Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
File: 3mPrYxm6RU05dkWUXOVDlXb6x0E.mft (raw, json)
Hash identifier: 8CHA4yY496WEJru4ZMpke+36axMstRPosw1pADzAQu4=
Subject key identifier: 4A:5A:60:24:68:C7:31:00:6E:64:3E:9B:F9:B3:69:45:9D:43:3D:06
Authority key identifier: DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
Certificate issuer: /CN=de63eb6319ba454d397645945ce5439576fac741
Certificate serial: 01A11003CD0459862DD8C4F04C69BB4858D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
Manifest number: 1A8D
Signing time: Tue 06 Oct 2026 07:00:46 +0000
Manifest this update: Tue 06 Oct 2026 07:00:46 +0000
Manifest next update: Wed 07 Oct 2026 07:00:46 +0000
Files and hashes: 1: 3mPrYxm6RU05dkWUXOVDlXb6x0E.crl (hash: 5A2Acgc6RJZGX9bF5aAboSI6nJFrjsBeC1sNE/R5SV0=)
2: 3ostfnsnfixfxEqrfywy9eGNnT0.roa (hash: TMH3qMKKkwZR6QRgNjTjxS5fjcdU4kA+Vz+Hy9Lz73k=)
3: d2YSIWOU5vk9kBcZoNOEBYoB5d8.roa (hash: 7IimrnEh+R6l+Oc9i2fjThrQzcZAJGrkh3OgCSJFbow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:03:cd:04:59:86:2d:d8:c4:f0:4c:69:bb:48:58:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de63eb6319ba454d397645945ce5439576fac741
Validity
Not Before: Oct 6 07:00:46 2026 GMT
Not After : Oct 7 07:00:46 2026 GMT
Subject: CN=4a5a602468c731006e643e9bf9b369459d433d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c0:e6:3e:b2:0e:e3:11:0e:c3:58:9f:cb:11:
73:75:c4:6b:1c:b5:66:94:cf:a5:06:18:3c:54:23:
8a:1e:db:4c:be:22:74:40:3e:88:a4:62:65:db:29:
98:f4:e2:d2:9a:eb:fd:ee:e1:b2:89:7e:4d:d8:87:
41:d5:73:d8:9d:0e:e9:3c:cf:0f:84:3f:aa:d2:6c:
2b:6d:e5:eb:12:e4:e8:c3:e2:d7:4c:74:ff:e5:dc:
54:63:49:fe:1a:b0:e5:52:2e:71:bd:7b:c4:82:a0:
c2:08:cf:a4:d6:f4:53:59:83:5c:fa:c2:ad:47:9a:
0f:ff:2b:48:a3:df:05:55:db:f6:e0:4e:a5:b3:19:
c1:e0:fd:08:a8:f7:8b:33:f0:4b:3a:64:5c:b1:43:
bf:b4:d4:b8:cb:52:ef:37:97:c5:9c:56:6f:5a:23:
d3:75:da:9e:66:b1:e0:7d:ec:a1:ac:2d:79:25:1b:
40:8c:69:e0:fd:26:57:1b:a4:8c:83:86:a8:78:24:
2d:70:02:2c:9c:bf:4c:9d:d9:54:0b:71:3c:2f:ac:
16:a0:b3:87:2e:31:4d:c5:f4:0d:be:9e:58:35:79:
38:32:d8:64:30:de:65:ea:27:29:42:4f:e5:4c:a4:
0e:f3:3b:1d:44:9c:69:6b:49:9c:ba:5e:24:54:35:
55:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5A:60:24:68:C7:31:00:6E:64:3E:9B:F9:B3:69:45:9D:43:3D:06
X509v3 Authority Key Identifier:
keyid:DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:11:45:c1:62:c3:ad:1d:04:0b:41:bb:f6:47:d1:4c:43:eb:
d9:a0:31:08:74:b9:49:49:c2:9c:3d:7e:57:9f:6e:de:a2:a2:
dd:1c:c5:40:86:01:e6:a2:6c:3a:8a:1e:22:85:1d:34:e5:6e:
23:79:c3:75:d5:97:59:87:f8:d1:4b:61:00:f5:09:da:27:64:
16:13:7d:1e:2d:15:33:73:c2:61:04:19:87:cf:fb:e9:96:e9:
c3:c5:94:e1:51:d3:ca:97:92:47:29:82:d8:20:a7:0f:7b:a5:
ce:19:91:68:67:81:45:b5:4b:78:04:bc:5c:41:0a:57:e4:6c:
47:05:81:97:78:7a:e6:eb:39:1d:f6:9e:ed:32:a7:a8:3b:02:
9e:81:2e:e5:c2:7b:75:f0:73:ba:c2:12:d9:7e:12:52:c9:2b:
9f:57:15:92:6d:0e:6c:b6:0d:b3:fb:3a:4f:32:07:bf:51:98:
3f:54:94:83:88:dd:a1:ef:52:18:d7:d0:be:76:e7:e6:c0:86:
25:90:c3:f4:fa:49:a0:08:30:84:55:99:c1:85:12:b1:ef:83:
ce:e2:34:f0:1d:b1:66:d3:37:de:9c:2a:ce:ee:d4:0c:34:69:
a4:9a:b5:36:d9:69:9a:c6:44:b2:7e:00:d8:d5:67:53:08:65:
f9:95:bb:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 10:15:11 2026 by rpki-client