Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
File: 3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft (raw, json)
Hash identifier: nCFJ8Uo0Gby6lg4LXHsobQDVxcXWEH8zn1YDIXhDfiA=
Subject key identifier: D5:C3:9B:DD:F1:83:9A:F9:F4:DE:6E:29:5C:22:BE:AD:C4:B0:D2:BF
Authority key identifier: DE:80:4C:9C:8A:43:39:7D:16:77:9A:A9:34:F7:06:73:88:FC:7D:7C
Certificate issuer: /CN=de804c9c8a43397d16779aa934f7067388fc7d7c
Certificate serial: 01A13D81271798B0C877BB2D9C3BB9E112C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 03:00:36 +0000
Manifest this update: Thu 15 Oct 2026 03:00:36 +0000
Manifest next update: Fri 16 Oct 2026 03:00:36 +0000
Files and hashes: 1: 3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl (hash: oBYcOUrJJpH4UoZR3OnNLbR6YAa5s9TpMdJTGkhm2Kg=)
2: Db0vWV10PDdNvJlPrQIc334_tN8.roa (hash: c9vHRsLZpkXkOA11QWT95eyXoTQe6iY901YAkf3L6Io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:81:27:17:98:b0:c8:77:bb:2d:9c:3b:b9:e1:12:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de804c9c8a43397d16779aa934f7067388fc7d7c
Validity
Not Before: Oct 15 03:00:36 2026 GMT
Not After : Oct 16 03:00:36 2026 GMT
Subject: CN=d5c39bddf1839af9f4de6e295c22beadc4b0d2bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e9:c7:6e:b2:49:ad:fb:7b:96:81:b4:4f:29:
4c:d3:40:e1:94:a1:af:21:6c:b4:f6:66:62:b7:6b:
04:41:59:a4:bc:0b:9b:5f:2a:a1:51:a7:b7:4f:0b:
75:03:5e:62:8e:6c:62:f1:46:1d:7a:c8:96:1a:23:
bc:c6:4b:28:9e:7d:21:d2:a9:c9:ca:28:d0:c9:18:
fb:5e:d6:87:66:10:69:dc:ba:64:1f:34:3e:d1:0e:
0d:80:1d:18:58:e2:fa:bc:4b:de:8c:a1:9e:43:34:
77:e4:48:c8:a5:0a:77:e0:b8:a7:16:7e:5e:8e:56:
5f:fc:5e:e6:69:06:2b:8d:99:fc:72:5e:ea:37:bb:
ab:98:35:85:3c:43:32:79:95:44:f8:51:b9:ab:ad:
e9:42:09:50:f8:79:10:af:e3:51:b2:c9:4b:89:73:
48:1e:14:91:36:74:42:13:b1:61:71:68:cb:23:40:
a5:22:82:e2:2c:da:91:e3:ad:99:0b:b9:c9:4c:eb:
d8:40:f0:f6:4c:fc:11:a3:a0:c6:f9:95:15:25:da:
e0:9c:f8:d9:64:b9:3f:37:9f:11:8f:7a:73:6d:e0:
ac:59:27:fa:e7:e2:91:50:c4:59:41:6e:e9:02:5e:
5f:28:e4:bc:73:05:82:c3:dd:56:4e:55:f1:43:02:
b5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C3:9B:DD:F1:83:9A:F9:F4:DE:6E:29:5C:22:BE:AD:C4:B0:D2:BF
X509v3 Authority Key Identifier:
keyid:DE:80:4C:9C:8A:43:39:7D:16:77:9A:A9:34:F7:06:73:88:FC:7D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/96254c-fc0e-4f58-95e2-af4e5241bf20/1/3oBMnIpDOX0Wd5qpNPcGc4j8fXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ad:7c:e4:8c:5c:50:10:3c:08:e2:a0:8c:97:1c:2b:b9:83:
31:a7:aa:a1:ef:9c:70:78:e3:c9:bb:c6:13:a5:07:8f:13:a6:
55:c5:4a:1f:fd:b6:1d:68:23:86:d6:f1:d3:4b:87:3c:27:82:
f7:c5:f0:5b:92:f8:5f:de:45:77:b8:af:07:b2:c3:3b:85:56:
ff:a5:0d:bf:5b:e1:bd:eb:50:29:f2:31:5f:79:f1:e2:68:69:
86:9b:1a:22:21:20:20:6c:a3:6d:ce:64:aa:2a:8c:96:fb:1c:
a5:e5:32:f4:9b:e4:33:8e:ca:8c:c1:25:39:5f:7f:49:7d:f6:
22:b9:a2:8c:1d:a9:0f:7f:48:da:07:81:76:e0:15:42:95:d2:
8e:a1:0b:12:ec:43:bb:c4:62:22:e5:88:62:fd:cd:1c:57:e9:
a1:97:65:cf:9a:e1:5e:78:67:93:d1:93:e2:3d:3f:bb:88:2e:
b2:38:2e:2c:b2:0b:2a:50:dd:6d:12:34:34:66:3a:9a:e4:37:
b1:8e:57:1c:ff:9f:d5:53:1a:d0:62:54:77:2c:91:c8:cd:a2:
cb:aa:7e:dc:9b:7d:b9:03:a8:b9:58:f6:e2:dd:97:ac:c2:a0:
7d:8c:a1:b2:fa:79:54:ce:80:ab:a5:b8:e5:0e:b7:d2:7b:a9:
95:fb:58:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:34:07 2026 by rpki-client