Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
File: 3MpSIZb9CbrnOba9IyLl65DaT7k.mft (raw, json)
Hash identifier: bS7AFGGzyuWkjDDhNggmqIXgUoy4j2jQHqNbtBkVcuk=
Subject key identifier: 61:F0:30:DC:C6:5E:39:CC:24:A2:43:97:3C:B3:20:C7:3B:48:08:2A
Authority key identifier: DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
Certificate issuer: /CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Certificate serial: 01A14383FAC23DF01B2E5F6C239B4F107F47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
Manifest number: 1464
Signing time: Fri 16 Oct 2026 07:01:25 +0000
Manifest this update: Fri 16 Oct 2026 07:01:25 +0000
Manifest next update: Sat 17 Oct 2026 07:01:25 +0000
Files and hashes: 1: 3MpSIZb9CbrnOba9IyLl65DaT7k.crl (hash: b9zijtuNTp5aSF6bqjTvFV+yN06JSKEmkhjF0q98sug=)
2: cIxKBh6oU9S_NcB8Ln8qgQPRqMc.roa (hash: qT7a6QcaDtE4QIrrmB5EqTQOJdhXraa8fLtpECGlH+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:83:fa:c2:3d:f0:1b:2e:5f:6c:23:9b:4f:10:7f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Validity
Not Before: Oct 16 07:01:25 2026 GMT
Not After : Oct 17 07:01:25 2026 GMT
Subject: CN=61f030dcc65e39cc24a243973cb320c73b48082a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:32:4f:8b:d0:31:77:c8:e2:e7:05:05:c3:c4:
9e:d8:d6:0d:19:5b:a9:f1:85:96:01:50:79:aa:94:
c4:d0:d0:6b:94:f9:7e:42:57:1e:40:44:7d:01:c0:
29:dc:1e:ee:49:60:c2:65:4f:07:6c:5c:54:e9:b5:
28:01:b8:e5:12:05:5f:30:ad:ef:42:bb:6e:ed:ab:
72:09:92:35:91:51:78:67:32:c9:84:47:c3:44:bc:
08:e1:5e:d4:37:fb:cf:0c:91:e2:63:98:9a:14:fc:
e6:42:97:9a:ad:6d:ed:c1:11:db:99:9a:b4:d3:13:
a7:65:be:56:bb:29:0e:7f:96:39:ca:f1:7d:55:8f:
81:37:69:c5:12:6f:c9:c6:52:78:33:ca:bb:87:de:
e7:0d:ff:7d:52:04:f0:03:61:33:f7:10:0c:a4:0b:
7c:c9:fe:19:d2:8e:28:27:c2:d5:96:18:58:57:bb:
77:d6:02:7d:8b:1e:33:52:15:c9:f4:59:8a:2a:72:
a8:b3:29:41:b2:7b:80:6e:f3:ff:62:73:29:da:84:
fd:8d:c8:c3:9f:2d:35:41:d1:f8:19:44:87:80:18:
4b:99:f6:d1:be:36:7d:60:fb:bd:77:08:77:cf:d7:
60:d9:8d:f1:39:f0:49:6d:75:1e:5a:23:c0:bb:75:
bc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F0:30:DC:C6:5E:39:CC:24:A2:43:97:3C:B3:20:C7:3B:48:08:2A
X509v3 Authority Key Identifier:
keyid:DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:0d:c8:15:79:0f:6f:af:75:45:71:1d:4e:5b:cb:aa:05:0b:
09:a6:4e:5c:d9:35:ef:85:6e:d8:8d:91:ac:c0:7a:59:bd:ca:
22:15:9c:0f:5d:1d:56:30:8a:99:8d:54:f7:53:4e:77:f2:a6:
a6:2a:6d:c2:ae:b3:8e:8d:46:45:72:53:9a:fc:4a:dc:12:a1:
12:3f:6a:f3:63:a2:f0:2b:41:55:34:ca:92:cb:da:85:e2:2f:
dc:75:a5:49:2a:f7:51:95:aa:5d:ff:08:5b:c0:68:26:c6:63:
50:cd:d3:32:69:2e:78:10:bd:9f:79:f2:fe:23:2f:10:aa:28:
67:62:ce:22:1b:34:c5:cc:f9:7e:12:31:2a:5b:09:ce:d4:a5:
b0:b6:f7:95:ba:a8:53:4c:c5:87:3e:63:4f:a7:83:96:f1:1c:
73:0e:c1:6d:43:c9:61:75:ea:d0:27:a5:3e:16:05:0a:5d:d5:
5e:f3:32:80:56:23:c2:d5:b8:8a:eb:d2:14:be:5c:96:71:a5:
eb:03:4e:e2:77:92:88:1a:4f:65:e0:61:93:e6:3b:c3:50:6a:
28:75:28:2c:08:d9:b4:b1:02:aa:a7:2f:ba:de:57:63:1d:49:
a4:93:0f:90:60:78:d6:36:39:0c:d0:6d:fb:b5:3a:23:6b:53:
63:e3:4d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 16:39:54 2026 by rpki-client