Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
File: 3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft (raw, json)
Hash identifier: 67oePuzPt1Pik2jvIfXp5npL77rdbNJu0H3p535QKrU=
Subject key identifier: FD:80:36:3B:E8:F5:B0:E6:B6:48:9A:AA:9A:3C:CD:96:D0:88:5E:A7
Authority key identifier: DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16
Certificate issuer: /CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16
Certificate serial: 01A1408321DBB1F51824199B4ED4DE79A59F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
Manifest number: 15E9
Signing time: Thu 15 Oct 2026 17:01:37 +0000
Manifest this update: Thu 15 Oct 2026 17:01:37 +0000
Manifest next update: Fri 16 Oct 2026 17:01:37 +0000
Files and hashes: 1: 3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl (hash: mNZX6nJWYIjGE6KZKziYYX6ZoW+kuiCTcV9pnVezw8A=)
2: 6TUuFWgBkm98OJlIkhqINWWAoI0.roa (hash: GA9PdoKCJE0Uq5wLiSfj1Mw/gZ339oU3m0s7B3MQNRA=)
3: _qA7-iuYEvTbfVREYl9q7tay4Bk.roa (hash: Z/glgCy5dfzogAACVBlWtKvnqFreHrzxfTJl0PSlZgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:83:21:db:b1:f5:18:24:19:9b:4e:d4:de:79:a5:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16
Validity
Not Before: Oct 15 17:01:37 2026 GMT
Not After : Oct 16 17:01:37 2026 GMT
Subject: CN=fd80363be8f5b0e6b6489aaa9a3ccd96d0885ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4b:2d:76:e5:40:be:65:98:4d:a9:a8:50:97:
9b:38:a6:d6:8c:fa:c7:b1:b6:ca:d7:28:d2:d0:07:
89:4e:0c:27:28:c0:41:69:51:5f:5c:43:e3:24:f4:
6b:7b:a5:45:43:32:b7:d2:a5:b8:cf:11:37:30:8b:
a8:96:6f:64:85:ca:f4:54:c0:78:37:a9:5c:5d:08:
5e:14:c4:76:e2:4f:f6:f4:00:3e:08:08:e7:18:7b:
3d:44:32:eb:52:d7:34:50:12:89:01:9c:9c:59:35:
64:3a:29:0b:b8:8e:96:ba:cb:83:9e:50:72:e4:ec:
b0:0c:d1:ea:0c:46:56:21:be:76:70:18:cf:73:bd:
c0:03:f3:e0:b1:0a:fa:77:79:c4:f1:8a:70:27:26:
91:aa:2c:39:78:fb:74:8a:90:a8:2d:a3:a0:28:74:
9f:af:73:82:e2:b4:f5:b4:b2:9d:7c:05:f0:34:55:
33:77:cc:1c:2a:c6:20:b8:a5:20:85:1e:44:c8:48:
cf:79:47:74:72:02:e8:db:72:16:74:db:e1:bb:55:
b3:8b:64:5e:5c:56:16:43:7c:63:bb:6d:23:fd:62:
f5:9b:84:a9:0b:6f:17:06:38:6b:40:53:7d:32:ff:
a9:e4:85:48:82:ad:6d:13:29:94:cb:d5:cf:be:6e:
79:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:80:36:3B:E8:F5:B0:E6:B6:48:9A:AA:9A:3C:CD:96:D0:88:5E:A7
X509v3 Authority Key Identifier:
keyid:DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:05:2a:ba:e3:a8:50:5e:74:93:65:ae:c4:eb:d0:6a:d0:24:
12:b6:63:c5:f0:48:c8:be:32:ca:8c:a0:18:73:5f:d2:02:09:
b1:62:19:f6:60:31:ef:57:f0:b2:b6:b1:ab:7c:f2:be:25:9f:
01:58:0e:1f:91:83:ef:a7:f6:86:74:e2:a4:a7:7b:78:83:bd:
f8:a6:45:03:c8:40:4c:32:92:fc:87:54:ba:e7:7e:d2:fb:8e:
d1:b0:04:50:61:77:71:11:dc:8c:98:46:88:94:60:e5:38:b9:
51:50:b6:4f:3f:2a:31:e0:59:e1:59:09:af:26:2f:e5:9f:a2:
94:f6:ef:56:08:32:d1:7f:5e:bf:f9:e6:be:58:30:29:c6:bd:
bc:8b:21:87:53:0e:dc:de:cd:a6:b7:d4:5e:3a:1e:06:35:bf:
20:0a:b1:a5:91:37:33:55:87:0e:6f:c6:9e:dc:74:56:f3:ce:
2e:a1:c6:15:44:39:04:23:58:be:b5:e7:38:c1:1f:8d:d1:e2:
b4:57:5d:a2:0d:fe:fc:ee:17:f3:9b:b9:09:69:13:32:6b:b4:
f5:f9:d8:d6:1c:ad:3b:f2:b2:2b:21:63:98:8b:88:7d:6f:ac:
06:45:4f:93:57:9d:0d:62:b1:42:4e:e4:35:7d:42:1f:cf:7c:
f3:4b:18:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 01:59:40 2026 by rpki-client