Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
File: 3mPrYxm6RU05dkWUXOVDlXb6x0E.mft (raw, json)
Hash identifier: 5lOtI9QIqr5MyuNEtjlYyf6Jvoc56YJWIax1y6KnD1w=
Subject key identifier: C9:ED:6E:CE:EA:DB:B4:27:27:65:1D:1D:92:1C:CD:2B:2F:BC:2C:CA
Authority key identifier: DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
Certificate issuer: /CN=de63eb6319ba454d397645945ce5439576fac741
Certificate serial: 01A1046E48C05F18D4340848B673B0D580FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
Manifest number: 1A87
Signing time: Sun 04 Oct 2026 01:01:38 +0000
Manifest this update: Sun 04 Oct 2026 01:01:38 +0000
Manifest next update: Mon 05 Oct 2026 01:01:38 +0000
Files and hashes: 1: 3mPrYxm6RU05dkWUXOVDlXb6x0E.crl (hash: cpUNHjxAtyhojRV1B0caH2oiPj7UkAra2Dscdbxw1vU=)
2: 3ostfnsnfixfxEqrfywy9eGNnT0.roa (hash: TMH3qMKKkwZR6QRgNjTjxS5fjcdU4kA+Vz+Hy9Lz73k=)
3: d2YSIWOU5vk9kBcZoNOEBYoB5d8.roa (hash: 7IimrnEh+R6l+Oc9i2fjThrQzcZAJGrkh3OgCSJFbow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:6e:48:c0:5f:18:d4:34:08:48:b6:73:b0:d5:80:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de63eb6319ba454d397645945ce5439576fac741
Validity
Not Before: Oct 4 01:01:38 2026 GMT
Not After : Oct 5 01:01:38 2026 GMT
Subject: CN=c9ed6eceeadbb42727651d1d921ccd2b2fbc2cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4f:a2:91:88:b2:10:d6:9f:22:2e:d0:07:f8:
02:49:4c:6e:42:39:45:a4:c1:98:7f:20:ec:f0:39:
05:a4:68:7c:ce:8a:0e:66:f8:15:eb:b9:14:42:69:
13:ed:80:1a:6e:31:cf:eb:d1:29:e6:53:1d:08:40:
a9:05:82:54:f4:d7:28:64:67:38:7f:0e:ee:09:af:
06:92:a7:48:1a:cb:a2:2a:4f:d7:3d:7f:ee:c1:06:
ed:28:49:76:1c:dc:e5:52:e3:8c:ac:8a:23:04:3d:
54:9f:01:d2:6f:28:65:3d:01:66:0e:bd:cc:6a:e5:
5d:79:32:e9:ea:ed:9a:c3:1d:f3:84:55:f2:8b:16:
e8:73:51:db:77:1d:02:ef:8a:40:0e:09:28:3a:a9:
8d:72:b8:c5:a8:69:62:b3:f6:1d:1a:1d:36:15:62:
38:a6:6f:55:e1:ea:6f:9a:7f:f4:9b:69:d0:98:af:
35:82:cd:1d:d7:c3:82:3d:dd:55:5c:4a:1c:89:d1:
e8:d9:5f:98:14:7e:03:a3:24:ce:a0:01:1f:21:bc:
5c:a8:66:6c:c7:5b:37:22:67:ab:ea:5c:04:6c:06:
d7:08:78:c0:c1:af:dc:b8:c4:89:de:b9:28:03:01:
70:e9:3e:c9:7a:91:2a:fd:aa:ac:78:85:99:73:56:
69:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:ED:6E:CE:EA:DB:B4:27:27:65:1D:1D:92:1C:CD:2B:2F:BC:2C:CA
X509v3 Authority Key Identifier:
keyid:DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:dc:80:fc:72:74:23:91:24:bb:09:28:87:ce:af:02:0f:dd:
fd:63:98:6a:ff:74:db:7b:86:6f:fa:39:b9:7b:a8:b3:f4:58:
43:b0:43:8b:88:97:52:b9:21:c8:93:ec:ea:f0:dd:9d:fc:1c:
d8:6c:97:fa:8d:dc:c5:44:86:8d:93:65:48:a1:70:1e:f3:74:
f4:da:68:10:1b:b0:55:a5:a5:4d:a6:b5:e2:26:c0:75:04:1c:
f9:03:6c:51:cf:30:2b:14:55:0c:2c:eb:e5:21:e2:fd:a6:2f:
91:fe:56:cd:c8:3f:40:6c:c9:5e:bd:51:ac:58:8e:3f:61:c7:
cb:98:89:12:96:54:16:4b:d5:43:57:29:e7:36:66:a0:1d:1f:
76:19:46:cf:cd:8b:ad:10:d3:c7:9d:20:f7:19:00:e2:55:87:
1d:ae:29:19:4b:bf:8a:31:70:ec:85:c1:cd:83:2d:98:43:67:
eb:93:3a:92:7b:75:ac:16:ff:0e:92:6c:d0:27:0e:5d:bc:8e:
77:bc:01:be:69:6b:c4:c5:db:80:34:f4:60:f6:8d:72:20:06:
33:88:70:d2:5a:0e:e7:3c:04:39:90:8d:cf:6e:58:63:bc:32:
6a:73:c7:98:c3:3e:03:11:6b:a2:75:d2:d6:4e:93:39:b4:4c:
d0:2f:67:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:36:38 2026 by rpki-client