Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
File: 3ucsj67LcFLIQSAbJfagGOR3scI.mft (raw, json)
Hash identifier: SK45NQvZW63Asa33jWKICsIwlMf9a0eBydEmZFU6K6A=
Subject key identifier: 87:71:BC:63:79:4E:76:DE:6D:93:1E:6D:43:56:68:0B:D4:7C:2B:29
Authority key identifier: DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
Certificate issuer: /CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Certificate serial: 01A13D12F10C9F930BADA3B99969221BBF0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
Manifest number: 1132
Signing time: Thu 15 Oct 2026 01:00:13 +0000
Manifest this update: Thu 15 Oct 2026 01:00:13 +0000
Manifest next update: Fri 16 Oct 2026 01:00:13 +0000
Files and hashes: 1: 3ucsj67LcFLIQSAbJfagGOR3scI.crl (hash: nXBuOTzbvIabDffpgO3Kszqqq4RehfxUPGXDAKV3ECo=)
2: ApGR2Q6UiBOTln3YEs6ePXPQ8lQ.roa (hash: lyxkrW/UqVG023E4rkiQmolfszYoshoVE4T/qdnjtKM=)
3: Fsb5HdL7NcO_faI7SYpSwT3IZj0.roa (hash: Dq+bYU+W7cSYjUMeWCs5QEHpiuPHvRD8GOeB0Afw45M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:12:f1:0c:9f:93:0b:ad:a3:b9:99:69:22:1b:bf:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Validity
Not Before: Oct 15 01:00:13 2026 GMT
Not After : Oct 16 01:00:13 2026 GMT
Subject: CN=8771bc63794e76de6d931e6d4356680bd47c2b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d9:3b:9a:28:09:70:07:8e:d8:8f:4d:28:17:
39:8a:e0:2e:93:63:9a:3d:71:42:78:ca:a3:26:e7:
fc:fd:05:d6:d0:10:de:c2:78:c7:5d:e4:13:f2:1f:
15:9a:bd:66:b3:a3:1b:3f:15:17:68:92:d3:83:98:
e9:15:70:b5:15:f8:d8:66:29:6b:d1:e2:60:6f:93:
10:a4:11:9c:ed:21:fd:4d:75:a4:af:b2:38:4d:c5:
80:67:45:6c:23:c8:27:1f:04:02:00:f9:6b:3f:d7:
24:64:1e:07:d2:14:1f:46:77:f9:a1:d2:8e:f8:f6:
11:7b:0f:c7:dd:9c:93:68:7b:c9:76:47:e2:c2:28:
1f:b9:ac:71:81:44:11:e0:57:6a:97:91:a5:2e:df:
e3:b4:a3:e8:ff:b3:dd:46:99:2f:e0:1c:3b:2b:fa:
a7:4e:27:71:a5:73:1a:cd:fe:ca:7a:45:6d:4f:a5:
9d:c2:72:60:a3:6d:de:a1:8d:c7:9d:d0:09:58:a6:
9a:3a:41:8a:09:bf:e8:86:fe:06:be:67:c0:ae:d4:
f7:96:94:42:44:86:56:6f:2e:5c:73:51:fb:15:0e:
bc:03:32:2f:7c:55:bc:39:d9:06:3f:26:af:50:1d:
c8:cd:d9:32:93:9c:82:3c:83:e4:0d:88:17:95:bc:
ca:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:71:BC:63:79:4E:76:DE:6D:93:1E:6D:43:56:68:0B:D4:7C:2B:29
X509v3 Authority Key Identifier:
keyid:DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:15:a2:50:8a:45:b5:67:a4:1b:89:cc:04:a2:3a:4d:bf:65:
d9:c9:08:57:9f:db:6d:f3:c7:7a:f8:08:ee:e5:34:e1:a5:92:
92:7e:65:06:df:99:08:b8:8c:a7:af:32:ac:ff:f3:d9:62:f0:
8e:6b:88:f8:b8:b1:14:48:b5:d0:41:97:8d:66:2a:8c:a7:13:
a3:fb:d4:d4:6a:ff:8b:a8:87:ea:dd:43:bb:aa:67:92:13:af:
0f:4e:18:ec:e5:bb:84:e7:56:fb:9c:56:b9:67:26:65:16:73:
eb:8b:3b:c4:01:83:c2:83:cc:e6:99:6c:12:4f:b1:d6:6a:4e:
09:e7:d5:88:f0:c8:c2:f1:66:c0:31:c7:56:59:30:9e:cb:4f:
af:e6:33:b8:83:ae:23:a8:62:6e:fc:9d:6d:4a:a3:f6:9c:53:
83:47:55:2c:b4:69:a9:68:c6:9c:78:f5:a1:82:b8:8b:4a:2b:
ed:66:f5:61:05:ab:b9:42:9b:d6:04:c4:32:01:e8:ed:b4:b9:
32:0b:20:75:19:6a:29:70:1f:76:2d:19:eb:03:c1:48:a4:fe:
01:e4:50:51:d4:44:1d:00:67:58:eb:dd:4c:bc:0f:e9:59:c7:
2b:f3:58:f2:4f:a4:48:ee:9e:d7:47:a9:94:3d:29:0c:9f:44:
58:b7:9e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:08:04 2026 by rpki-client