Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
File: s3SeobmXm_8s0wZpSPg13VTO3sA.mft (raw, json)
Hash identifier: tgCxgh9zUXYi2jKSZAM61aLKlAnwyIvvh8HHlH/EREw=
Subject key identifier: 1D:1C:47:A2:53:08:F4:32:FD:49:8F:CF:3F:1E:85:80:A7:87:47:CD
Authority key identifier: B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0
Certificate issuer: /CN=b3749ea1b9979bff2cd3066948f835dd54cedec0
Certificate serial: 01A1588B8E247E51062DF04D0B43EF09D9CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
Manifest number: 1AB6
Signing time: Tue 20 Oct 2026 09:01:43 +0000
Manifest this update: Tue 20 Oct 2026 09:01:43 +0000
Manifest next update: Wed 21 Oct 2026 09:01:43 +0000
Files and hashes: 1: P7j9IEWadDPaQ_nsO00HdXrOIT4.roa (hash: czQbKrK6LqGgUhK9pjsed0KgnTQUiTmpJ6IrbxHUhzM=)
2: s3SeobmXm_8s0wZpSPg13VTO3sA.crl (hash: Y/xj/dsoFyeP5dqCfISCZognzRELT81x7PpFYE7C4Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:58:8b:8e:24:7e:51:06:2d:f0:4d:0b:43:ef:09:d9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3749ea1b9979bff2cd3066948f835dd54cedec0
Validity
Not Before: Oct 20 09:01:43 2026 GMT
Not After : Oct 21 09:01:43 2026 GMT
Subject: CN=1d1c47a25308f432fd498fcf3f1e8580a78747cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:57:31:6b:b9:0c:f8:a5:c5:6e:7c:a4:d4:e2:
cc:29:b9:3b:14:11:c9:5d:b4:28:1c:9e:29:5c:78:
da:05:82:40:ef:2c:8e:a1:55:89:2e:b3:f3:47:e5:
a3:d0:47:d7:b0:fd:ff:0f:56:27:65:38:59:de:91:
eb:3b:d0:98:5c:56:50:17:58:8b:df:f0:6d:3c:78:
1f:7c:0b:a6:5d:bd:7d:3c:03:77:ea:db:dc:a4:c2:
e0:51:0f:a8:7c:26:6f:98:c4:af:5a:cf:b3:99:2f:
a0:b6:3f:6d:ff:e4:0f:9d:71:f8:d1:b3:aa:8f:84:
82:5a:aa:3b:20:b4:ef:8c:cb:b3:04:20:12:cb:e9:
39:71:8a:4a:47:e4:c2:ab:12:de:06:35:a2:d3:6d:
f5:6d:3f:25:ea:14:9e:9f:a7:35:24:ba:b5:18:b1:
ba:a9:e4:31:b5:1a:b5:38:70:b0:04:15:be:bb:cc:
e5:c1:f2:e7:4a:de:2a:a1:ec:14:73:0c:d9:c9:8d:
9b:c5:1d:42:61:63:66:b7:2f:46:a1:80:ca:90:4c:
ea:76:25:66:cd:b8:74:b1:e0:97:af:de:a9:e2:15:
0a:10:18:10:aa:dd:c4:a5:d7:e4:d8:ce:1f:86:ed:
bc:24:48:b0:4d:35:65:4a:af:5a:51:34:d5:fb:85:
11:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1C:47:A2:53:08:F4:32:FD:49:8F:CF:3F:1E:85:80:A7:87:47:CD
X509v3 Authority Key Identifier:
keyid:B3:74:9E:A1:B9:97:9B:FF:2C:D3:06:69:48:F8:35:DD:54:CE:DE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3SeobmXm_8s0wZpSPg13VTO3sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ac37c3-cc4f-4456-b958-e35909018a33/1/s3SeobmXm_8s0wZpSPg13VTO3sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:02:17:7a:90:55:cc:f2:63:83:78:5f:a9:4c:9d:6d:62:64:
b7:7b:d9:63:3e:b1:4a:ec:b0:62:ff:c4:08:83:c8:95:3e:54:
ad:60:ce:cf:7b:59:54:af:26:b0:98:ab:f8:41:06:43:bc:e1:
24:c8:e2:1c:94:85:e1:b7:d6:11:49:18:e8:cb:8e:d8:1f:10:
ac:77:48:3f:2d:70:28:d5:2a:57:ab:48:b0:3a:e7:84:75:b2:
77:1c:b2:21:7d:fd:e6:4c:2f:0b:2d:4d:b4:c1:18:2c:18:a9:
43:4e:dc:ce:15:57:97:7e:ee:69:98:aa:d0:a2:fd:0c:a0:3f:
56:cd:04:ec:90:28:8c:f3:9c:8f:6f:25:34:3f:6c:86:32:f0:
c4:f9:9c:d8:ab:75:85:c1:5a:4e:18:e8:dd:8a:57:06:22:fb:
43:3a:2c:0c:18:d9:cd:e9:84:d0:0e:26:17:58:1e:87:5d:89:
e9:f1:42:69:0c:03:1d:66:04:0f:00:ab:13:92:b7:9e:57:a4:
56:68:f9:2f:11:39:08:3c:83:b4:03:82:c8:f7:f6:bb:d0:6b:
18:ed:e5:65:aa:b9:cc:ab:51:80:79:89:35:02:4e:97:25:7c:
40:03:49:b2:07:0a:d6:36:f2:a9:e6:74:b3:78:13:ec:44:98:
f0:1b:58:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 12:23:09 2026 by rpki-client