Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.mft
File: 3bGCpdvRvuhx3lGQAtYBj-4hNnA.mft (raw, json)
Hash identifier: qL5KLXxoQMk0sRuaXnHvov/DJf7U8hgN5aOk8IVGNNk=
Subject key identifier: D5:DE:DB:C3:4C:5B:64:C5:D5:22:2B:F0:0E:B3:50:BA:E2:50:7E:9C
Authority key identifier: DD:B1:82:A5:DB:D1:BE:E8:71:DE:51:90:02:D6:01:8F:EE:21:36:70
Certificate issuer: /CN=ddb182a5dbd1bee871de519002d6018fee213670
Certificate serial: 01A147978D593ED42EFA87050A90630FF8D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bGCpdvRvuhx3lGQAtYBj-4hNnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.mft
Manifest number: 0123
Signing time: Sat 17 Oct 2026 02:01:16 +0000
Manifest this update: Sat 17 Oct 2026 02:01:16 +0000
Manifest next update: Sun 18 Oct 2026 02:01:16 +0000
Files and hashes: 1: 20VygfwVlNCmiYaqXe3wYV0H-NY.roa (hash: RTfUnp4cc1sr9qZVV1x/DY/U+HOziyC+zams+lO0xGQ=)
2: 3bGCpdvRvuhx3lGQAtYBj-4hNnA.crl (hash: WED6/h/I9u3MxQUOHkrJOeFwhW1xyGoIVlmKmEDwgH8=)
3: 63JgYqrtG6KoZuuOrK4W3du1Duo.roa (hash: bCSh6KZ5NQdZdMyFJ085Wh626DTWHoPFQnxoetlXdVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3bGCpdvRvuhx3lGQAtYBj-4hNnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 02:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:97:8d:59:3e:d4:2e:fa:87:05:0a:90:63:0f:f8:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb182a5dbd1bee871de519002d6018fee213670
Validity
Not Before: Oct 17 02:01:16 2026 GMT
Not After : Oct 18 02:01:16 2026 GMT
Subject: CN=d5dedbc34c5b64c5d5222bf00eb350bae2507e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ae:4e:49:3d:e5:36:bf:0c:98:80:e7:6c:eb:
b0:1f:43:b0:92:e2:63:5b:32:ba:32:14:c1:d3:1c:
91:4d:2d:3a:7c:fd:91:39:55:fd:00:44:11:51:5d:
ed:d4:de:03:8c:8f:7d:11:63:50:3a:05:28:18:20:
0f:0e:c9:35:5b:c9:f9:98:60:ee:c7:61:17:e8:61:
27:1a:60:8d:0f:40:d7:6b:65:b8:aa:9e:07:95:70:
9f:7a:01:dd:72:ea:db:41:2c:38:da:9d:e1:a3:17:
0e:2b:40:fe:97:39:8e:b6:01:32:be:8d:26:0f:17:
db:85:e6:29:2e:5d:79:9e:a7:b2:fc:b5:3a:81:a1:
a3:6d:48:f5:81:89:d3:f6:ec:30:79:4e:18:48:37:
bb:c1:50:66:61:8c:c5:bc:7c:a6:b6:af:6a:42:10:
32:d9:da:64:b3:ae:9e:19:49:f4:85:63:6f:11:e3:
83:1b:b2:be:f2:dd:d9:5d:a0:37:0d:c7:34:b9:ba:
57:9a:dc:5b:b0:87:5a:64:ee:b3:3e:bc:96:55:e2:
2c:32:bd:94:00:8c:7c:7e:70:db:75:85:e3:87:9a:
aa:1e:c5:3d:2e:95:c3:c1:08:86:37:40:6e:4e:90:
6c:dc:7b:50:76:f3:d3:7c:a1:52:bf:b0:71:49:d9:
24:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DE:DB:C3:4C:5B:64:C5:D5:22:2B:F0:0E:B3:50:BA:E2:50:7E:9C
X509v3 Authority Key Identifier:
keyid:DD:B1:82:A5:DB:D1:BE:E8:71:DE:51:90:02:D6:01:8F:EE:21:36:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bGCpdvRvuhx3lGQAtYBj-4hNnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b9:44:f3:aa:81:e6:d1:81:66:ff:4b:17:c4:50:5d:ab:81:
8a:92:76:87:1e:ef:e2:0b:26:6c:35:18:de:ee:a5:0d:76:af:
83:5d:b1:de:76:b9:5d:7d:0d:c0:65:b0:7c:f1:8a:4b:e3:f1:
c8:4a:f7:2b:67:29:6d:7f:3f:fa:b6:6a:17:fe:ca:78:3e:6d:
5b:73:4b:2a:fe:5e:69:47:f5:18:64:50:c9:aa:54:04:7d:c6:
81:29:c2:0e:73:db:78:17:ae:8a:9d:78:ac:bd:36:90:3f:8b:
5e:44:68:f3:68:e2:68:64:63:a3:92:bc:11:4d:38:ff:b8:b7:
2c:d4:1a:ce:43:4f:6c:8a:bc:95:82:20:3c:bf:52:ce:1b:de:
40:3d:73:b8:34:30:d4:df:60:62:80:9e:2a:db:67:25:47:8d:
57:2c:62:4e:0b:ad:3a:7f:78:0c:24:98:a1:ef:05:d9:c2:3b:
9d:65:95:5c:d8:57:23:e3:25:56:25:d2:f9:2b:c3:40:63:09:
75:83:4c:73:06:94:d2:4f:e0:e8:63:40:dd:dd:2b:c0:3a:3a:
ea:fe:2f:98:b4:33:72:ef:08:64:e6:8b:ee:e4:39:8e:d4:76:
c4:a9:3f:99:77:3b:48:b2:a8:e3:44:87:64:48:69:72:91:30:
19:fe:92:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:08:50 2026 by rpki-client