Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
File: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft (raw, json)
Hash identifier: RrpVGRzWFwe5kv7qqklAVA+m1rCYLlgLXYGsvMcSCPA=
Subject key identifier: 95:65:5E:DD:DA:7A:F2:12:77:0D:4D:5F:02:E2:94:7A:F5:A0:98:B7
Authority key identifier: DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
Certificate issuer: /CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Certificate serial: 01A000CA3E5C1C8DF54FFED35629AC5FDF86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 15:00:49 +0000
Manifest this update: Fri 14 Aug 2026 15:00:49 +0000
Manifest next update: Sat 15 Aug 2026 15:00:49 +0000
Files and hashes: 1: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl (hash: YDDCbxQkcUxDlISmw/nAO3FgjSABfpr6nkOdzKYqDMo=)
2: 7DFhLxfNsNdBG7misMM2Gd6pq98.roa (hash: 91BxkeL//UY4lGamLg4LH3uIYXXl6dNvyu0iOuqwroo=)
3: kOLGFIQ68N0t89GXfLW_l-tuaZs.roa (hash: JEbR7GHzj1yo7N6pB32D4eZu3GhxlqvfkdXGhcPXMmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:3e:5c:1c:8d:f5:4f:fe:d3:56:29:ac:5f:df:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Validity
Not Before: Aug 14 15:00:49 2026 GMT
Not After : Aug 15 15:00:49 2026 GMT
Subject: CN=95655eddda7af212770d4d5f02e2947af5a098b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:61:7d:ce:5e:7d:01:3a:7e:99:7b:7c:30:5b:
b4:ef:8a:3f:7b:c2:28:c2:f6:a2:c5:01:45:c0:c6:
14:b6:28:9b:c5:b4:80:94:26:ba:03:63:98:7f:8c:
a6:a6:22:c3:05:d2:6a:e2:fe:69:8f:97:af:8e:06:
05:f1:e8:a1:f2:b5:b5:1b:76:38:31:57:89:12:9c:
ec:07:4e:c3:d5:96:cb:6f:32:bb:a5:2d:7b:27:b1:
b7:90:12:3d:43:49:7e:74:e1:c0:51:4f:87:70:d9:
8e:40:28:49:cc:fa:cd:00:9a:f8:03:39:82:4c:be:
33:c4:20:5a:11:57:a1:43:e9:91:cc:00:b1:77:9c:
63:ac:6b:72:1e:24:61:ed:43:c0:b1:41:e6:80:fc:
4a:a2:36:31:83:d8:85:70:ca:8c:76:7c:8e:35:86:
3e:1c:37:8b:8a:e3:6c:89:09:05:8a:f5:73:35:90:
38:f1:aa:bf:7d:b0:92:0e:0d:f6:f6:25:af:14:ba:
78:06:12:f8:a7:7e:d2:29:5a:d1:78:d4:04:98:18:
7a:1b:d1:df:02:c5:91:49:05:df:9b:3a:2f:a5:de:
6d:2d:41:4c:5c:bf:05:47:5e:89:42:fa:c4:1e:c7:
46:f9:18:4f:6c:ad:07:48:9d:26:63:f1:5e:87:10:
29:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:65:5E:DD:DA:7A:F2:12:77:0D:4D:5F:02:E2:94:7A:F5:A0:98:B7
X509v3 Authority Key Identifier:
keyid:DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ee:58:67:df:90:e1:df:db:f3:03:45:12:dd:59:dc:5d:c0:
95:ad:45:fe:d5:0a:8b:3c:e3:70:d6:f8:f2:ce:10:bc:9e:6b:
28:8e:26:42:6c:a9:ba:6c:83:b7:a5:03:1b:c0:87:fc:74:20:
7d:0a:42:4b:9f:d2:80:ed:58:86:0c:86:3e:42:97:a4:85:f4:
4f:c3:a8:5d:bc:86:c8:00:ae:54:38:84:72:f2:63:25:81:90:
a4:9c:d2:8c:ac:e4:1b:20:04:89:5c:39:b4:00:0f:a7:94:68:
dc:52:a5:74:13:73:56:43:8a:31:56:30:1f:e6:21:c7:31:5d:
2a:96:bf:82:a2:dd:f7:28:26:20:ac:af:0d:11:1c:13:15:0d:
42:d6:b3:3e:77:74:c4:dc:f3:13:5b:2b:1d:76:1b:18:49:8b:
4f:39:4b:d5:60:3e:36:ea:d8:93:d8:42:d1:3a:c4:77:e2:a8:
67:61:ce:3c:c6:95:4a:01:d6:c0:af:53:81:55:6f:ee:19:f4:
56:37:9a:69:2e:54:2d:69:89:b5:3b:26:c2:6b:98:fb:e2:42:
17:d5:ce:41:4d:48:d5:80:1f:8e:bc:91:d6:c6:de:00:6d:21:
12:97:83:11:53:96:59:90:9d:51:49:cf:43:39:57:d8:24:54:
1b:0e:9b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:48 2026 by rpki-client