Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
File: 3ucsj67LcFLIQSAbJfagGOR3scI.mft (raw, json)
Hash identifier: FGxRPlFnRWI7RMmYd8An2+ye5m9sL4AQM1AFrtUk3Gw=
Subject key identifier: 8A:56:24:9F:12:88:AA:36:9C:58:BE:F4:96:5C:71:E3:B7:3A:23:BC
Authority key identifier: DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
Certificate issuer: /CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Certificate serial: 01A0005D2E7972A99F1064D521E6533BB019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
Manifest number: 108E
Signing time: Fri 14 Aug 2026 13:01:41 +0000
Manifest this update: Fri 14 Aug 2026 13:01:41 +0000
Manifest next update: Sat 15 Aug 2026 13:01:41 +0000
Files and hashes: 1: 3ucsj67LcFLIQSAbJfagGOR3scI.crl (hash: pMeOle+jt3eF6uVAfvsizaP7r1nXwoVNHOoNvNt99tI=)
2: ApGR2Q6UiBOTln3YEs6ePXPQ8lQ.roa (hash: lyxkrW/UqVG023E4rkiQmolfszYoshoVE4T/qdnjtKM=)
3: Fsb5HdL7NcO_faI7SYpSwT3IZj0.roa (hash: Dq+bYU+W7cSYjUMeWCs5QEHpiuPHvRD8GOeB0Afw45M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5d:2e:79:72:a9:9f:10:64:d5:21:e6:53:3b:b0:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Validity
Not Before: Aug 14 13:01:41 2026 GMT
Not After : Aug 15 13:01:41 2026 GMT
Subject: CN=8a56249f1288aa369c58bef4965c71e3b73a23bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:45:d7:79:38:44:1e:30:31:e2:50:95:54:28:
14:ea:7a:22:85:31:7c:73:c1:3b:3c:7e:dd:8c:c3:
c4:10:19:20:e5:ba:7d:ae:d4:09:e6:d5:cb:42:9b:
8d:ba:1d:cf:a2:2e:ba:e7:71:5f:64:ef:55:d4:75:
db:03:ae:7b:b8:90:b3:18:f1:b7:35:e4:03:c0:d4:
86:a5:e5:6e:9d:83:54:5e:98:96:04:e3:8c:35:9b:
0c:f0:a5:1b:3b:4e:d6:f3:bd:f2:5e:d0:02:05:cc:
bc:01:bd:b7:43:c4:07:1f:9d:c1:0c:04:0a:a3:3e:
1e:ab:c0:65:dc:38:34:da:3f:63:2b:5e:51:24:e5:
f2:8f:7e:ef:9e:9c:8a:fd:e1:ef:93:6a:ee:61:8a:
db:20:56:c0:cd:61:c8:3d:00:18:80:a6:e7:27:7e:
ed:90:7d:6b:ba:50:83:96:48:cf:83:2c:0d:6d:0b:
16:b5:46:ce:68:48:3a:01:d4:dc:65:e2:7d:d0:f3:
7d:54:5a:4d:8d:9c:f8:61:42:83:30:28:41:b5:1b:
d4:7a:73:8c:db:94:7a:25:f4:52:df:4c:7d:e9:ee:
8c:20:32:16:a8:cc:1c:26:67:15:17:79:e1:81:c7:
ab:49:b9:bf:9f:7f:c2:44:6b:fb:c6:26:5c:62:14:
c2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:56:24:9F:12:88:AA:36:9C:58:BE:F4:96:5C:71:E3:B7:3A:23:BC
X509v3 Authority Key Identifier:
keyid:DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:08:fc:35:1e:2a:d0:c6:60:94:1c:21:df:8a:4b:0f:6f:b3:
77:35:bf:d1:bb:60:ca:d0:44:ca:4e:ba:4f:9d:8d:b8:68:4b:
fe:06:a6:ec:ba:f2:b6:0b:a0:3e:1d:a0:b0:00:7d:36:b5:1f:
24:d8:c8:1e:9d:61:db:3f:f5:33:1c:4c:53:36:c5:4b:4b:b2:
94:83:71:e8:37:78:b1:67:79:29:7b:32:c3:4f:42:95:ee:b4:
3a:ed:2c:2e:53:69:40:ae:78:71:d0:d8:49:7e:17:89:d1:82:
25:df:62:8c:e5:40:75:82:f8:f6:53:ba:21:76:c4:5a:7c:31:
75:f9:dd:6f:2c:b9:84:66:73:cb:7b:8a:31:33:17:16:bd:0d:
2c:33:67:46:6e:1a:fe:b2:2f:dc:d3:33:41:44:cf:51:b6:a5:
70:b1:25:81:ae:03:d7:11:a6:79:12:3e:99:25:bb:ed:6a:d6:
cf:9a:83:7d:42:5d:d2:8f:0c:3b:1a:59:51:93:c3:45:89:d4:
77:af:9c:86:ba:35:e8:bf:1c:29:8f:a0:f6:ea:4e:40:55:8a:
3b:4b:d4:6b:33:c5:20:66:1d:f5:ea:1f:20:da:c5:ee:a5:aa:
b0:15:93:31:3f:f7:ce:64:ae:2f:b2:db:27:5d:a9:8a:56:89:
c8:9a:b2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:20:54 2026 by rpki-client