Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
File: 3o44GHrnDLx77WlXWfDgMpn7swI.mft (raw, json)
Hash identifier: hfA8TaQeSTQTD1OmhGIT3qlIO8tGBDgi8GR09as2N+s=
Subject key identifier: E8:DD:DD:87:2F:1B:07:41:61:E7:36:C6:72:C9:E3:A4:80:0C:1A:4C
Authority key identifier: DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02
Certificate issuer: /CN=de8e38187ae70cbc7bed695759f0e03299fbb302
Certificate serial: 01A13FDE440BF2FC505671A25D86522C5D49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
Manifest number: 072E
Signing time: Thu 15 Oct 2026 14:01:33 +0000
Manifest this update: Thu 15 Oct 2026 14:01:33 +0000
Manifest next update: Fri 16 Oct 2026 14:01:33 +0000
Files and hashes: 1: 3o44GHrnDLx77WlXWfDgMpn7swI.crl (hash: b2McZwMrr5zuM33JuJ6UyLFxDtM99J9Gb6HqnTFDvjQ=)
2: RPnqpd4QiTnwCz1MgHARgUiKRfA.roa (hash: EMQ9uAHdxhy6q4kC92RKeDGjFCm7FDg8EbfwYcj/lNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:de:44:0b:f2:fc:50:56:71:a2:5d:86:52:2c:5d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8e38187ae70cbc7bed695759f0e03299fbb302
Validity
Not Before: Oct 15 14:01:33 2026 GMT
Not After : Oct 16 14:01:33 2026 GMT
Subject: CN=e8dddd872f1b074161e736c672c9e3a4800c1a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a6:73:7c:0b:c8:35:c3:07:42:07:47:7d:09:
6e:bd:42:82:39:0d:a1:53:db:b4:68:a1:e6:f3:bc:
95:9c:a1:af:78:4a:b0:e7:ed:a1:93:a0:74:7c:9e:
22:29:4d:3b:3a:43:ef:61:f4:c8:84:68:79:a1:63:
b6:0d:db:9a:3a:b0:f4:12:80:3b:19:32:96:f9:df:
ee:6b:d2:29:d7:c6:59:6d:35:54:ee:bd:26:2f:a9:
83:a1:bc:c8:7c:34:fd:39:d0:f9:26:81:ee:98:0b:
d9:d5:13:60:d8:27:34:50:6f:e9:96:6d:62:05:3d:
ef:a3:1f:df:bd:39:50:c6:0e:9a:f7:d7:cb:c5:ff:
e5:f5:6d:c1:15:d2:5e:98:c6:0b:66:86:58:3e:c8:
4a:fb:8c:63:ac:d9:c8:f4:ae:4e:ad:ad:5d:86:0f:
73:7e:8b:15:88:a0:44:52:f1:5d:1a:6b:83:14:31:
96:a0:c3:2c:a6:42:4f:03:da:57:a0:1e:61:21:e6:
3f:ad:3e:79:ad:c8:57:d1:a0:18:0c:1a:cc:2b:13:
66:a1:b6:12:7c:6a:3b:58:6d:61:a4:43:3f:60:86:
5e:fc:60:1d:dd:bc:93:00:25:c4:ab:7a:a4:c5:b6:
ed:9f:61:f8:1a:27:2b:7c:8c:7c:a1:44:d0:fe:bc:
5f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DD:DD:87:2F:1B:07:41:61:E7:36:C6:72:C9:E3:A4:80:0C:1A:4C
X509v3 Authority Key Identifier:
keyid:DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:cd:cf:91:45:26:a7:15:bf:f8:aa:2e:29:cf:82:63:90:cf:
45:15:bc:91:ad:d7:87:30:77:de:59:f8:50:ee:24:37:81:80:
b5:97:7f:6a:a5:2c:51:30:f0:ba:08:ab:d4:fb:57:06:71:27:
a4:97:8d:d3:3a:74:ec:07:28:00:0b:61:43:e0:7e:09:d5:57:
9b:72:c9:71:14:70:63:79:4d:71:73:d7:af:fa:63:e2:bd:1e:
72:aa:6a:96:11:38:23:01:94:26:dc:9f:28:10:33:ac:c4:4a:
36:44:d0:45:c0:38:8c:c5:28:42:f4:25:78:d3:49:95:9c:8f:
6b:e1:53:d3:69:ef:fa:9b:5c:54:38:0e:5f:fc:b0:d9:87:18:
0e:0b:82:0b:6f:7e:92:e6:d3:ca:b2:57:d2:53:38:07:34:2f:
51:08:3f:54:71:e7:b0:fa:6e:71:db:f3:42:05:06:9e:ca:ee:
df:3a:e0:d1:3e:17:3f:06:08:d1:ca:30:d9:42:7c:db:ec:fe:
b9:04:d1:5f:98:dd:73:52:c4:70:e0:ea:96:8d:9d:58:09:c2:
53:ed:d8:55:8d:f4:60:6a:ff:56:9a:9d:53:de:28:71:bb:7a:
e2:1b:87:cf:40:7e:a6:1c:fe:83:eb:4d:2a:38:af:3d:c5:62:
66:37:e7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 17:47:29 2026 by rpki-client