Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
File: 3itcv5Z6A0nYiXBLtNYfpSajHW8.mft (raw, json)
Hash identifier: 1t4JzZj57Nj42D8WkRsC6yXaumT7ZD5f4UaWyZw0Ov0=
Subject key identifier: 4B:71:42:71:4C:C0:AE:F7:21:81:62:5D:F2:73:9F:48:0C:DF:78:FE
Authority key identifier: DE:2B:5C:BF:96:7A:03:49:D8:89:70:4B:B4:D6:1F:A5:26:A3:1D:6F
Certificate issuer: /CN=de2b5cbf967a0349d889704bb4d61fa526a31d6f
Certificate serial: 01A13E2645A3F6A05BF6C716D56263E9E0C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
Manifest number: 19E4
Signing time: Thu 15 Oct 2026 06:00:57 +0000
Manifest this update: Thu 15 Oct 2026 06:00:57 +0000
Manifest next update: Fri 16 Oct 2026 06:00:57 +0000
Files and hashes: 1: 3itcv5Z6A0nYiXBLtNYfpSajHW8.crl (hash: O14MMlxIVpXqX+zsMaUQe5MyhwtM1JZ0rlPACYUUDxc=)
2: xU2EDS3A1kqxHB5fmWawALQua5w.roa (hash: gy/kCjpuCiDHyb5854bh+q6WsJ4/S+45FLFM/o6soug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:45:a3:f6:a0:5b:f6:c7:16:d5:62:63:e9:e0:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2b5cbf967a0349d889704bb4d61fa526a31d6f
Validity
Not Before: Oct 15 06:00:57 2026 GMT
Not After : Oct 16 06:00:57 2026 GMT
Subject: CN=4b7142714cc0aef72181625df2739f480cdf78fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c6:bd:b3:fd:85:b9:9c:f1:0d:df:34:b7:53:
f7:71:73:0a:5c:65:92:16:62:6e:40:a2:5b:7d:50:
8f:33:ee:36:01:d5:56:ed:49:52:7a:39:0d:10:2a:
3f:2b:24:3d:c5:77:7d:32:34:11:ee:ec:a8:3d:91:
43:c1:2d:42:38:1b:5c:81:7a:f3:d3:15:15:15:b4:
6f:cd:96:21:e3:c1:9c:b5:2e:e8:df:c5:20:75:5b:
6b:25:fe:a6:6b:d2:92:ea:aa:87:8e:3a:8a:2d:59:
36:9c:d5:39:b1:1d:b6:5a:ec:b3:89:27:af:ba:4e:
da:03:66:3b:de:c6:22:8f:6a:b1:c2:e6:67:7d:fe:
f7:36:7f:b3:8b:cb:f5:03:44:72:57:53:dd:e1:71:
80:26:fc:64:db:eb:ba:4c:c6:3c:5a:e5:b7:21:16:
63:bb:da:9c:bd:f2:37:7a:f9:6e:95:5a:fe:b9:f9:
81:91:80:46:3a:f4:6f:17:a0:50:45:aa:0f:26:ab:
6e:cb:20:47:50:2d:98:83:30:0b:1d:f2:9b:4d:ca:
37:e7:80:cd:c7:b5:ac:7b:ce:f5:c7:da:7a:70:35:
cd:21:46:51:97:21:8b:03:8f:c8:53:29:aa:31:64:
ed:ff:27:7f:03:72:0d:8f:2b:5f:99:34:75:31:d5:
bd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:71:42:71:4C:C0:AE:F7:21:81:62:5D:F2:73:9F:48:0C:DF:78:FE
X509v3 Authority Key Identifier:
keyid:DE:2B:5C:BF:96:7A:03:49:D8:89:70:4B:B4:D6:1F:A5:26:A3:1D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:14:07:19:c7:4d:4d:16:9b:03:1f:04:9a:d1:a0:58:2a:e0:
8d:1d:44:21:b8:55:42:e0:87:33:57:ee:a7:5b:77:07:97:39:
dd:e1:26:86:99:bd:99:e0:ad:4b:3a:60:dc:36:28:73:e8:49:
01:ce:7b:52:ba:91:2b:1c:ee:35:72:24:cc:b3:8c:07:c5:7f:
ce:18:2f:16:92:9b:4b:cf:f5:5e:4b:0b:9d:a2:8b:28:0b:83:
c4:c2:47:3f:b5:fc:1f:e4:42:c1:d2:22:27:5e:3a:93:9f:c1:
ce:12:ee:be:39:11:be:17:33:4f:26:3d:7d:eb:61:d1:5d:ed:
95:c4:93:96:e7:b6:84:2a:d0:28:93:ff:a2:93:d1:10:d9:35:
c2:11:d0:f2:8d:6f:df:25:4f:c4:0f:24:e2:16:e4:10:7a:91:
82:7b:57:ac:fe:da:91:74:e4:03:e4:1c:0b:2c:ee:84:0a:1a:
f8:56:86:4a:f7:5e:a2:c8:9b:91:f9:68:b4:d9:20:b1:2b:71:
d6:f7:64:12:5a:a0:ae:42:0c:1b:88:c1:e3:ac:46:a1:8d:2f:
6f:e7:42:e2:74:d8:6a:4c:28:aa:ac:5f:de:94:ac:d2:ba:29:
e8:a7:4d:ee:39:37:4d:15:3a:fd:22:37:16:72:df:38:83:cc:
03:d6:ed:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:36 2026 by rpki-client