Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft
File: 3GIdzcetC-Mx18mkR_KhZOQupP0.mft (raw, json)
Hash identifier: sswI2AgzFeykQ9+uK5daapK1wPrBmqhrS5Uu0cGdZiI=
Subject key identifier: 85:CF:83:58:59:22:55:2D:21:E4:8A:21:E3:21:9A:66:CC:6C:5E:6A
Authority key identifier: DC:62:1D:CD:C7:AD:0B:E3:31:D7:C9:A4:47:F2:A1:64:E4:2E:A4:FD
Certificate issuer: /CN=dc621dcdc7ad0be331d7c9a447f2a164e42ea4fd
Certificate serial: 01A0FC1036DE5589EABB3F194049990C95BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft
Manifest number: 030C
Signing time: Fri 02 Oct 2026 10:01:55 +0000
Manifest this update: Fri 02 Oct 2026 10:01:55 +0000
Manifest next update: Sat 03 Oct 2026 10:01:55 +0000
Files and hashes: 1: 3GIdzcetC-Mx18mkR_KhZOQupP0.crl (hash: YmMUmlmydD83CzI+udWkfLCoagaoUMiu0NR+eVLcR7A=)
2: 5AOG4kUiGD70wVs_XxJDRgh1PMY.roa (hash: MRYcI9nU4eBASWsWUt6T36KO1+qAGLyatjU9/qm4WUA=)
3: Z4m8c_khyolcVDO5PV7q2NiXQe0.asa (hash: 1+Jl7vHo2Ld6XyDIDZY+xyRWhlS4TA+0ypKq1kqiGDs=)
4: jaxXvAizdbnOZ260E3D28kqdvDc.roa (hash: DfDxUm/qCB11xHbyJJCLMlzjpAVxvuDgSoZ8iUQR0iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:10:36:de:55:89:ea:bb:3f:19:40:49:99:0c:95:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc621dcdc7ad0be331d7c9a447f2a164e42ea4fd
Validity
Not Before: Oct 2 10:01:55 2026 GMT
Not After : Oct 3 10:01:55 2026 GMT
Subject: CN=85cf83585922552d21e48a21e3219a66cc6c5e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:20:fb:26:2f:20:af:0d:31:50:1e:25:cd:c4:
8e:a7:b3:7b:bc:20:78:6e:cd:13:52:dc:65:ac:73:
dc:ca:d2:78:78:71:00:41:26:61:01:f0:21:15:d5:
83:97:08:0d:04:2f:4a:2e:5c:8c:82:66:76:e5:8d:
06:4b:11:f3:bc:fc:07:b4:ae:3e:69:6e:fb:a3:c9:
49:ea:4a:3c:be:1d:99:02:32:a5:72:28:5d:61:0d:
3d:60:a5:d8:98:1c:0f:8e:4e:d2:de:8b:c8:e2:98:
d4:05:be:4c:a9:3f:cd:c6:05:02:00:98:f8:ca:bb:
74:9a:75:cb:f4:d4:16:3d:d3:a7:43:38:52:83:72:
9b:f1:20:bd:a6:47:02:28:5a:7c:c0:98:96:ae:71:
c1:44:08:be:73:5a:b1:89:aa:cc:08:34:89:0b:90:
b6:68:a2:26:ff:5c:f2:56:80:a5:52:d8:fe:9e:54:
52:0c:1b:7d:b5:f5:f9:2f:d5:2a:f3:83:9f:3d:6b:
60:4d:56:fa:48:49:6f:4e:74:05:ad:58:b3:54:22:
3e:49:4f:19:37:48:3e:4e:fe:ef:65:e6:9b:ba:2d:
64:50:44:b3:cd:b1:5c:8c:cf:e7:e2:0a:99:3a:ae:
46:0a:04:c8:eb:5d:c2:c3:49:c1:2c:d0:2a:be:87:
ac:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CF:83:58:59:22:55:2D:21:E4:8A:21:E3:21:9A:66:CC:6C:5E:6A
X509v3 Authority Key Identifier:
keyid:DC:62:1D:CD:C7:AD:0B:E3:31:D7:C9:A4:47:F2:A1:64:E4:2E:A4:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b6:fd:9c:cf:1d:f9:75:de:e9:c1:e4:e9:c8:fa:44:18:6c:
f9:bd:9f:ee:95:96:f6:4d:a8:3b:6b:8c:f2:e0:b9:48:6d:aa:
fa:bb:9e:70:a3:8a:b1:4c:38:82:88:38:2e:9e:e6:4d:2d:4c:
58:99:73:2d:16:36:20:a1:17:6a:d9:d5:7a:8f:d8:8d:30:f1:
3f:cf:2e:e7:f0:0b:d5:37:9e:77:f0:59:4c:61:a2:3d:32:68:
ea:b5:dd:9d:11:76:5a:64:bd:66:ff:7b:e4:45:25:79:43:de:
48:78:52:92:b1:f3:83:f8:b8:08:33:51:24:d8:d2:92:93:b7:
aa:c6:c1:2b:8e:01:d4:6c:d7:71:9f:a0:c3:aa:6a:56:73:ea:
43:2f:cb:3c:c6:2b:64:65:16:fd:a6:c7:f4:39:b8:65:bf:08:
25:ee:81:4a:52:ed:82:01:39:bf:bc:08:8e:79:57:61:8c:a9:
7f:ed:6f:ae:2e:30:bd:5b:43:80:f6:fb:93:00:4b:43:28:6a:
61:ee:25:40:71:48:61:2d:e8:4c:ed:6d:7a:cd:08:a5:e8:b9:
05:f3:1d:8b:6c:ee:7f:17:48:46:c4:9c:27:a6:ae:43:e5:06:
d9:7c:7d:b6:5c:51:b8:9f:cf:ff:a1:72:61:22:40:40:14:4a:
31:f7:80:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 14:40:41 2026 by rpki-client