Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
File: 3ghbDRu_nngbFUsG97kUESnbd18.mft (raw, json)
Hash identifier: vpy6Bysg6MdZUqFmZi6r1HlfZj2KSjAHZmBzHT0vpxQ=
Subject key identifier: 77:11:1B:54:8B:C0:A7:C9:B7:C6:AD:90:64:94:A1:44:CF:84:43:02
Authority key identifier: DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
Certificate issuer: /CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Certificate serial: 01A13CDC7C83D485CEC7F03D6328089ADA88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 00:00:45 +0000
Manifest this update: Thu 15 Oct 2026 00:00:45 +0000
Manifest next update: Fri 16 Oct 2026 00:00:45 +0000
Files and hashes: 1: 3ghbDRu_nngbFUsG97kUESnbd18.crl (hash: wigaT0pHrQEwz6nYHVG6hmvgHvU+8z3aO19uCq6d6lI=)
2: fONXP_fP-K2CxXzPBDLR6f-PrkU.roa (hash: iTe+/A+Cer5fpJpPxyAsGGZIQSIg8X5o4zlL2Zh7qbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:dc:7c:83:d4:85:ce:c7:f0:3d:63:28:08:9a:da:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de085b0d1bbf9e781b154b06f7b9141129db775f
Validity
Not Before: Oct 15 00:00:45 2026 GMT
Not After : Oct 16 00:00:45 2026 GMT
Subject: CN=77111b548bc0a7c9b7c6ad906494a144cf844302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ce:d1:8b:f3:77:7a:d4:ee:3d:1f:52:9a:3b:
cb:a8:57:94:3c:b8:dc:2a:76:e9:3a:3e:b0:88:9c:
de:4a:a8:49:af:d7:9e:02:df:f0:17:ce:d0:c7:07:
4c:3f:52:86:0a:c1:f6:3d:61:6f:42:31:cb:1a:a1:
99:9b:96:78:0b:b4:72:7b:78:d6:6b:8b:33:00:56:
d1:c0:0e:2a:5d:09:fc:e0:48:b7:77:a9:df:bd:12:
18:69:3f:0c:2c:03:c9:fd:2c:cd:97:86:59:49:3b:
0c:24:91:90:74:58:33:e9:6e:43:73:de:68:e0:0c:
14:67:06:50:14:b7:99:c0:ec:f5:74:50:2f:1f:6a:
4e:d4:47:3f:df:01:2d:14:53:a2:98:3c:43:e3:e0:
2a:1c:1c:0c:4b:4a:6b:f8:0e:fe:d1:5f:a2:8c:ef:
2c:0d:a9:a9:43:ab:dc:90:18:0f:60:da:d0:91:00:
c6:ab:b2:53:06:a3:b9:88:83:1c:b0:d9:5a:b5:8e:
b7:60:33:91:dc:fd:be:d7:0b:dc:b6:8b:9b:2c:41:
6f:57:76:bc:5c:34:02:ca:9c:6d:21:a9:9f:0e:8f:
0c:cc:f4:27:ad:ec:a9:4e:fe:50:fe:ef:66:54:c7:
2f:04:b7:26:f2:df:3a:fc:7d:c4:66:c8:7d:9e:01:
97:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:11:1B:54:8B:C0:A7:C9:B7:C6:AD:90:64:94:A1:44:CF:84:43:02
X509v3 Authority Key Identifier:
keyid:DE:08:5B:0D:1B:BF:9E:78:1B:15:4B:06:F7:B9:14:11:29:DB:77:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ghbDRu_nngbFUsG97kUESnbd18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/ff03a3-31a1-4da1-b8e9-7a0b3d5d9156/1/3ghbDRu_nngbFUsG97kUESnbd18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:cb:1a:6a:ae:7d:e9:90:d6:59:0d:f0:47:d6:c3:4e:82:0f:
03:5c:30:1f:8c:3d:15:b9:52:c8:d7:45:ee:e7:11:4f:b0:71:
1c:6a:06:17:b7:30:06:b4:fe:d4:00:44:04:1b:75:d5:e5:28:
6e:cb:c4:19:5c:63:01:6f:f3:b6:e0:3d:f6:65:32:c0:44:ce:
37:0e:21:c2:2b:59:06:c0:d1:9a:1f:a4:85:01:8e:76:e6:28:
44:fe:b5:94:b7:9e:ff:45:62:27:88:60:0f:7a:8f:db:09:da:
1c:33:7c:d3:85:3d:5e:6c:65:fd:06:bf:98:6c:94:51:4a:b0:
e8:66:e8:1d:5d:0b:12:ac:b3:61:c7:ab:e1:70:7e:79:7c:f4:
2e:a4:a1:4d:d9:bf:2d:1e:db:7d:86:dd:f8:c4:69:ef:a1:d9:
fe:b4:ed:70:6e:27:03:34:95:02:92:97:51:a2:e1:b8:49:bf:
bc:c8:e9:17:46:74:e6:28:bd:83:81:05:ae:80:cd:d2:81:d8:
02:4d:a6:8c:31:95:23:6d:73:e9:71:45:30:da:a6:db:94:ba:
20:6a:f9:e9:74:e6:a5:0e:cc:2c:4d:63:2a:20:5c:74:ed:c5:
5d:a5:bb:4d:62:f2:6f:7b:d3:10:8a:5b:11:3a:88:78:5f:21:
c2:08:e8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:35 2026 by rpki-client