Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
File: 3KRrH82StH9PVfrQOMlYE0Cp03A.mft (raw, json)
Hash identifier: sFpMBP6nSX2PNABCcCzjajHX0anwDi7nNsmPHYGQobQ=
Subject key identifier: 01:C4:AB:42:5B:09:C5:7E:82:D8:C3:7F:40:DC:25:8C:BC:54:CC:C4
Authority key identifier: DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
Certificate issuer: /CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Certificate serial: 01A08942A2DC85D530D999C0524C957C7830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
Manifest number: 1A55
Signing time: Thu 10 Sep 2026 03:00:40 +0000
Manifest this update: Thu 10 Sep 2026 03:00:40 +0000
Manifest next update: Fri 11 Sep 2026 03:00:40 +0000
Files and hashes: 1: 3KRrH82StH9PVfrQOMlYE0Cp03A.crl (hash: yI7atTe5cm1m+cnIAwdWUdr7XYZiqNUmAF/Yn67O33Q=)
2: VfPqQIUYDVEcRMuY0y_1WkG7tNM.roa (hash: jXhdAhn6nzRP7djqjR0wEfaKlgEOeT24wYK6k5lvQMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:42:a2:dc:85:d5:30:d9:99:c0:52:4c:95:7c:78:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Validity
Not Before: Sep 10 03:00:40 2026 GMT
Not After : Sep 11 03:00:40 2026 GMT
Subject: CN=01c4ab425b09c57e82d8c37f40dc258cbc54ccc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f8:ad:5c:20:f9:36:49:64:27:7f:71:fa:aa:
05:d6:fc:88:9c:be:82:db:3c:17:34:2b:1d:e9:83:
db:97:0e:30:5f:2c:ed:d8:06:2b:b7:bf:1a:ec:aa:
cf:18:fd:6f:03:a9:02:bf:72:96:da:17:25:4f:3a:
3e:77:37:6f:c9:44:53:53:5e:ac:73:d9:cb:cb:cb:
45:aa:e7:20:9a:6e:a0:09:2e:5e:4c:ec:4f:64:c2:
45:ce:ea:33:bb:10:13:48:48:11:53:d1:37:77:c5:
d1:d0:90:3d:aa:f4:d6:09:f0:2e:29:e5:af:29:5e:
1a:fb:74:8e:4d:6c:6f:e0:cf:0a:01:d4:5a:3d:a4:
d0:24:39:52:6c:3d:97:4a:0b:c7:c2:56:b4:2c:43:
98:90:8d:9d:51:6e:6b:a0:0b:f6:ff:98:05:75:f6:
5f:3a:e5:ca:0a:46:38:76:c1:8a:f9:d4:23:65:51:
bb:a1:73:02:e0:4b:d5:a1:49:e3:ae:c8:b6:cf:b7:
65:77:50:d9:a4:20:86:15:04:77:71:13:a4:68:41:
dc:c1:f5:69:7e:45:dd:a1:be:bf:a3:bf:b9:a3:42:
3b:e2:6c:07:dc:26:ac:d6:72:b6:f1:41:93:37:f0:
d4:7f:28:92:51:0f:3f:e2:1f:bf:ea:8a:7a:bc:97:
da:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C4:AB:42:5B:09:C5:7E:82:D8:C3:7F:40:DC:25:8C:BC:54:CC:C4
X509v3 Authority Key Identifier:
keyid:DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:83:0b:94:07:58:ae:5c:63:37:40:c3:70:ce:3e:d0:da:d6:
35:3e:90:f9:ef:65:fa:08:78:4b:a6:62:ce:5d:1c:87:6c:57:
51:cd:a0:5e:22:c1:cf:07:09:a0:0e:33:a2:1b:94:94:4c:75:
64:04:e7:f2:d7:52:01:34:de:01:3f:4c:b6:b4:aa:93:ed:5d:
a5:44:b0:a3:d1:fd:13:4b:a6:c8:a7:51:d4:4b:22:8f:a3:42:
d1:86:1e:6b:36:00:2d:8b:91:a4:4d:02:b5:95:98:0e:d4:94:
03:9d:f7:93:8f:2a:b4:69:b6:ef:50:f6:75:c4:5f:af:7f:bb:
65:3d:1e:9b:9d:76:2c:d2:94:fb:82:24:48:8f:d4:92:ee:c5:
50:3f:e9:59:76:e1:6a:e8:34:10:e8:6e:99:cd:16:73:26:46:
76:fb:7e:c4:5a:f6:4e:ac:2d:b5:6e:4f:02:50:27:8c:c1:93:
62:cf:56:c5:3a:05:04:45:45:c9:23:5e:00:73:0f:ba:c3:09:
bc:d8:6b:37:e8:40:1f:6a:4d:ac:59:75:e8:2a:30:35:67:7d:
09:78:21:86:3c:02:6a:ec:42:df:2c:30:db:09:8f:5b:56:1e:
08:78:d4:da:24:7c:b5:0a:d9:e7:b2:e8:68:11:4e:45:1f:0e:
9a:03:03:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:59:59 2026 by rpki-client