Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
File: 3g2da2l8ochlcMJWhi5oWLR5nIU.mft (raw, json)
Hash identifier: MTqc8qdq7RZcpIiZ7Nlpeq/fL+jLajWmP2we7B/K1Nc=
Subject key identifier: 35:E0:28:96:48:1B:00:47:4E:D7:4F:1E:36:14:FF:4E:6C:C3:45:95
Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
Certificate issuer: /CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Certificate serial: 01A10E4CC06C31AE4354BA5648634F41366C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
Manifest number: 1AA5
Signing time: Mon 05 Oct 2026 23:01:13 +0000
Manifest this update: Mon 05 Oct 2026 23:01:13 +0000
Manifest next update: Tue 06 Oct 2026 23:01:13 +0000
Files and hashes: 1: 3g2da2l8ochlcMJWhi5oWLR5nIU.crl (hash: iICpfuvY1UP4I4o8PnhXXQkd7B4iQzZLjgS09EZYamE=)
2: Sl3slTlmy5eFtqo76SlKQ9CnbUM.roa (hash: DVZMz6p8+NCTnVKJba2KiAUqUvaQ9KTQclo1bNgr4hM=)
3: hneKOL6xKV3cr3gP56n-PmBtpXI.roa (hash: GxqGClH9UHGqcmyTREy95vx88t5aKLbmXG/YE4t9Tqg=)
4: w49gIkVLNSYogOVZSrdUPgUp370.roa (hash: 6U7SbASkeATtJP3IVCl3hK3qgWI7Ka+3JgVPUarezUQ=)
5: zqr4aGdDDtzTHDNPWJqgcPddlew.roa (hash: SNHy9E5ZRD/6ft8c8Ogn35Ny9ABmYBAl4wY1xF1BhGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 20:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:4c:c0:6c:31:ae:43:54:ba:56:48:63:4f:41:36:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Validity
Not Before: Oct 5 23:01:13 2026 GMT
Not After : Oct 6 23:01:13 2026 GMT
Subject: CN=35e02896481b00474ed74f1e3614ff4e6cc34595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:62:33:e0:4b:bd:d8:d3:98:59:61:61:e4:75:
27:00:de:4e:1c:e0:fa:ad:fe:34:01:e0:5a:a9:fb:
52:c9:25:91:aa:e6:56:1f:88:6e:c7:fb:20:1b:50:
30:80:a4:4d:2d:95:bd:41:b3:34:c8:45:af:ca:cc:
57:9e:86:56:a3:4b:78:8a:94:02:c4:cd:05:ed:2a:
9c:b5:ed:f0:f6:8d:ac:f3:1c:e5:81:89:2d:c3:76:
4c:bf:f8:ae:23:2a:3b:dd:53:38:ff:0d:48:14:c9:
aa:b7:d4:9c:1a:52:ef:4d:40:81:96:d8:50:64:08:
c6:b7:44:d3:2e:3c:46:ef:e5:06:ef:7f:e8:01:12:
81:ec:9a:81:4e:b4:75:06:f4:b3:69:55:a9:be:db:
8f:28:5f:a7:70:2a:ea:27:91:3b:4a:8d:cb:7a:6f:
9d:d0:c6:e1:5a:90:23:24:3d:3b:dd:5d:76:86:1c:
dc:a1:f6:82:c6:23:e3:c3:fc:57:53:3c:f2:b1:d6:
60:e9:81:f0:ea:7b:d7:7e:56:66:5c:f1:97:b7:12:
3c:43:38:34:d6:81:e0:5e:f9:f9:39:9e:67:1c:1b:
14:7f:f8:18:cc:2c:43:ab:62:d0:3c:22:6b:9c:c4:
3b:e6:c6:41:2a:0e:8d:b7:55:df:14:cb:b6:81:9c:
53:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E0:28:96:48:1B:00:47:4E:D7:4F:1E:36:14:FF:4E:6C:C3:45:95
X509v3 Authority Key Identifier:
keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c3:b6:12:78:68:56:7c:33:bb:77:9b:4b:b9:f2:6a:36:af:
ba:80:60:6e:ea:7c:df:15:6e:06:ee:ac:9f:5e:eb:11:52:29:
e5:13:e5:81:48:a6:fb:b4:71:cc:f1:c2:d1:77:f3:f5:84:67:
4e:f6:0a:44:69:08:6d:6c:f0:b2:5d:54:c3:29:dd:4a:97:8c:
4c:8c:73:db:05:10:15:6b:2e:c3:68:ed:24:0a:d9:f8:02:51:
ad:63:cf:06:a6:27:d9:4e:08:1c:7b:11:4f:0d:ad:23:c4:d5:
d4:d0:c0:25:60:a9:f0:ff:64:87:ac:8a:23:19:a1:98:1f:43:
57:75:ab:93:b5:a0:4c:0b:88:da:c2:68:30:c7:a9:fb:6a:50:
a6:a6:04:98:a1:49:75:d5:a6:5c:28:db:b0:af:c3:91:20:43:
bf:cb:c5:2f:78:1b:a6:0f:ef:fd:4b:c2:16:f3:b3:a1:36:87:
83:98:27:78:e1:b1:91:e3:37:d2:20:a5:fa:c0:7c:54:07:5f:
27:55:c1:30:7e:73:8d:e7:7a:66:d2:e2:bd:b3:ab:54:16:1e:
00:7e:7e:39:ae:4c:2a:a9:31:2b:29:74:84:21:48:88:63:4f:
e6:f5:94:d3:1a:f2:bd:43:bb:b8:fe:73:37:83:23:55:d3:a6:
77:bd:e3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:25:06 2026 by rpki-client