Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
File: 3-KkwH5N3j8ePKw5ujshNTGsy7k.mft (raw, json)
Hash identifier: 9FsCd63IFCXPbr/owmnMhJwNxzkQ9fP9pW89/j+wUI0=
Subject key identifier: B0:D9:EE:89:91:34:A2:2E:D7:71:4C:F4:B9:04:33:54:92:E8:92:B5
Authority key identifier: DF:E2:A4:C0:7E:4D:DE:3F:1E:3C:AC:39:BA:3B:21:35:31:AC:CB:B9
Certificate issuer: /CN=dfe2a4c07e4dde3f1e3cac39ba3b213531accbb9
Certificate serial: 01A1920CFC93A2FA15DDE2EA1143DAFCC8EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-KkwH5N3j8ePKw5ujshNTGsy7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
Manifest number: 027F
Signing time: Sat 31 Oct 2026 13:01:26 +0000
Manifest this update: Sat 31 Oct 2026 13:01:26 +0000
Manifest next update: Sun 01 Nov 2026 13:01:26 +0000
Files and hashes: 1: 3-KkwH5N3j8ePKw5ujshNTGsy7k.crl (hash: 4nY+8Z49upK6LHHazRAcklG1ZMtV2dhVdmrKdG87wzY=)
2: Bq6stHEFxMFxnWEoWkNnr2q_nfU.roa (hash: FRvotk1GU1c0bgTGRLjQpv9XYU8csQF9vIzVahVu7Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-KkwH5N3j8ePKw5ujshNTGsy7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:92:0c:fc:93:a2:fa:15:dd:e2:ea:11:43:da:fc:c8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe2a4c07e4dde3f1e3cac39ba3b213531accbb9
Validity
Not Before: Oct 31 13:01:26 2026 GMT
Not After : Nov 1 13:01:26 2026 GMT
Subject: CN=b0d9ee899134a22ed7714cf4b904335492e892b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7d:16:6a:8c:9e:e6:31:75:d4:b0:93:29:ea:
4c:37:bc:72:2d:fc:01:e9:8b:43:f3:81:d3:9e:94:
37:64:87:58:6a:91:25:08:e1:30:07:46:69:31:c8:
88:ed:cf:63:51:67:38:00:8b:4a:a2:b2:79:2b:1f:
cc:ba:61:82:5f:f3:8f:31:02:47:fe:68:b4:cb:4e:
fa:bb:3f:a4:8a:f1:35:91:96:31:dd:45:74:55:5d:
bb:a4:7f:01:9e:0f:09:f0:60:a0:bf:89:c3:4c:d9:
62:83:ec:03:84:fe:29:fa:76:95:ff:94:58:e3:45:
df:76:a9:b6:c3:81:0c:1e:4d:64:53:d5:4d:fc:e3:
3a:08:9d:e1:46:2c:ad:16:44:67:22:aa:02:58:48:
9b:f7:9a:b1:be:80:66:0a:59:2c:1d:32:ca:05:c1:
8b:b8:22:c8:02:bc:60:9f:64:62:ee:1a:07:20:94:
dd:e7:ea:4b:4f:6c:d1:be:40:7d:18:d5:8e:4c:c0:
55:2a:e6:56:16:7b:05:3f:81:2b:c3:69:b8:f3:0c:
1e:12:8d:db:a6:ba:04:f0:f9:63:63:13:87:61:d4:
93:ae:c1:05:cd:7f:c7:6b:96:8a:3a:02:1b:49:8d:
c5:31:2a:3e:33:70:b7:c1:64:fc:2f:9b:59:b2:fa:
5e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D9:EE:89:91:34:A2:2E:D7:71:4C:F4:B9:04:33:54:92:E8:92:B5
X509v3 Authority Key Identifier:
keyid:DF:E2:A4:C0:7E:4D:DE:3F:1E:3C:AC:39:BA:3B:21:35:31:AC:CB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-KkwH5N3j8ePKw5ujshNTGsy7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a9:58:75:5f:b6:1a:1a:6a:eb:1b:5e:bd:30:0f:89:c3:bd:
a8:76:51:66:43:be:67:1e:f4:88:9e:98:d8:0b:86:96:a4:40:
64:40:16:b5:8d:8b:7c:42:e7:52:67:19:84:d3:98:59:af:43:
ea:2c:f6:8f:70:a0:f4:8a:fe:d8:16:1d:c2:9a:af:d7:c9:8e:
1d:e3:7c:62:d9:12:cc:8f:42:f0:b5:8c:80:72:43:b0:b5:81:
8d:1d:2b:ac:53:52:74:0c:dc:6e:7b:5e:d9:bb:d4:31:5e:82:
b2:36:cc:b6:7e:7d:70:08:f2:b4:86:71:88:59:ea:fe:f0:5a:
66:79:05:c7:74:1f:da:de:ea:02:84:ed:73:69:55:fb:ac:73:
48:ed:bb:1d:ad:ee:ef:49:37:6f:09:37:b2:3b:94:5d:ff:4c:
23:d9:7d:4e:10:e8:1a:d2:b0:69:34:37:a6:01:a9:b7:4a:96:
60:3d:58:27:03:4b:64:7a:dd:e6:c6:37:3a:ce:db:c9:d9:86:
30:8a:07:d1:16:8d:8f:34:7c:c6:9a:a5:61:e0:9d:13:58:c4:
82:a7:a0:ee:fc:d5:2a:77:90:e0:35:45:27:e5:5f:58:a5:b0:
79:87:85:e1:76:4c:32:3c:b8:87:6f:53:3e:3a:8f:18:fb:32:
fc:d3:61:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:23:05 2026 by rpki-client