
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
File: 3V8ufMLGh_WMDR9hMrstz984y2Q.mft (raw, json)
Hash identifier: fe3i5fNY+dISkxjAtJrEkEgfPc3SuCW3g5ZxJndGa78=
Subject key identifier: 42:06:1E:DA:04:3E:B7:D6:79:47:20:0C:9B:2E:A2:C3:9C:5F:FF:78
Authority key identifier: DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64
Certificate issuer: /CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
Certificate serial: 01A17EF40D14A3EF4B0228887CA7A1C39677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
Manifest number: 1AD7
Signing time: Tue 27 Oct 2026 20:01:25 +0000
Manifest this update: Tue 27 Oct 2026 20:01:25 +0000
Manifest next update: Wed 28 Oct 2026 20:01:25 +0000
Files and hashes: 1: 3V8ufMLGh_WMDR9hMrstz984y2Q.crl (hash: 73pHmIfca91ZD6xXa1T8jlJVcfiJDS15g806RiZeTA0=)
2: 9iXPkKQ54sHh9FCulI77t8C1PLY.roa (hash: /ecGydtHF8wvlQeIO0uuqqIOnlvcqPbpsJvKK5M4Szw=)
3: CnlOxC7_uwBkJ3v3U1fHQBRIdjo.roa (hash: qBL5SEn9bLiNiZ8kK6JPW1aDdUpSEsezqM0e+ePG6oI=)
4: g0mhvAZsLExNosr94fQnamWzRDY.roa (hash: /xN1qB7faHsczS8ezFck6vhb0aDhcJHPTlgHGBz6WiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 20:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:f4:0d:14:a3:ef:4b:02:28:88:7c:a7:a1:c3:96:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
Validity
Not Before: Oct 27 20:01:25 2026 GMT
Not After : Oct 28 20:01:25 2026 GMT
Subject: CN=42061eda043eb7d67947200c9b2ea2c39c5fff78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:02:6f:7c:7f:62:b1:77:dc:32:7f:da:88:b4:
cb:06:16:87:d1:82:fc:ed:78:62:16:a5:56:d0:f5:
4e:69:ef:00:89:59:3d:09:d9:f6:fc:6e:bf:19:ec:
40:42:ea:7b:35:c6:59:75:66:6f:a3:f2:95:47:a0:
06:54:e2:6d:03:3e:f7:61:02:f2:ef:e4:f1:8b:8d:
85:a8:03:13:81:0f:c6:99:fd:cd:6f:7a:b9:ce:f5:
82:e2:14:8a:a0:eb:ba:ea:60:85:bf:e9:05:c6:29:
63:94:fa:b2:fe:69:5b:12:bc:18:3b:91:cb:8d:18:
ae:80:6c:8f:60:52:6f:17:c5:b6:4f:ce:5f:6b:3b:
e2:04:6e:46:97:23:59:4a:46:40:5f:22:9b:90:ce:
81:a0:a7:0d:97:d7:55:59:c3:6f:6c:76:aa:3a:95:
eb:41:5b:de:a4:85:98:03:8b:68:44:8b:c8:28:0c:
89:27:be:8e:e0:60:34:84:66:5b:92:34:ea:01:e6:
3f:74:50:1b:7d:85:52:80:38:23:f1:f9:bb:42:d4:
56:0e:52:5c:96:ee:2c:d8:22:fb:b2:7d:2a:78:b7:
ea:db:68:af:32:dd:ff:18:f4:e8:f2:2c:9e:53:54:
8e:0a:c3:f4:f4:4b:3a:98:c8:4d:9f:a4:4a:36:70:
39:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:06:1E:DA:04:3E:B7:D6:79:47:20:0C:9B:2E:A2:C3:9C:5F:FF:78
X509v3 Authority Key Identifier:
keyid:DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:5c:8a:0e:7f:66:fb:7f:a2:a6:d5:7d:e9:e8:e6:69:75:d5:
43:dd:e8:27:88:51:55:b1:02:8b:a1:79:c1:c6:16:a8:cb:97:
0a:e1:a6:c4:47:f6:53:88:d3:62:65:c8:11:58:9e:26:37:a8:
33:4c:53:61:4d:f8:00:f6:b5:52:a0:cd:03:13:86:60:57:cb:
44:68:47:c4:73:83:af:5f:c9:8e:53:31:ba:6a:02:86:a8:86:
85:59:e8:64:4d:9f:2d:64:42:f7:df:fb:79:e2:4b:0e:01:a9:
33:62:1c:1c:c3:cc:b3:9c:cb:a7:0c:ad:7b:1a:16:2b:7d:f0:
ce:f3:9b:54:f1:49:90:50:3e:35:82:23:c5:44:cf:18:5b:74:
65:f5:17:f5:8f:41:57:4b:7f:b3:e4:0d:32:d6:a8:78:ac:c1:
66:fd:ad:60:0f:0f:a9:f7:99:42:3e:d0:5c:fb:b6:8b:e2:69:
07:0c:c8:c8:4a:f2:c8:c7:6d:6e:43:27:76:51:9e:c8:a3:cc:
c0:12:8d:cb:b6:92:1b:de:e2:fc:cb:44:9d:26:10:df:f5:08:
f3:86:48:7e:68:28:77:9b:8d:49:43:2b:7f:6d:e2:79:3a:5a:
6b:3b:7c:f6:2b:c6:07:1e:aa:5c:f2:21:7f:50:ca:80:dd:83:
82:ab:02:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:26:05 2026 by rpki-client