Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.mft
File: a3fOhCRDu4qW_CUJDZ66_5Vnol4.mft (raw, json)
Hash identifier: Y0paM2ZZhFW2EwXwtiGOX6EFvNU76DgniyH47EofkBE=
Subject key identifier: 3F:10:E4:E0:4A:CB:A7:CF:92:C3:CB:55:92:58:98:36:3A:49:E5:34
Authority key identifier: 6B:77:CE:84:24:43:BB:8A:96:FC:25:09:0D:9E:BA:FF:95:67:A2:5E
Certificate issuer: /CN=6b77ce842443bb8a96fc25090d9ebaff9567a25e
Certificate serial: 01A14A2A78502CB8A31710D738C36F1BF09A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3fOhCRDu4qW_CUJDZ66_5Vnol4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.mft
Manifest number: 016E
Signing time: Sat 17 Oct 2026 14:00:59 +0000
Manifest this update: Sat 17 Oct 2026 14:00:59 +0000
Manifest next update: Sun 18 Oct 2026 14:00:59 +0000
Files and hashes: 1: AYWssxj1PLbVr_URF-ZIiz6BS4I.roa (hash: 9obR855p0IhaLrIXPPGSL2nYoYCxku1wM9uG/XbR5LA=)
2: a3fOhCRDu4qW_CUJDZ66_5Vnol4.crl (hash: UHRw1jgYEMEmmRIorSxv+hNYVGY5Hv1wiGQrzK45FJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3fOhCRDu4qW_CUJDZ66_5Vnol4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4a:2a:78:50:2c:b8:a3:17:10:d7:38:c3:6f:1b:f0:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b77ce842443bb8a96fc25090d9ebaff9567a25e
Validity
Not Before: Oct 17 14:00:59 2026 GMT
Not After : Oct 18 14:00:59 2026 GMT
Subject: CN=3f10e4e04acba7cf92c3cb55925898363a49e534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:29:e7:30:e5:0e:a8:6b:d3:d3:1a:97:73:b4:
a8:18:ae:7d:06:14:cb:93:db:89:29:25:37:57:0e:
26:c3:7c:40:e8:49:b3:58:15:6e:05:4a:93:63:9f:
2f:02:42:f2:35:db:08:9a:5b:2f:82:6d:2a:61:70:
9b:28:4c:e4:cd:2d:82:66:8a:6e:54:e9:77:13:9d:
0b:98:21:e4:fc:72:3f:d7:18:40:c2:e0:b2:8a:82:
5e:4a:e9:26:36:4f:d9:41:27:60:97:cd:6d:e6:33:
3d:f3:bb:8f:c1:85:f5:30:f6:c4:19:a2:31:23:58:
d8:0d:6a:82:a3:f0:72:91:8a:5a:09:be:41:10:a1:
d1:6c:53:e8:63:0d:a6:2d:1a:8c:9e:9f:0d:80:dc:
6f:8d:56:15:ea:9f:1c:d8:05:a9:b1:b2:b4:31:ae:
03:26:3e:63:fe:ec:e0:6c:41:4e:91:81:45:44:ea:
df:2a:b7:b7:f3:bd:3b:07:c7:4b:7a:fe:a4:d7:5f:
4f:cf:2e:19:d3:4b:95:ab:3e:77:9e:ba:c5:9a:1b:
b4:52:25:21:6c:e7:1b:35:11:8c:18:ab:22:2c:3e:
a2:31:4c:e6:1e:bc:e6:b9:e9:e3:51:cb:ad:43:97:
8f:cd:25:b2:60:4e:b5:75:26:d2:5b:76:f8:af:43:
0f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:10:E4:E0:4A:CB:A7:CF:92:C3:CB:55:92:58:98:36:3A:49:E5:34
X509v3 Authority Key Identifier:
keyid:6B:77:CE:84:24:43:BB:8A:96:FC:25:09:0D:9E:BA:FF:95:67:A2:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3fOhCRDu4qW_CUJDZ66_5Vnol4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1308bb-2d48-42c6-9ad7-e0e798c325d3/1/a3fOhCRDu4qW_CUJDZ66_5Vnol4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:31:02:81:e6:4d:a6:21:c7:cd:a0:26:cc:a4:f4:bf:a5:1f:
31:46:d9:7f:9a:51:e6:0d:f3:2a:37:9b:d0:0b:ca:7c:85:e9:
dc:60:30:58:d3:28:52:5c:52:17:ca:09:e6:08:83:c8:79:f2:
75:31:90:19:61:46:03:1c:3e:18:9a:83:18:f9:b8:f7:f0:4d:
c0:1e:73:2c:d4:fa:33:cb:e0:a5:29:a3:05:bf:55:ee:b9:c9:
b8:ef:ca:c6:04:9c:59:9f:6b:cf:73:ab:50:17:ea:08:14:9e:
56:a5:17:39:b4:25:45:51:39:1a:f5:e8:a3:2f:6e:3b:52:b6:
c5:f8:4c:bb:05:d4:f1:d1:11:1c:e8:97:8e:44:dd:0d:3c:c6:
40:8a:df:20:13:3e:ef:64:c4:c9:d8:62:24:52:36:e3:10:d9:
c1:68:19:05:e0:31:28:59:2e:a1:7d:2f:df:f5:8e:ad:75:1e:
dc:84:8f:72:79:70:09:7c:ff:bb:78:68:c4:26:8e:96:e1:ac:
2e:1f:fe:3f:12:a1:92:11:47:70:08:58:a5:4d:75:03:91:e3:
2f:47:e8:74:e0:36:8e:e9:50:ed:ed:eb:e7:98:16:ae:e7:8d:
27:24:56:28:56:42:06:bf:91:64:d5:9b:ee:24:56:52:20:06:
e1:41:fb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 22:29:22 2026 by rpki-client