Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
File: 3HALlumnoPnbib9eGBFbEqPvFpI.mft (raw, json)
Hash identifier: mTPXeyy5THUeiZvpXRxfjEL7WHofGW1UGKYMIAUqlKg=
Subject key identifier: 08:76:B6:E5:0E:84:74:3E:13:30:90:2B:EB:C3:AE:1F:BD:DF:EB:12
Authority key identifier: DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
Certificate issuer: /CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Certificate serial: 01A13D81646E40978D713FC5FC6EF0BA27BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 03:00:52 +0000
Manifest this update: Thu 15 Oct 2026 03:00:52 +0000
Manifest next update: Fri 16 Oct 2026 03:00:52 +0000
Files and hashes: 1: 3HALlumnoPnbib9eGBFbEqPvFpI.crl (hash: FQpJs/U3hprTZOpGUhpHuq6XryNsfxYP78FRnAms8TA=)
2: 9yUNTQu4D8dEJY0vZu2yaAiRefU.roa (hash: lrso5MYVylYk+QUiDaPruFaOoSE7UzGRAVXufFOfA74=)
3: jnbS6eM3y8l2eIAi24P02_6sYnE.roa (hash: oehLYvqq0N9O64TqK28Nu+Air9RUEnLzPzRmB5KAv7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:81:64:6e:40:97:8d:71:3f:c5:fc:6e:f0:ba:27:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Validity
Not Before: Oct 15 03:00:52 2026 GMT
Not After : Oct 16 03:00:52 2026 GMT
Subject: CN=0876b6e50e84743e1330902bebc3ae1fbddfeb12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bd:f2:a5:d7:e6:62:89:28:12:88:72:ef:ee:
59:7b:fa:8e:56:d2:61:f0:10:11:b9:fe:f9:55:e2:
94:85:00:10:bb:e4:b0:30:a2:c5:50:3e:f9:43:20:
cd:df:51:07:bd:8c:82:67:28:e1:b9:9c:5f:f9:cd:
94:d3:1a:94:b2:91:bd:4c:9b:5c:79:26:0a:4c:27:
2b:c8:18:c9:11:48:90:cb:78:6e:00:f9:6b:6a:74:
f2:97:6e:5f:c0:29:4f:0d:86:fb:9d:0a:ce:63:7c:
9c:81:95:ef:89:3b:fa:d6:22:f7:64:64:a1:59:e1:
b2:8f:21:a6:ba:1d:4d:bb:72:3d:9f:98:62:34:d2:
ca:3b:68:2d:15:1a:64:61:a7:09:7b:a1:b3:9d:a5:
45:a4:e2:39:21:2f:66:f2:f8:0d:7e:a6:ea:07:af:
87:8a:31:9e:58:74:7a:c6:1b:76:94:78:ab:25:55:
4a:ea:69:1e:eb:d7:21:cb:83:29:44:32:0d:e1:d8:
1f:db:f8:c8:ac:68:92:69:30:f7:54:d9:84:2a:ce:
b8:11:23:94:3b:0a:7d:fa:04:20:78:77:9a:72:ed:
aa:55:48:18:5f:01:bf:e9:aa:99:86:00:06:3e:d8:
3f:2b:45:52:0d:f5:31:ba:36:20:da:91:66:70:06:
6b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:76:B6:E5:0E:84:74:3E:13:30:90:2B:EB:C3:AE:1F:BD:DF:EB:12
X509v3 Authority Key Identifier:
keyid:DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:09:d1:af:30:67:35:3d:7f:00:df:57:b9:50:5e:88:4e:10:
4c:ad:ee:36:ee:a4:12:f5:cb:db:73:06:a8:89:a0:53:80:85:
42:ab:34:6b:08:0e:dc:e8:99:1b:bd:51:ac:46:40:4d:66:bb:
e9:8e:10:29:40:7c:0b:52:07:f2:77:5b:ff:96:5d:a2:0b:0a:
78:f1:95:73:ed:96:a8:31:4a:6f:c1:8e:ec:f3:1b:2f:86:39:
07:16:52:31:54:71:13:37:1f:2c:7b:ad:63:65:be:91:ba:b8:
c4:39:56:cb:53:a5:70:c2:44:b2:fb:5d:84:b5:56:e3:ec:c6:
05:72:b9:cb:8b:b5:d9:9f:9b:f1:97:48:bc:d5:ff:81:cb:ec:
65:33:10:53:52:21:4c:9a:84:92:a5:7e:b6:5e:7d:5a:81:79:
77:15:46:3f:99:fc:e0:0c:66:ce:a0:8d:cf:ba:a2:1e:19:7f:
28:a3:35:2e:51:b9:50:eb:ef:7f:98:5e:d5:ab:e8:6d:77:7b:
dc:ac:b6:6b:86:a4:6d:43:9a:5d:8b:0f:c1:01:0c:71:ea:11:
c9:68:bb:fe:eb:18:a8:03:fa:0a:75:bb:9d:94:22:c4:6b:9a:
c0:ac:3c:5a:86:ab:c9:4e:bd:84:67:63:e1:ea:10:50:7e:5d:
6b:67:b2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:58 2026 by rpki-client