Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
File: 3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft (raw, json)
Hash identifier: pQF0sQmlzAPj9pGlzUGn5vQQ3dX4WMnv6ir7DVjsgj8=
Subject key identifier: FD:31:E0:54:DD:55:01:D9:71:CB:92:EE:53:3E:D7:02:83:CF:8E:B3
Authority key identifier: DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89
Certificate issuer: /CN=ded55569177a889d337f03f2e698acabcccbb589
Certificate serial: 01A13D813C875EF41F84DAA88C17AA8D9709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
Manifest number: 172D
Signing time: Thu 15 Oct 2026 03:00:42 +0000
Manifest this update: Thu 15 Oct 2026 03:00:42 +0000
Manifest next update: Fri 16 Oct 2026 03:00:42 +0000
Files and hashes: 1: 3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl (hash: xGmmYhLqWmDGlP5G9VwGrdoi30AXj7iOZedt3M1k974=)
2: PjoIBGbk9FD7bZGLP8eN3ezf2Uo.roa (hash: gwcdk+V9+YDh37eh6agaRz1L3hMZa0x8O24FJTvNrKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:81:3c:87:5e:f4:1f:84:da:a8:8c:17:aa:8d:97:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded55569177a889d337f03f2e698acabcccbb589
Validity
Not Before: Oct 15 03:00:42 2026 GMT
Not After : Oct 16 03:00:42 2026 GMT
Subject: CN=fd31e054dd5501d971cb92ee533ed70283cf8eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d6:e9:d6:7a:97:44:30:2d:41:94:29:76:bd:
5c:2f:4f:35:9e:ca:19:0f:81:2c:42:11:3a:79:ac:
45:ef:ae:1a:77:88:e7:b7:d3:36:c9:9c:4c:e5:2d:
c2:7c:57:7d:26:a8:8f:32:69:ed:8b:b2:27:09:89:
76:49:70:2b:67:f2:93:48:f3:95:4b:69:fc:b7:09:
78:98:99:47:8d:33:e9:0a:79:95:d0:65:59:23:8f:
27:af:ca:29:2f:ad:27:d7:cb:da:82:ad:46:3b:b1:
1c:04:66:3b:6c:e7:c3:2b:d2:74:31:5e:e3:47:4a:
90:a6:f7:4c:4c:c1:9f:68:e1:be:cf:b9:fa:51:8a:
08:6d:9b:86:e9:13:8f:15:73:c9:21:b3:ab:de:79:
9e:d9:97:d4:f3:99:54:63:8f:fb:e3:98:91:06:88:
15:21:68:04:95:bc:af:ef:d1:5b:da:3b:f1:c5:ba:
23:7b:cf:02:d5:3a:ef:ac:c6:f7:cd:0f:c1:ff:6d:
2d:fd:8a:9e:b3:23:91:c3:bb:f2:a8:d5:ff:f1:4e:
94:4f:af:e8:7b:41:c1:3f:91:39:a4:ea:1a:d5:9a:
cd:95:7e:c1:24:15:fd:35:95:e1:6a:a2:8f:56:b6:
25:00:27:95:d2:16:24:9f:d0:50:40:21:ea:42:89:
3d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:31:E0:54:DD:55:01:D9:71:CB:92:EE:53:3E:D7:02:83:CF:8E:B3
X509v3 Authority Key Identifier:
keyid:DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f6:c9:28:64:da:b1:c4:e4:fc:0e:74:54:c4:06:4a:7f:fb:
8c:16:dc:d1:ce:87:67:49:dc:c4:18:8c:29:16:5f:67:4f:33:
63:80:a8:42:ff:da:38:41:26:31:a8:e4:f6:84:45:bd:f7:22:
65:8d:ed:1d:32:56:f7:cb:60:7e:23:b5:bb:e4:93:c8:8a:da:
eb:df:83:d0:22:70:b2:a2:7e:95:9b:77:80:82:ba:c8:27:33:
b3:8e:ab:b1:3b:13:3d:e0:6f:56:8e:7f:80:27:23:9a:51:23:
ca:ed:7c:f4:08:ee:2f:39:18:0f:9c:e1:35:5c:66:dc:78:b0:
77:13:b9:fd:41:96:34:a4:15:4c:74:55:67:ee:e1:32:ae:d3:
4e:39:f2:b8:1a:67:d8:06:1d:3d:9d:89:83:d9:8c:3c:56:56:
78:0d:16:fb:ad:49:19:6e:88:1d:70:42:50:af:8a:01:89:68:
b8:df:76:44:fd:f7:5e:9b:8e:70:a6:a8:5c:7d:05:a9:63:80:
1c:e6:26:58:e9:d7:af:9b:86:52:45:f6:de:ef:55:1c:7f:f2:
57:97:03:7a:9b:39:55:db:4f:83:01:b4:12:6f:61:df:0c:32:
41:10:54:2f:cc:63:d6:5b:f3:2c:c4:c8:7f:f2:a5:03:2a:15:
71:35:e1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:03 2026 by rpki-client