Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
File: 3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft (raw, json)
Hash identifier: SWxu0z4jpr8r2/fDnfU4/bzQWKxLY/xbRoYN+Jx8dN8=
Subject key identifier: EB:68:73:7C:CA:A5:CE:27:09:56:BD:06:99:66:B8:DE:6C:14:03:72
Authority key identifier: DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96
Certificate issuer: /CN=dc6baa601236ab9bea29f807a66920ed5656a196
Certificate serial: 01A149BD46C034BD6E1542C01DC7677EC33B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
Manifest number: 1AA9
Signing time: Sat 17 Oct 2026 12:01:43 +0000
Manifest this update: Sat 17 Oct 2026 12:01:43 +0000
Manifest next update: Sun 18 Oct 2026 12:01:43 +0000
Files and hashes: 1: 3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl (hash: 4sV+/7I+o70cpAoEmo6kyhNpLcsZtCIrdAbkfKIWOOQ=)
2: LmwyPllgT27iDmcYfX7agNvw4rA.roa (hash: kpm3XdXtMEMrfdjcWSVw0huoNKfPlGFqAs8H1ASM9Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 12:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:bd:46:c0:34:bd:6e:15:42:c0:1d:c7:67:7e:c3:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6baa601236ab9bea29f807a66920ed5656a196
Validity
Not Before: Oct 17 12:01:43 2026 GMT
Not After : Oct 18 12:01:43 2026 GMT
Subject: CN=eb68737ccaa5ce270956bd069966b8de6c140372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:07:bd:81:21:a7:ad:b4:06:08:af:86:74:58:
c3:94:8c:25:57:d4:19:21:b1:75:1c:c3:a1:a1:d3:
60:d1:41:c0:43:ff:de:53:36:50:4d:74:ff:ff:55:
48:b4:e1:cd:8a:32:3d:14:ab:f6:59:50:69:7b:ef:
9f:89:f1:b4:40:1a:4f:7e:aa:f5:ab:f6:ac:38:13:
e6:df:b7:40:85:79:c1:13:49:e1:b7:a8:0a:a2:63:
bf:01:8c:de:95:52:aa:f4:0d:7c:12:31:e2:4f:d5:
10:c5:0c:f1:08:85:ce:31:4c:06:a8:21:aa:e5:07:
fa:08:dd:05:0e:3e:f9:fa:bd:ae:c9:de:99:9a:51:
33:59:42:76:a3:ca:8c:46:39:d9:60:4e:34:05:22:
db:87:8f:ed:d3:b2:ec:71:15:ef:7b:37:09:bf:53:
19:83:59:54:7e:e1:22:73:2f:d5:97:25:53:6e:9d:
ec:36:c7:8a:ce:f2:41:db:c9:00:0e:0a:94:a9:dd:
d4:7a:70:a0:97:57:ff:94:b5:64:89:74:05:1f:10:
2d:93:d0:62:b7:82:d4:b5:97:c7:13:f9:aa:9a:45:
1e:64:0b:2d:a8:5d:95:2d:a0:62:ca:ac:1a:9c:41:
3a:19:bc:66:85:da:84:c8:04:ed:56:51:00:6e:1b:
c5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:68:73:7C:CA:A5:CE:27:09:56:BD:06:99:66:B8:DE:6C:14:03:72
X509v3 Authority Key Identifier:
keyid:DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:f2:ff:c8:ed:16:fd:e2:b8:aa:25:8b:b8:97:30:c8:31:7b:
62:ac:43:01:1e:ff:79:9f:50:af:05:ac:05:94:e2:ee:ee:01:
d5:dc:92:04:d4:e9:ff:1e:5b:d2:87:4d:ca:08:70:22:11:f9:
1e:16:64:d5:60:7a:b9:c1:34:1b:98:d1:bb:41:36:c7:ec:3c:
7b:f7:4c:85:92:80:3c:c9:8b:cb:59:7a:b1:6e:6a:08:1d:5c:
2c:5f:a1:b5:77:6f:47:70:93:5e:71:a2:b5:4d:2e:0b:5a:00:
62:db:78:3b:e7:53:b4:c4:10:3d:1c:11:ee:58:77:5d:f6:c6:
98:1c:f1:3e:37:93:76:f4:1a:9d:9d:92:31:89:a8:8c:6d:5e:
32:0e:2b:52:b6:fe:fe:15:47:a2:c5:02:2b:1e:67:29:ae:a7:
26:f4:55:e7:c3:8b:e4:b5:a4:6b:76:86:2e:74:71:fe:c1:43:
c6:81:97:14:52:3c:a8:e9:ab:e4:84:6c:53:ea:ec:e2:64:29:
e6:48:5d:ec:5f:d3:49:45:78:1e:83:96:d7:7b:b0:44:78:8b:
84:f3:8b:2c:0e:0d:ab:7d:f0:d1:e3:e3:da:d6:12:73:dd:d0:
c1:66:09:a0:5d:fe:50:4d:d6:77:c2:7b:ba:46:db:fc:6b:ce:
ac:ba:1f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 23:54:30 2026 by rpki-client