Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.mft
File: 3GbYudONW7Gc-gxGRLRSk9Hotvo.mft (raw, json)
Hash identifier: 2zFnLPhq2wC7boHfu7+oe5V3FSqcH4+4ib28+BqFco8=
Subject key identifier: DE:24:7F:87:D3:88:CD:DF:AB:9F:15:14:97:69:FC:89:7E:7F:9F:09
Authority key identifier: DC:66:D8:B9:D3:8D:5B:B1:9C:FA:0C:46:44:B4:52:93:D1:E8:B6:FA
Certificate issuer: /CN=dc66d8b9d38d5bb19cfa0c4644b45293d1e8b6fa
Certificate serial: 01A1829A07AC55235A5996A67176C82F3CEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GbYudONW7Gc-gxGRLRSk9Hotvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.mft
Manifest number: 1A59
Signing time: Wed 28 Oct 2026 13:01:34 +0000
Manifest this update: Wed 28 Oct 2026 13:01:34 +0000
Manifest next update: Thu 29 Oct 2026 13:01:34 +0000
Files and hashes: 1: 3GbYudONW7Gc-gxGRLRSk9Hotvo.crl (hash: r+MiAVEOOS5GDdoEKI5NNEC59fjj65m0uQXi5fPelsY=)
2: FFrrJg1f7sBn9CMNkWOHWkncPKA.roa (hash: RRbiIEi7LB7ItO/8kZqYNCorz0xLwEEZeK7jHRHtAV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GbYudONW7Gc-gxGRLRSk9Hotvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:9a:07:ac:55:23:5a:59:96:a6:71:76:c8:2f:3c:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc66d8b9d38d5bb19cfa0c4644b45293d1e8b6fa
Validity
Not Before: Oct 28 13:01:34 2026 GMT
Not After : Oct 29 13:01:34 2026 GMT
Subject: CN=de247f87d388cddfab9f15149769fc897e7f9f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:95:98:3f:78:81:6f:45:6d:73:cb:b0:de:3f:
82:13:c4:03:4c:55:e8:da:89:20:85:32:16:8d:69:
31:0b:c2:38:6e:8c:10:c4:e8:7f:5b:e9:06:38:89:
cc:dd:21:e3:3e:d1:fd:87:ae:9d:51:46:78:6f:ac:
a8:1f:c2:16:a1:93:55:87:5b:f1:fc:cb:bd:6c:2a:
97:6c:9d:ba:95:71:14:4e:90:ba:40:b0:53:36:75:
48:8c:a9:8e:a3:60:19:97:b6:63:c5:ef:a5:14:2c:
69:3d:1e:03:a6:5d:81:aa:96:0d:0e:f1:03:e6:06:
8c:3e:b7:2c:14:bc:31:f1:c9:58:89:3b:a4:40:63:
d4:dd:60:68:4a:0a:29:f1:18:1d:81:0d:33:a3:e9:
e8:46:c9:72:7d:15:4e:97:cc:22:fd:cd:aa:5f:f8:
d9:be:04:d1:3e:fb:2f:4a:fc:63:03:f0:b6:b9:5f:
d7:d5:67:90:69:16:09:a7:c0:e2:d4:2a:3e:a0:dc:
24:73:ea:c5:69:75:b8:ab:37:35:b3:20:b1:cc:8a:
64:54:99:cb:90:05:f4:5f:60:1d:11:05:49:bb:9c:
bb:ff:1a:f0:82:e1:3f:3e:2a:11:fa:5c:43:59:18:
4e:16:a0:a9:8d:fd:bd:cf:dc:5a:a0:ac:d1:38:5e:
0b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:24:7F:87:D3:88:CD:DF:AB:9F:15:14:97:69:FC:89:7E:7F:9F:09
X509v3 Authority Key Identifier:
keyid:DC:66:D8:B9:D3:8D:5B:B1:9C:FA:0C:46:44:B4:52:93:D1:E8:B6:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GbYudONW7Gc-gxGRLRSk9Hotvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:92:1f:b5:22:4c:99:51:76:43:8d:c2:33:87:2f:1b:b0:fd:
80:ad:c6:80:9a:91:45:26:d4:a9:dd:0b:2e:b0:bd:8c:1e:da:
34:dd:9e:f5:03:96:f0:93:05:0e:61:b3:81:21:6a:d2:38:23:
a0:e4:e3:b1:f6:14:19:bc:d9:83:5a:b7:af:b4:4d:2e:03:4d:
f9:a6:1d:62:c3:ec:5a:27:5d:e3:71:55:93:32:c6:03:fb:09:
d8:89:77:92:7c:ee:21:a9:7d:58:cb:55:cc:a6:36:3d:0f:87:
0a:49:67:fc:ad:d6:03:05:36:6e:d3:94:87:9d:16:e9:97:32:
af:41:55:36:fe:eb:1c:74:44:9f:aa:81:91:b3:42:f5:23:ff:
a0:49:43:51:e3:43:d6:e7:32:79:93:61:76:36:31:65:23:b5:
8d:52:ed:e1:61:70:68:a1:93:c9:fb:54:6e:85:53:37:a3:65:
1c:c5:26:cd:78:8d:bf:20:82:7c:b3:c5:c9:0e:14:d9:5b:ec:
0d:2b:4c:da:dc:6e:be:40:92:54:6e:3b:d5:ef:f5:ee:3b:ac:
57:1e:65:5d:6a:61:e7:a4:ae:0a:df:39:e7:50:c4:bb:b3:bd:
7d:5e:a0:b9:67:7f:32:a0:6a:4b:dc:61:d6:24:1f:34:6d:e0:
e6:d7:df:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 19:31:15 2026 by rpki-client