Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
File: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft (raw, json)
Hash identifier: Jiv933VMo4ncOmBM5buZuKMJ9ZsV9Rzwh29gqZOLOfQ=
Subject key identifier: A1:88:88:63:50:EE:06:25:7C:AD:1C:51:97:94:83:A0:EB:36:B7:B9
Authority key identifier: FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
Certificate issuer: /CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Certificate serial: 01A154AE3F7ADECEB8F95A86FEC3445F0E3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
Manifest number: 1AB1
Signing time: Mon 19 Oct 2026 15:01:07 +0000
Manifest this update: Mon 19 Oct 2026 15:01:07 +0000
Manifest next update: Tue 20 Oct 2026 15:01:07 +0000
Files and hashes: 1: _3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl (hash: +GRhGQpWdcjCzabqhqhYymYHwtI7mbFKn6vWxT1/aCg=)
2: q2os6H-xLvk9UkRKuFy2kFXrSyk.roa (hash: PRxebSo24ZxSHOEyZVv7K175GUR0r91e11qM7IDM3bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:ae:3f:7a:de:ce:b8:f9:5a:86:fe:c3:44:5f:0e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7276c4d8cfafc04c26f85fb34fd9ece4769695
Validity
Not Before: Oct 19 15:01:07 2026 GMT
Not After : Oct 20 15:01:07 2026 GMT
Subject: CN=a188886350ee06257cad1c51979483a0eb36b7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cc:92:1b:9f:83:10:0b:58:5d:1c:4a:3b:17:
6c:24:3d:90:ec:5d:b3:9b:b1:64:86:36:d9:6d:02:
37:d7:cd:23:c1:32:a9:60:a2:09:4d:06:66:8d:19:
6f:b7:b7:56:98:60:fd:60:0a:f3:3e:68:1c:5b:4f:
15:0c:bf:4c:cc:f8:4a:6b:1a:78:23:ae:85:3f:db:
a6:9f:b3:e3:00:bb:51:e2:31:47:0a:07:2a:7b:c9:
ef:f3:b1:f8:98:ca:d0:7a:e3:f0:2d:81:c5:a2:57:
a4:47:af:b0:e2:9f:f1:21:a0:5b:b7:b0:24:2f:f6:
c9:21:8a:bb:68:8f:16:98:46:33:aa:24:b4:7b:1e:
7b:9a:9d:c6:97:d9:6a:3c:67:fd:4a:b6:48:78:ff:
02:87:04:75:7c:66:f7:96:a8:23:45:fc:ee:79:d2:
87:81:14:10:02:42:ab:2a:aa:38:6f:97:4c:4c:0d:
03:9c:2f:8a:0f:1c:3f:7d:56:c0:d8:b6:c0:ab:45:
27:c8:ea:66:4d:60:b6:c1:1a:40:c6:b4:90:48:6a:
b6:75:41:64:97:e6:05:a0:f2:b2:0b:21:e9:a8:9f:
d4:10:87:7f:32:0f:66:08:fd:06:0a:e0:aa:92:54:
f8:b8:f1:37:3c:44:dc:89:e4:5a:d9:ca:d1:31:f9:
4a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:88:88:63:50:EE:06:25:7C:AD:1C:51:97:94:83:A0:EB:36:B7:B9
X509v3 Authority Key Identifier:
keyid:FF:72:76:C4:D8:CF:AF:C0:4C:26:F8:5F:B3:4F:D9:EC:E4:76:96:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9df811-07dc-4fdf-9118-77fd4d1e5b26/1/_3J2xNjPr8BMJvhfs0_Z7OR2lpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:cc:c1:33:bf:44:be:32:6d:6b:b1:70:34:ca:c6:2f:d3:11:
a2:26:71:b5:1f:5e:f2:f3:db:96:38:c6:61:a5:b9:00:06:b6:
ad:44:91:cd:a1:41:d7:d4:1c:6a:70:c8:4d:3c:94:4d:65:1d:
9c:ad:8c:3a:67:53:31:ad:78:d9:29:66:00:19:b5:ad:69:8b:
10:c7:27:64:7e:79:da:2d:6b:87:1a:cd:3c:bf:80:b9:3a:89:
81:1b:8f:11:34:f1:e8:e7:06:42:81:08:7d:a1:6c:2a:fa:07:
01:b9:95:41:90:d2:6b:9b:34:da:97:9a:b8:fe:3e:1b:36:d2:
38:9d:ef:fd:76:6f:83:fa:17:c2:78:15:00:f9:fa:b2:29:61:
cc:20:93:38:3d:3c:54:24:de:c1:80:2d:53:6d:60:e8:38:8f:
e8:64:05:48:f7:6d:9b:4c:59:13:4c:74:cb:6e:41:f5:04:b0:
bf:4b:47:cf:ae:6d:0c:02:d1:fb:95:a7:c9:e2:26:fc:ee:f3:
a4:df:26:1d:0a:83:1f:e2:b1:42:ee:6c:44:ce:fe:ea:7f:a1:
bf:ac:1f:f5:09:80:66:7f:b7:97:2d:e9:42:3c:29:b5:df:db:
c6:44:5f:d0:9a:e1:86:b0:4a:37:0c:69:4e:80:c2:84:cc:08:
b7:7d:79:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:49:22 2026 by rpki-client