Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
File: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft (raw, json)
Hash identifier: WIkT13A6qSFaL0GGib8qrIOSfe9ggqNuNr3HIL3fZH0=
Subject key identifier: E7:49:F3:4C:64:1A:6C:D6:D5:40:4B:4E:63:54:88:C9:E0:A6:B8:BD
Authority key identifier: DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
Certificate issuer: /CN=dce670a6ed4c78fdd77686792f7e087598906f73
Certificate serial: 01A1494F1998B1D2DD492098ECFF40A1A46A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
Manifest number: 1A3E
Signing time: Sat 17 Oct 2026 10:01:23 +0000
Manifest this update: Sat 17 Oct 2026 10:01:23 +0000
Manifest next update: Sun 18 Oct 2026 10:01:23 +0000
Files and hashes: 1: 3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl (hash: T6iAFeV6j0Bgi9/sbO1PnQZJ6CnY75j7xaPa5uNq3ms=)
2: O-gxnsHzDhdYKwTNHTFr-Ch9dJM.roa (hash: kVKhuC0dJOQWPqNSK7n1W9Bj9SrxDJpJnAeLYtUm8Yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:4f:19:98:b1:d2:dd:49:20:98:ec:ff:40:a1:a4:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce670a6ed4c78fdd77686792f7e087598906f73
Validity
Not Before: Oct 17 10:01:23 2026 GMT
Not After : Oct 18 10:01:23 2026 GMT
Subject: CN=e749f34c641a6cd6d5404b4e635488c9e0a6b8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b4:12:b1:d0:84:83:10:b8:88:34:77:54:d1:
17:69:27:d6:c6:b3:1d:89:84:5d:49:12:20:91:4a:
61:bf:f7:c7:85:77:b1:1f:33:a8:0a:5c:19:6b:d1:
c5:00:ea:bb:33:17:9a:7e:a3:03:73:a5:70:74:72:
53:d0:57:28:80:4a:c8:07:56:b7:e1:0e:e2:43:0b:
d5:c9:69:69:bd:54:b7:a7:fd:38:3e:51:8c:7f:ce:
67:29:a2:f6:d6:1c:41:64:76:c7:d5:93:fd:f7:aa:
e9:d2:27:77:ef:02:d8:5f:89:7b:0b:98:65:73:2f:
71:65:69:24:7f:fd:27:13:1b:ea:b7:1d:b5:0a:8c:
cf:07:48:58:21:21:59:19:62:a2:2e:5d:1b:df:76:
5b:d3:c3:01:8f:02:3e:60:15:47:a1:73:e0:83:ac:
5a:a9:0b:63:36:5b:99:52:91:a1:70:8e:81:c7:8e:
19:ab:ed:76:cf:4f:76:61:2c:81:80:89:50:f7:ab:
a8:82:00:c9:52:1c:6a:8e:de:3e:3c:4c:e1:cc:ac:
5d:73:60:ae:d8:65:6d:9a:c8:3a:34:21:f9:74:c9:
71:9c:88:43:66:88:bd:cc:42:4c:52:8f:3a:9c:ff:
e7:6e:14:37:c4:61:2d:16:fe:3a:a5:51:fe:55:e6:
3e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:49:F3:4C:64:1A:6C:D6:D5:40:4B:4E:63:54:88:C9:E0:A6:B8:BD
X509v3 Authority Key Identifier:
keyid:DC:E6:70:A6:ED:4C:78:FD:D7:76:86:79:2F:7E:08:75:98:90:6F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OZwpu1MeP3XdoZ5L34IdZiQb3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e31804-6270-4246-9100-f06e23432273/1/3OZwpu1MeP3XdoZ5L34IdZiQb3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:35:87:d0:99:0b:c7:b4:d1:17:f6:33:06:fd:bc:eb:b7:3f:
ef:ab:f7:14:51:78:7a:67:96:1e:1f:39:91:51:20:5a:df:cb:
0f:fb:47:34:b7:c4:92:43:ec:c1:4a:28:89:ac:19:e6:66:23:
f0:eb:6a:dd:35:a7:ec:0d:cf:52:7c:6a:62:ce:29:52:b4:f8:
a7:2f:fb:94:81:4e:92:a0:c0:a7:ea:bb:89:bd:53:b6:23:7f:
9f:2d:40:99:56:d6:e7:fe:ca:a5:51:f4:7c:b3:82:6d:97:05:
98:64:19:54:83:44:cb:ef:df:e5:78:21:dd:e4:bc:75:5a:92:
76:f1:0f:d4:2e:ee:88:9f:05:3f:0b:78:a6:db:39:ca:70:41:
37:d4:ac:ad:09:67:90:c0:53:f9:f6:8c:b1:5a:36:7e:d4:e4:
ff:37:70:a6:80:74:d1:7b:97:ef:28:cd:84:b2:32:8f:59:47:
71:b8:65:ff:5c:17:6c:07:eb:21:27:b3:55:95:6d:53:e1:1c:
dd:f2:27:c3:73:62:53:6e:00:dd:69:f5:42:16:a4:ac:ef:b4:
d9:09:a3:b4:3d:84:4d:bb:b8:44:ed:a5:fa:e6:06:2f:65:64:
e7:14:aa:5b:43:25:ae:c7:d0:65:ec:33:26:40:dc:a3:d9:46:
87:99:50:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:57:39 2026 by rpki-client