Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
File: 3I4FnV63dkn78ZuErzX2iR2cWAc.mft (raw, json)
Hash identifier: Of430o9zr8AXPh9gQTBhSbtUUwB81tNiL45EQpH9kj0=
Subject key identifier: D9:29:A4:7A:5F:58:AF:FC:05:F5:90:C2:BF:94:F9:3A:96:EC:D0:D9
Authority key identifier: DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
Certificate issuer: /CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807
Certificate serial: 01A14014D365528DBECAC069E7AF69DC188C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
Manifest number: 11D6
Signing time: Thu 15 Oct 2026 15:01:08 +0000
Manifest this update: Thu 15 Oct 2026 15:01:08 +0000
Manifest next update: Fri 16 Oct 2026 15:01:08 +0000
Files and hashes: 1: 3I4FnV63dkn78ZuErzX2iR2cWAc.crl (hash: 1sZtn/7klPO3AZ7w4y9g2pyhA9A4Fga2LycGUmQUyak=)
2: TmN-dr45oTfR8pksVoCNgmVOGLU.roa (hash: vnALMBgUiF5Ge/N8pDhGThN8hB7OAP8KLzkie3WI7N8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 15:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:14:d3:65:52:8d:be:ca:c0:69:e7:af:69:dc:18:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8e059d5eb77649fbf19b84af35f6891d9c5807
Validity
Not Before: Oct 15 15:01:08 2026 GMT
Not After : Oct 16 15:01:08 2026 GMT
Subject: CN=d929a47a5f58affc05f590c2bf94f93a96ecd0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4a:ec:10:c6:76:39:b4:23:e5:a8:ce:92:64:
73:70:41:3e:aa:c7:3d:ef:5f:c2:32:7e:30:66:d2:
c3:78:7a:63:8c:d4:9f:39:fc:cc:b8:3c:78:3b:f6:
f7:67:ab:90:ab:0b:0a:df:a3:1c:43:2b:47:19:b5:
7a:e0:eb:65:cc:40:8a:9c:f9:2b:56:1b:93:0c:d7:
37:64:60:d1:c7:bc:2c:cc:f8:3d:b3:8f:99:82:20:
a3:6d:2b:1c:c2:a3:20:bd:d1:69:f2:51:fb:47:50:
d1:ab:0d:68:09:49:14:9a:d3:44:76:60:57:d4:91:
a1:3b:9c:ff:e5:d9:c1:3b:56:9f:ed:e9:8e:f0:da:
c1:60:3a:12:33:fc:84:57:5d:79:ed:01:e6:41:13:
26:87:35:93:68:86:3b:24:1f:ad:8f:be:5f:b0:52:
3e:f5:2b:20:89:bf:c9:2f:d1:d5:99:c0:ca:1c:7f:
1f:44:21:a7:82:03:0f:f6:c6:96:1e:85:48:4e:9d:
70:e8:02:0c:21:52:8f:fe:ba:0e:22:21:b6:cb:e9:
61:a6:c7:be:b2:cc:5f:f1:30:83:5c:b7:49:4c:50:
b3:23:3c:1c:04:c3:59:01:e9:b6:9d:ea:92:22:a7:
bc:f1:45:7f:dc:1f:88:49:97:26:58:c6:c8:f2:f1:
27:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:29:A4:7A:5F:58:AF:FC:05:F5:90:C2:BF:94:F9:3A:96:EC:D0:D9
X509v3 Authority Key Identifier:
keyid:DC:8E:05:9D:5E:B7:76:49:FB:F1:9B:84:AF:35:F6:89:1D:9C:58:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3I4FnV63dkn78ZuErzX2iR2cWAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4f6ee4-fa6e-436e-b349-6ef7e1199698/1/3I4FnV63dkn78ZuErzX2iR2cWAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:93:a4:21:78:7f:54:ee:66:73:3c:9c:91:ad:6b:3c:53:8b:
c1:4d:a8:2d:d9:39:d6:84:62:ac:20:a8:70:76:83:5f:f4:08:
0c:7c:90:b4:0c:55:99:e9:24:ac:43:0e:56:6d:e2:64:bf:12:
c3:ad:93:d2:0b:6a:57:bb:e6:25:36:bd:81:08:03:c8:88:4d:
06:ff:92:56:d8:df:51:61:24:e3:39:7c:71:52:d4:9b:16:00:
c1:81:ad:65:71:21:44:6b:24:f8:de:8f:75:a8:af:7a:18:b1:
d6:be:9d:b1:9c:ac:61:d6:cb:8d:65:f1:a1:1b:e6:5b:d3:7f:
12:92:69:6b:fc:5e:9b:3c:0c:55:0c:e8:e5:15:00:47:1d:3e:
5f:4d:58:cd:c3:3c:4d:8e:1b:17:2f:3d:c8:a3:2c:21:33:81:
d8:8c:e0:f8:c9:9b:01:91:90:0b:41:55:0d:e4:0d:d3:af:68:
51:e5:0e:83:f1:97:91:31:f8:5f:24:ea:ab:b2:f0:c1:30:54:
d0:75:31:bf:35:e0:a9:75:59:90:a3:30:17:5c:d6:2c:9f:37:
dd:ec:dc:bf:20:b2:5c:e0:40:1f:74:57:10:70:85:95:19:d6:
3f:a6:f7:e6:16:40:c3:11:50:1b:91:6d:c0:d4:fc:f1:43:c3:
c0:c5:d0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:55:53 2026 by rpki-client