Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
File: 3rGA3ccUMQPwLmnLnNoZwjleV6E.mft (raw, json)
Hash identifier: 9zC/bUodlGTuP8oE+HRDQhIOHtiRaj/i0as+hCp04bc=
Subject key identifier: B8:E7:39:34:BF:60:AC:B0:BA:E8:79:EE:41:12:57:98:B4:85:14:44
Authority key identifier: DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
Certificate issuer: /CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Certificate serial: 01A14127BD35F4BB31D5D74EDFA6CF0A2832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 20:01:25 +0000
Manifest this update: Thu 15 Oct 2026 20:01:25 +0000
Manifest next update: Fri 16 Oct 2026 20:01:25 +0000
Files and hashes: 1: 3rGA3ccUMQPwLmnLnNoZwjleV6E.crl (hash: VUYOMTqNddqt0u58r395wswn1r5O7GKZDKa86E6/Gks=)
2: 4Qc85N4EwfShTiGhUnkvPvcjOEs.roa (hash: 5gcG+cc/9htcQzQfIk5Lbs8J3j2mNNeVz49M8qI81nA=)
3: dHkvv2AfkDDcX-uBDSlHxgyE9BM.roa (hash: MkJGi0URj4efKyUrfGEHvlM7u0U0Wn9mOiKm3NgF9Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:27:bd:35:f4:bb:31:d5:d7:4e:df:a6:cf:0a:28:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Validity
Not Before: Oct 15 20:01:25 2026 GMT
Not After : Oct 16 20:01:25 2026 GMT
Subject: CN=b8e73934bf60acb0bae879ee41125798b4851444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:11:ab:ae:41:e1:b4:f8:fe:55:c4:0b:e0:21:
bf:c2:50:27:f5:36:55:c3:bc:d5:34:f4:65:13:8b:
34:97:e3:2e:43:b1:a9:ff:5d:56:29:4e:0d:bf:f9:
40:b6:d8:cb:9f:09:d4:6c:f4:4d:63:63:2b:16:75:
68:bf:62:b7:7a:31:ad:75:45:f5:d2:95:f8:4f:f5:
69:d1:fa:a7:8a:60:3d:7f:0e:3f:8a:50:43:2b:55:
8b:34:b2:94:af:13:ad:15:0e:2a:0e:2e:b0:20:43:
fe:d7:66:8c:15:c0:ae:a9:15:22:cf:c0:18:b8:61:
db:28:62:de:8a:c3:62:aa:30:71:db:73:96:a8:07:
d1:bf:b7:6d:9a:7c:0a:d7:d9:43:37:51:c2:81:b0:
6e:2a:10:b2:da:8a:f9:d7:1d:c4:15:eb:e8:95:b8:
05:2e:f4:a3:0b:33:0c:cb:8d:85:65:0a:88:4e:cb:
d9:b8:22:4e:1a:95:54:d4:be:35:cd:f3:a4:9c:be:
3a:39:27:ab:27:c2:7a:b4:5b:0d:d1:6b:a8:c9:41:
3c:ae:99:0f:45:2d:1c:c8:e1:af:4d:32:7b:f0:c3:
1e:9a:d1:e4:27:41:66:4a:ed:c8:55:28:d8:19:7f:
0f:af:59:c0:1a:1e:9a:d9:57:9c:80:97:8a:43:c5:
08:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E7:39:34:BF:60:AC:B0:BA:E8:79:EE:41:12:57:98:B4:85:14:44
X509v3 Authority Key Identifier:
keyid:DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:93:64:f3:56:5d:0c:06:90:c2:ac:93:4f:f9:e5:7b:c3:64:
44:c9:4c:3b:fb:65:96:45:2c:5e:9e:2b:da:25:c8:80:1c:ca:
e0:ce:f5:be:1b:1c:33:38:4d:10:96:9d:0f:a1:17:14:56:d7:
d0:c5:d4:83:4f:c1:34:be:a1:3d:41:31:c9:51:9b:fc:74:d2:
9a:91:95:23:59:85:fc:e7:c8:8c:09:51:91:98:2b:c4:03:0d:
45:78:6d:c4:e3:d6:7d:18:52:3a:12:e0:16:a9:1b:a3:02:8e:
d4:a8:d9:58:bf:87:0c:1b:5f:5b:cc:c8:75:c4:38:00:56:ad:
f7:c4:f2:cc:51:91:55:6b:4d:61:f5:66:5c:f8:14:c9:9c:0d:
42:b2:31:f0:a1:fa:d0:58:b6:87:da:17:97:c9:e8:20:28:95:
bd:00:b5:cf:ff:d7:fe:ac:97:28:dd:93:50:fa:63:c7:bf:80:
46:11:7d:d6:ca:a8:0e:87:bd:a3:22:44:1c:0f:f6:cf:ab:4e:
91:d4:07:da:30:d5:94:d8:20:42:6c:36:31:c9:de:c0:b9:79:
a9:e5:d9:43:1d:20:b0:2f:21:6a:56:21:ac:f3:6a:0a:05:53:
bf:17:fb:9b:b3:05:be:a7:1c:28:71:75:31:08:64:56:e7:de:
9f:1b:52:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 00:19:46 2026 by rpki-client