:68:d5:e7:84:8f:69:
4a:59:28:f9:e1:68:a9:53:8d:37:cf:03:c6:d9:82:9f:64:79:
db:0b:02:8f:13:86:75:e8:d7:2a:1a:6a:33:e6:17:88:ae:77:
e6:4b:43:39:6b:80:c8:3c:44:a1:e0:35:40:cc:90:fe:33:45:
90:f9:27:84:d1:de:82:a9:dc:3b:a3:30:29:e4:47:e6:d3:3f:
c8:9e:36:3c:e4:41:98:3b:f8:2a:33:0a:ce:b5:ed:8c:9e:17:
5d:e6:70:cd:22:ad:d4:7f:58:fb:7e:4f:9e:93:86:74:29:b4:
77:32:61:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:55 2026 by rpki-client