Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
File: 3hL5ZansM-LC6HthYb7vuL4obKM.mft (raw, json)
Hash identifier: uLVc8dboqSZDwUNELT0Xq5Uf42Zs7uuwIi5omGE2cxc=
Subject key identifier: E5:12:5D:BB:68:E8:38:15:3E:49:36:D2:B0:D2:2F:2E:7B:E3:4D:34
Authority key identifier: DE:12:F9:65:A9:EC:33:E2:C2:E8:7B:61:61:BE:EF:B8:BE:28:6C:A3
Certificate issuer: /CN=de12f965a9ec33e2c2e87b6161beefb8be286ca3
Certificate serial: 01A10F281D158C7B2299D2C8C400093C304D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
Manifest number: 18B0
Signing time: Tue 06 Oct 2026 03:00:49 +0000
Manifest this update: Tue 06 Oct 2026 03:00:49 +0000
Manifest next update: Wed 07 Oct 2026 03:00:49 +0000
Files and hashes: 1: 3hL5ZansM-LC6HthYb7vuL4obKM.crl (hash: nUfrVKPggkOod93jtCBDOjzNHxmbvpHs9DRe+P2hAhA=)
2: dQKWrb4274MA9TnUoPK0iLguRN8.roa (hash: iabYGi8dw6jC4+Zg8izYgwpn552JIuXwr1GRxu62hag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:28:1d:15:8c:7b:22:99:d2:c8:c4:00:09:3c:30:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de12f965a9ec33e2c2e87b6161beefb8be286ca3
Validity
Not Before: Oct 6 03:00:49 2026 GMT
Not After : Oct 7 03:00:49 2026 GMT
Subject: CN=e5125dbb68e838153e4936d2b0d22f2e7be34d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:dd:38:60:b0:c1:44:57:f3:39:6e:c2:9f:18:
3b:c6:02:bf:83:7d:97:99:fb:19:52:1e:88:44:f0:
75:38:95:0e:68:6d:73:e8:0c:b1:5f:35:91:61:fc:
01:7c:17:2e:da:e2:8d:ad:6f:c1:3c:b4:2a:fd:56:
d8:2f:6a:56:e8:35:b4:eb:3a:c9:54:99:d7:35:49:
b2:56:a5:70:2b:f2:bf:9a:24:59:ca:3b:4e:01:9d:
b8:a8:99:12:b7:c6:b7:d9:c1:66:93:ea:41:6f:46:
a5:a1:24:93:87:3d:a0:8d:fa:ca:f5:79:5e:81:51:
3d:1a:8a:6b:67:32:79:50:86:cb:12:30:0f:85:16:
9c:12:44:9c:6b:e2:ee:d1:6d:2d:07:ef:7a:7b:14:
50:1b:02:2a:c1:ba:e9:97:49:83:a1:e7:cd:c0:08:
b7:47:7b:b4:13:b2:37:c1:de:1c:4b:36:ab:c2:5b:
f2:cd:22:13:48:18:a0:49:4c:c4:03:83:72:b1:04:
89:68:2f:c6:65:a5:a3:dc:df:67:6e:d6:fd:c0:0e:
1e:39:c0:e7:e0:db:63:d7:57:63:a6:8e:70:88:7d:
d1:bc:0c:ee:0d:4a:e4:af:06:4e:de:9e:6a:78:ca:
80:2a:8e:d5:5b:33:23:cd:63:97:2c:6d:e5:53:43:
f2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:12:5D:BB:68:E8:38:15:3E:49:36:D2:B0:D2:2F:2E:7B:E3:4D:34
X509v3 Authority Key Identifier:
keyid:DE:12:F9:65:A9:EC:33:E2:C2:E8:7B:61:61:BE:EF:B8:BE:28:6C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d5:2c:c0:cd:ec:29:eb:36:c5:e0:26:ac:ba:c6:e3:0f:3a:
df:c2:33:18:90:f5:0c:0b:71:67:e0:ae:3b:ff:ac:f7:78:80:
24:30:0f:39:41:2c:1b:1a:86:29:cc:4f:2d:d2:ef:f2:b6:b6:
f8:51:c1:bb:81:c0:46:a3:c9:13:77:4b:18:85:37:45:fc:48:
39:bf:5a:28:e9:6d:69:be:71:bf:e0:4f:53:66:20:34:e7:c6:
52:28:89:74:aa:ed:cf:b9:f9:69:9b:d3:80:8a:0e:1a:d8:87:
30:51:19:ae:a5:69:02:9d:dc:df:ac:27:af:21:17:2e:18:b8:
f9:62:58:a0:3a:d0:be:a7:93:74:d3:f6:d7:19:71:84:88:d8:
38:98:ca:f0:63:06:25:64:ec:d9:b4:99:27:48:47:47:6e:c3:
47:2a:d1:ff:ef:0a:41:6e:7b:71:c3:d2:9f:a3:97:34:85:fc:
9e:f9:68:a0:c9:f6:6a:78:0c:22:43:f2:fe:81:b2:b4:2f:5a:
df:e2:53:2b:cf:be:72:f9:50:74:0e:b8:65:ae:67:d8:dc:49:
aa:a1:54:66:96:9f:82:34:27:60:16:0e:24:f6:05:88:1f:19:
9c:64:83:a8:6f:7e:a1:8f:ee:0e:f2:13:22:fc:e9:b5:fa:f2:
6c:67:bd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 07:43:54 2026 by rpki-client