Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
File: 3ye5OZNKLMIG_7przpyQ_cujnHE.mft (raw, json)
Hash identifier: Wt9Qoprygjcf/UHsNGWRoVzt0Og1WZitqEcqEmy7InE=
Subject key identifier: 24:1D:A7:52:4F:A9:4D:AC:A3:08:7B:8C:5D:B8:FB:16:45:5E:A5:5D
Authority key identifier: DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
Certificate issuer: /CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Certificate serial: 01A181874479DE86CB0B4E4F2CB32578504B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
Manifest number: 1AD4
Signing time: Wed 28 Oct 2026 08:01:28 +0000
Manifest this update: Wed 28 Oct 2026 08:01:28 +0000
Manifest next update: Thu 29 Oct 2026 08:01:28 +0000
Files and hashes: 1: 3ye5OZNKLMIG_7przpyQ_cujnHE.crl (hash: OcIdKFhZ5GmvlV12+lNH+4y1UbTj6Oh9kCCFXH/L0x8=)
2: W5GHuBmScEfpIPAhuqgylrz1a6Q.roa (hash: iVf+MqYMn6D3or0TDUJHTOHK/dGQL5UOldNHGxN0jow=)
3: tH4NdKGms5TfcW6T3wq-xPP5lao.roa (hash: RAFP/ByUPYbvzL7CQ6hq0JZ4+gFCb5J71aCNcV4HRvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:87:44:79:de:86:cb:0b:4e:4f:2c:b3:25:78:50:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df27b939934a2cc206ffba6bce9c90fdcba39c71
Validity
Not Before: Oct 28 08:01:28 2026 GMT
Not After : Oct 29 08:01:28 2026 GMT
Subject: CN=241da7524fa94daca3087b8c5db8fb16455ea55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4f:55:b2:a2:4a:24:56:fc:da:79:94:0d:8b:
54:0c:56:6a:b6:4e:db:34:a0:79:d3:2c:16:a3:85:
9b:a0:90:6b:f2:a7:a2:b2:f2:f6:53:ca:30:c8:b5:
17:a9:33:74:9a:3d:70:50:76:43:3e:b4:47:37:77:
7e:59:84:70:53:26:0d:90:08:bd:38:5c:b4:ba:b3:
f3:1a:44:f8:c2:1b:14:d2:5c:9f:dd:40:94:cc:7b:
b0:07:58:dd:06:b2:03:0f:9a:94:6f:6a:49:bf:a2:
2e:9b:a4:29:97:47:82:b9:63:ef:41:b5:2a:4f:7f:
d3:88:c3:a3:67:17:94:ac:fc:19:12:0f:f7:23:28:
97:7b:b4:51:78:3c:a3:76:47:2a:0d:c6:c8:59:a5:
11:56:97:a5:46:31:1e:dd:be:ec:a9:36:96:d5:8e:
bb:8c:31:c0:11:8b:62:26:cf:c1:50:1f:73:2e:00:
3a:b4:6d:8c:61:b8:f5:05:b4:53:09:c2:3e:90:39:
fa:d2:52:60:95:42:f3:92:f0:cb:f5:41:b6:d2:9c:
30:83:12:79:b6:ec:14:68:69:d6:90:c2:f3:03:67:
1e:31:fe:df:1a:98:51:ae:2c:dc:a7:d6:02:b6:df:
13:1c:48:99:07:0b:cd:14:91:3a:56:7c:ba:51:5d:
09:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1D:A7:52:4F:A9:4D:AC:A3:08:7B:8C:5D:B8:FB:16:45:5E:A5:5D
X509v3 Authority Key Identifier:
keyid:DF:27:B9:39:93:4A:2C:C2:06:FF:BA:6B:CE:9C:90:FD:CB:A3:9C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ye5OZNKLMIG_7przpyQ_cujnHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/966261-83b5-4ead-a468-6ed54d3fe4f4/1/3ye5OZNKLMIG_7przpyQ_cujnHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:4c:3e:96:56:0a:ef:c8:4f:2c:75:e8:a2:38:5f:b9:6b:3b:
8e:a4:c4:b2:d0:1a:a9:fe:36:26:5d:f8:c5:79:a9:7a:e6:9c:
46:8d:3a:72:49:6d:36:17:8c:69:6f:a7:46:00:5c:ba:dc:83:
ca:8d:f6:d8:a7:1e:9b:12:bc:6a:e7:49:3d:f7:e2:2d:a5:d6:
25:3e:03:90:35:08:90:bd:23:6a:3f:a5:d4:ec:5a:8e:5a:d2:
eb:b7:e3:bd:fa:64:28:13:cc:f0:c6:e3:9c:f4:1c:9c:24:97:
af:5c:7f:a9:da:5c:ac:7c:9d:2c:85:08:5e:40:b0:25:af:07:
b1:3e:2e:d1:e5:7f:dd:d6:57:db:9f:ac:3a:21:f7:ea:e1:3d:
14:de:b8:b5:14:6b:90:01:fe:50:12:97:d9:22:ae:72:0d:ad:
67:3a:d4:d0:9e:76:16:6a:6c:1f:97:10:cf:da:20:bd:59:e0:
9a:c8:18:69:ba:ae:62:4e:7d:ba:59:d6:9c:15:fd:3b:54:67:
ea:23:84:ed:d5:f1:5a:c1:52:1d:d6:6e:e8:74:6b:22:50:e0:
1b:c2:16:30:51:c4:66:ba:78:0e:0a:9a:c5:26:96:82:c1:50:
54:b7:ed:d1:45:91:d9:df:2a:07:16:c7:09:87:76:00:da:cb:
96:12:87:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:06:00 2026 by rpki-client