Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
File: 3ILSx-tfpUPjLx7uGc01pWc8-uY.mft (raw, json)
Hash identifier: ciVCgH3tRDxG1720BkP49XxLv7DMJCNIsB8u0gEhdu0=
Subject key identifier: D2:B1:B9:F6:A5:3A:D0:3C:3F:5F:7C:39:0D:04:DD:F1:CD:F3:2B:08
Authority key identifier: DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6
Certificate issuer: /CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6
Certificate serial: 01A1401586F8F4A2E16A487FA74388589725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
Manifest number: 0971
Signing time: Thu 15 Oct 2026 15:01:54 +0000
Manifest this update: Thu 15 Oct 2026 15:01:54 +0000
Manifest next update: Fri 16 Oct 2026 15:01:54 +0000
Files and hashes: 1: 3ILSx-tfpUPjLx7uGc01pWc8-uY.crl (hash: S7+OO8uSz0askLayso6YZih9LWLU4tO4Wz8mh9mpdss=)
2: U_7zBQWTwyWyUplGTwTnhAD7M1w.roa (hash: qcrvphnrKI926TTY4n+5jtIqzlPgS2kixs/9tqEWP9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:15:86:f8:f4:a2:e1:6a:48:7f:a7:43:88:58:97:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6
Validity
Not Before: Oct 15 15:01:54 2026 GMT
Not After : Oct 16 15:01:54 2026 GMT
Subject: CN=d2b1b9f6a53ad03c3f5f7c390d04ddf1cdf32b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a7:aa:71:26:17:02:12:05:46:72:ad:be:ed:
65:df:2b:54:f4:65:cc:15:ef:df:50:c0:1d:61:db:
3e:ca:2b:7b:e4:e5:66:2e:87:8d:b5:0c:66:b0:f9:
3b:ef:b7:a4:8d:42:f7:e3:b4:d2:f9:a9:5c:08:95:
85:00:53:1e:de:d1:df:31:53:ff:38:47:26:ba:b5:
8a:d8:74:ea:e2:2c:69:5c:82:6d:3a:a7:80:02:03:
17:16:98:50:2a:d1:b3:41:38:7b:b6:98:13:6c:61:
d8:95:16:78:2f:ce:3f:62:ae:6c:47:94:4a:f6:8c:
78:97:92:89:f2:df:ff:27:43:2e:65:7a:88:63:fe:
cb:3d:8f:ce:74:66:10:ef:17:53:6e:61:fa:3a:c0:
a1:9d:8e:5a:82:ec:80:a6:72:4d:e6:0b:1e:ba:79:
23:57:1e:a6:15:4e:17:b5:7c:07:14:7a:50:01:3d:
f6:0e:b0:df:e8:2a:28:bf:64:3e:7e:8c:76:56:04:
bb:58:70:17:a4:59:d2:bf:83:4e:26:f7:b7:f6:82:
f8:6d:94:92:d4:13:e9:ec:f5:fa:c4:02:7d:d5:30:
88:7e:b4:6b:2a:1d:f6:69:43:52:ff:ec:a9:28:f6:
f4:a9:9f:a9:ea:53:6a:35:28:6e:6a:ab:a0:81:95:
d1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B1:B9:F6:A5:3A:D0:3C:3F:5F:7C:39:0D:04:DD:F1:CD:F3:2B:08
X509v3 Authority Key Identifier:
keyid:DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:41:bc:de:2e:bb:84:1c:da:c1:ab:18:f4:d5:a7:a1:b8:e9:
97:52:c6:3b:3c:5b:27:94:9c:3e:1a:54:7a:fc:0d:05:b1:07:
ca:7c:db:a6:ae:15:0c:f3:4d:f7:9e:89:0c:98:04:fb:b8:b4:
94:03:ae:90:fe:e8:a6:e8:d0:ec:b2:13:fa:df:ea:f9:ce:fb:
df:75:c0:ce:58:ae:e9:d4:48:dd:d0:4b:9d:f6:a1:16:64:99:
ac:c2:44:8f:52:38:04:8a:9a:a7:f3:16:4a:16:f5:e8:21:9c:
67:5e:33:c0:c1:46:18:31:2a:61:a4:55:29:eb:f3:6c:82:c0:
9a:f3:30:b4:f7:40:87:21:ec:91:e4:c8:0b:ed:9b:3b:ee:86:
0e:01:89:e6:16:c3:dd:75:02:34:29:c9:57:70:67:40:1f:29:
68:e5:df:e2:10:1a:f9:2a:5f:b2:67:63:bc:b1:90:94:a5:5c:
aa:3d:25:a2:59:d5:0d:e1:fb:64:1d:0a:43:75:0e:6d:57:40:
7b:17:c2:b6:54:e4:26:a8:36:01:02:22:4d:5a:b1:1c:3f:f7:
bf:98:06:14:8c:df:32:97:92:31:6b:ed:1b:da:6d:ec:47:e4:
bc:f3:00:da:1e:5c:91:4d:f3:60:1b:e8:8b:f9:e4:e7:4b:2f:
83:4c:3c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:06:50 2026 by rpki-client