Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft
File: 3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft (raw, json)
Hash identifier: 9M0+SpFmaysSr4M8EmiJ6DgQLPbgrrJ3kIJbluXmDt4=
Subject key identifier: F0:04:9A:97:77:1B:A7:89:90:6F:78:91:03:4C:CA:14:59:67:95:76
Authority key identifier: DD:38:73:30:3D:2D:6E:23:8A:5B:D8:5E:D5:86:7B:64:31:58:FC:14
Certificate issuer: /CN=dd3873303d2d6e238a5bd85ed5867b643158fc14
Certificate serial: 01A17DA9EE917B4A6DC2CE5572EF46E8E5AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft
Manifest number: 0482
Signing time: Tue 27 Oct 2026 14:00:50 +0000
Manifest this update: Tue 27 Oct 2026 14:00:50 +0000
Manifest next update: Wed 28 Oct 2026 14:00:50 +0000
Files and hashes: 1: 3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.crl (hash: KaOc88XNkwHFCUgyeANRKu7EAN9PhmIysuEr9LQ71BA=)
2: 5rDoSOJ0aQP4R8djRUFtYmZuYW4.asa (hash: BRER7hZy1AOp7GZFPLOd7AJj0PbPgdtQ3xZz9AolytM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:a9:ee:91:7b:4a:6d:c2:ce:55:72:ef:46:e8:e5:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd3873303d2d6e238a5bd85ed5867b643158fc14
Validity
Not Before: Oct 27 14:00:50 2026 GMT
Not After : Oct 28 14:00:50 2026 GMT
Subject: CN=f0049a97771ba789906f7891034cca1459679576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4d:15:a6:d4:29:ed:5e:eb:09:6d:bd:09:b4:
bf:bc:b1:67:05:5d:bd:cd:af:b7:52:45:4c:da:51:
f7:87:7c:59:19:bd:7e:21:d6:30:b6:e0:f6:a6:93:
a5:7e:c3:9d:9f:2d:2b:34:66:34:04:be:78:b1:e3:
3f:50:25:ba:71:39:c4:89:44:91:dd:45:1b:45:60:
b8:44:d8:b5:29:89:41:15:0c:95:c6:7c:4a:00:4b:
d9:a3:9b:80:94:a2:38:d1:3a:c2:3d:03:25:f9:4e:
ae:df:37:cd:9e:56:be:17:58:44:58:73:eb:44:8f:
29:12:85:46:ef:ff:73:9a:65:84:8d:b2:ed:b2:97:
c9:c7:3b:dc:5e:46:dd:5d:3b:2e:86:ab:e2:da:a2:
0d:1c:cb:d5:f0:8c:64:2f:12:32:77:5e:21:f4:f0:
83:77:39:af:6d:9e:3c:60:71:3b:f3:7f:cc:cf:bc:
a1:ad:6c:8b:e4:1d:85:b1:3c:8f:47:9e:9e:79:5c:
6b:82:51:56:c8:4f:ac:4e:f4:64:29:87:a1:e7:4a:
37:15:61:cb:5c:de:83:c1:90:de:56:1c:77:d6:42:
fe:52:00:bb:0f:09:79:10:9a:69:41:19:c3:de:c3:
b9:f3:16:d8:02:be:bf:0f:4e:81:bb:35:8c:42:4d:
aa:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:04:9A:97:77:1B:A7:89:90:6F:78:91:03:4C:CA:14:59:67:95:76
X509v3 Authority Key Identifier:
keyid:DD:38:73:30:3D:2D:6E:23:8A:5B:D8:5E:D5:86:7B:64:31:58:FC:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:30:1e:20:07:08:45:ab:65:f3:c8:2d:ec:ae:44:71:ea:cc:
5e:fe:b9:f9:d7:00:de:f8:09:94:2c:ad:7b:fc:64:63:b4:b6:
71:51:66:0c:40:37:2e:56:32:89:ec:9e:73:53:de:de:69:72:
1e:29:ca:7c:dc:4c:a6:9f:3b:34:cd:47:76:4c:79:bf:05:bf:
ff:7f:0d:db:85:84:e8:d5:21:2b:55:08:50:f6:55:67:13:37:
7d:b3:bf:dd:bb:ef:6e:66:bf:05:8d:e4:b3:59:df:d4:1e:70:
59:cb:36:fe:47:8f:be:76:74:b7:eb:ba:1f:8e:28:69:4a:12:
9b:98:f4:f3:5a:b6:0b:3e:42:9f:dd:a8:79:71:ae:08:e3:05:
20:7f:f3:d9:1d:7b:f9:75:e5:c4:2a:5f:d4:66:bc:87:11:f7:
6f:ab:2e:ba:3a:71:8b:3d:36:13:79:a0:71:36:3d:21:1b:52:
08:4e:e4:51:14:23:69:4a:66:11:00:df:21:a6:f6:48:82:3b:
46:78:10:f2:d0:19:f2:35:15:d1:44:64:ec:fa:1c:0d:7e:25:
f5:e9:f9:22:3a:8b:db:4a:cf:03:c5:43:b4:82:24:d3:08:a6:
0a:a4:59:c6:bb:34:4d:d6:4d:42:5f:da:a8:fc:06:c3:09:38:
6e:0c:dd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:15:25 2026 by rpki-client