Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
File: 3U3LVvefSh3tjZVIIzOWHQJk-qU.mft (raw, json)
Hash identifier: rie8lsFMjB5CI1oSXBVUn4mFNUXJ+GK/qNgLob6wGtk=
Subject key identifier: 2C:F5:EF:F7:F7:C7:9B:F3:C2:F2:BE:7F:FC:67:88:77:C6:54:AE:5C
Authority key identifier: DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
Certificate issuer: /CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Certificate serial: 01A0F6E94D33A654B9C6B048E4301D7E1DFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
Manifest number: 10B0
Signing time: Thu 01 Oct 2026 10:01:19 +0000
Manifest this update: Thu 01 Oct 2026 10:01:19 +0000
Manifest next update: Fri 02 Oct 2026 10:01:19 +0000
Files and hashes: 1: 3U3LVvefSh3tjZVIIzOWHQJk-qU.crl (hash: KcZqTtDUwExQHd9T96XG6ltGpO4K9QzEYKJTb3VNTVk=)
2: H5QErsI5RrGZOHFY6_FrSzEPwsg.roa (hash: BTdVxM8rbJfdiUp2j6fzsOE0ajTe0wntltZ6HVxnZpM=)
3: UtbWjP8TosULXxgOwSpGBsXAj1E.asa (hash: e7BKC4GZaIVKdGVBnnQIPsiQuksngCu2TeIqsWJLAi4=)
4: aAEGzSQAFN3XfOJTKzynLK0MJWQ.roa (hash: HGx+oxdetMBYVjpIjo60Q4M2urPI2bwYBUq579gQfFA=)
5: b7KDZwK5R28lE5M6tD1UYAgLTs0.roa (hash: chq9h/QyXrEES2o8hWXwMO8b44fg7JP3nOh0+1DILZ0=)
6: iTAqvs2G1UdUfx5Fmn2Z7H7-Wuo.roa (hash: L18Wb/sBRdrTPyOX3b7ZSqqO81GWE2YfQWPbOKytco8=)
7: n8wKAbeQwoniSlzobzWQkZPFQ90.roa (hash: gAASzqy3Nb3k3RF3IE7AiqoPFAF8THLrgzOMP+9Awr8=)
8: rxo-kMSJfYbIjml0McyLHchnJKw.roa (hash: 6yBdVD63LgbBLLvhVAYIbiNVvZCYYH7FdQZFXoIkCTo=)
9: wGG9IOCrMHtRziuynra1nkRdUDY.asa (hash: 0SvZ4eV+iL0WsKH5/j8UMkYpXnwrBsqB5DmizyY13m4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:e9:4d:33:a6:54:b9:c6:b0:48:e4:30:1d:7e:1d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Validity
Not Before: Oct 1 10:01:19 2026 GMT
Not After : Oct 2 10:01:19 2026 GMT
Subject: CN=2cf5eff7f7c79bf3c2f2be7ffc678877c654ae5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ec:34:14:be:b0:04:fe:a3:84:a3:18:b4:8e:
81:c1:9d:6b:75:0b:69:28:3b:d7:3f:4d:34:64:54:
4b:31:82:74:4b:66:d7:70:ba:2b:f4:62:f3:7a:c4:
3c:09:00:06:21:32:79:c3:0c:d1:06:70:f3:0e:41:
90:c4:01:70:be:9a:96:ca:cf:c1:30:a9:39:c8:39:
3b:49:16:2b:75:33:72:48:6f:dc:51:05:b0:96:ee:
29:2d:e8:15:4b:a6:f1:21:e6:b4:fc:e4:e8:aa:7d:
7a:11:8d:59:a3:26:29:c8:d8:ab:a6:7c:38:28:ba:
a2:b7:d7:e7:f5:ed:02:f3:b7:72:7a:8e:95:65:02:
29:85:18:59:f3:76:6e:c2:d1:c3:11:3e:9c:9b:7f:
36:0c:1b:41:e3:de:60:1c:5c:7f:e4:6d:34:32:69:
21:f8:08:1f:bf:05:17:a6:79:b1:10:4b:91:de:f4:
b6:12:0b:f1:3a:e6:33:7c:bd:55:a0:8b:9c:c5:94:
ad:f2:99:0d:05:ff:8d:8a:30:34:1e:8e:27:8b:8e:
7f:54:9d:f9:52:2b:45:0b:91:1f:09:83:53:6a:89:
de:45:7e:dc:37:70:cd:17:43:a4:0c:dc:b5:f1:e5:
f4:d7:60:15:a5:28:d4:a0:d2:2b:f6:54:a1:b1:f7:
99:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F5:EF:F7:F7:C7:9B:F3:C2:F2:BE:7F:FC:67:88:77:C6:54:AE:5C
X509v3 Authority Key Identifier:
keyid:DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:fc:e0:f5:d8:cf:80:ce:88:3a:d0:f2:15:cc:3d:8b:5b:b5:
1d:55:af:6a:7e:29:8f:17:89:57:70:36:16:f7:4d:38:5e:39:
35:06:ea:ab:52:97:4e:45:c7:4a:23:e1:e6:bb:00:ad:93:70:
42:c7:9a:14:2d:ec:d5:07:4c:3c:77:8a:37:3d:2b:b4:37:bd:
61:86:e8:16:cc:5f:66:51:b1:d7:6b:03:15:6b:2d:1e:00:d8:
5f:b4:9a:62:b3:ee:8a:b6:5c:58:9a:6d:a3:b2:77:f5:de:dd:
9f:c3:4e:7c:52:7e:b1:79:a5:0b:6f:83:0a:0a:16:b3:43:fb:
65:95:5f:40:89:47:fc:34:90:c8:89:ff:80:3b:82:ea:8d:8a:
06:f4:8d:8a:84:97:64:07:3f:16:0a:ae:f1:14:cb:ee:87:87:
d0:da:d6:bd:0e:01:8a:bb:b1:48:da:d7:5b:74:ca:9b:d7:e1:
75:65:5f:c8:67:5c:be:ba:b2:0c:e9:e3:6e:44:4a:a5:b7:0e:
85:bf:03:dd:41:78:1b:1a:0a:dc:5e:c8:4c:87:bd:88:d5:e2:
f8:74:5f:68:03:85:d3:7a:47:40:cd:61:fb:ec:01:5c:b7:03:
4b:c0:54:21:03:b4:ca:70:c8:b4:f9:6e:f9:1f:34:3a:a0:cc:
df:1c:9f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 13:33:58 2026 by rpki-client