Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
File: CioVfwBRX5W2313A1S6xtdQ_3lw.mft (raw, json)
Hash identifier: WPgp22LNIPmIC8gkTT4n8TYOLj2Zuoj9Lz9A+qFgEsU=
Subject key identifier: FF:38:C5:57:42:E1:6A:3E:1A:CC:0D:1D:0F:A8:2E:94:0D:0A:68:DF
Authority key identifier: 0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
Certificate issuer: /CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Certificate serial: 01A17BF2DD0F6710DE40954D9FE6B197603B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
Manifest number: 1AC5
Signing time: Tue 27 Oct 2026 06:01:16 +0000
Manifest this update: Tue 27 Oct 2026 06:01:16 +0000
Manifest next update: Wed 28 Oct 2026 06:01:16 +0000
Files and hashes: 1: CioVfwBRX5W2313A1S6xtdQ_3lw.crl (hash: KbkAPAIX0fWnRRbzn74SLkKOFaAcls571I4a5VfXWCE=)
2: I3QKFov--NDtK49UPqV2RMA_ZSs.roa (hash: 5bH+Qg+gTHLwp5S4Kx2BVafx6XVTZnjE39jOohvcHdQ=)
3: MBJPYxkAOcW1F6D2SL1xMktlG_A.roa (hash: lfZx53j9T3wjHhtSwYTcY7ffXbrGGrP1inOw3mF8gos=)
4: hIqaiOfCzEuXfyoBoPXaNZBAmIw.roa (hash: N4vg7wjfDW7RaNgDgkEg1fBaeHhbzyqHR6RmAbyMqac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:dd:0f:67:10:de:40:95:4d:9f:e6:b1:97:60:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Validity
Not Before: Oct 27 06:01:16 2026 GMT
Not After : Oct 28 06:01:16 2026 GMT
Subject: CN=ff38c55742e16a3e1acc0d1d0fa82e940d0a68df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ce:4f:ef:46:35:d7:74:d3:b7:4b:69:5a:d3:
44:a3:99:4c:17:4b:5b:68:03:6c:2c:35:80:ee:17:
b7:0f:51:65:da:41:9b:29:14:c1:2c:06:09:4b:f5:
b2:ee:2d:70:19:e9:2a:09:ba:b5:5a:42:76:81:cb:
a6:31:c1:7a:07:9a:c3:2f:8d:38:5a:e7:bb:97:e9:
95:ff:e4:f7:d6:4f:ad:1f:30:51:54:14:09:b4:8c:
22:1c:16:a4:c7:50:65:b8:1a:91:24:d3:0b:bd:9d:
e0:37:3a:71:1b:5e:44:7b:72:ba:fe:b0:c9:c2:c2:
74:38:19:8a:f3:97:ed:66:23:6a:7d:49:11:12:42:
52:d4:00:0f:30:91:88:27:f8:c0:07:40:41:d3:e3:
7f:e2:8d:91:61:e3:88:86:53:cf:6f:08:ba:7c:7a:
2c:9d:a3:60:91:c7:4c:79:ae:4a:07:bf:37:0e:66:
8e:83:56:02:69:8a:bb:ab:b1:ae:75:9b:c4:35:58:
15:5d:11:11:02:5a:bc:83:af:e9:5a:09:3b:ef:25:
5b:3b:fd:15:a8:86:92:d9:c5:02:55:1f:48:c9:0f:
9d:89:e7:ae:e8:ff:a8:43:0b:bd:0d:f3:da:48:34:
55:2b:7d:88:05:8f:09:64:3b:2b:d2:a1:ad:7f:f6:
10:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:38:C5:57:42:E1:6A:3E:1A:CC:0D:1D:0F:A8:2E:94:0D:0A:68:DF
X509v3 Authority Key Identifier:
keyid:0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:cc:4d:73:02:c9:32:16:2e:b2:40:19:54:59:ec:b6:25:97:
56:f6:1c:9a:0b:87:f8:d9:81:fd:2a:d5:0c:82:77:cd:86:ca:
d3:0c:5b:db:ae:6e:9b:31:1c:5c:8b:df:8b:26:c6:f3:2b:4c:
d4:08:ba:9c:a5:dc:64:48:3e:5f:31:49:40:62:d7:76:b9:16:
95:4a:24:52:11:fd:44:55:5d:51:a6:f8:18:0e:df:c6:ad:23:
e1:a1:62:84:1c:5a:a6:1e:24:bc:50:e3:37:9f:16:dd:c8:eb:
4a:7c:f6:b9:ac:65:4e:55:80:33:5f:ed:5a:0e:aa:ba:c9:13:
b2:03:d4:b2:52:30:69:b1:d2:3d:e1:7e:f3:0f:f6:e0:9d:0e:
05:91:47:77:2e:45:6a:6f:28:dd:d8:ce:e8:0f:fa:ec:cf:c5:
ab:2e:df:fe:4c:0e:7c:f8:29:a0:8a:35:7a:06:e3:78:fb:1e:
ce:99:73:74:c5:4b:28:0f:cc:37:5b:21:f8:af:cc:67:b3:41:
59:9c:ec:df:06:82:fe:ff:1b:58:50:0b:0a:76:26:ab:4d:f9:
b6:d2:ac:01:2f:16:ce:5d:d7:3e:cf:5b:95:be:6f:b4:1e:fd:
2c:24:e6:43:be:a3:bd:61:88:b8:9d:7d:0f:31:92:ef:13:42:
e7:f4:d9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:18:32 2026 by rpki-client