Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
File: 3_xJGVpDnVudcRKzNgFe7iyUTYk.mft (raw, json)
Hash identifier: EK1LTspAiFaIiCDZ9bn8Vc4FfNuf6DmoEtd9p8uL7XI=
Subject key identifier: B0:D8:D0:81:3D:2C:4F:05:8C:39:E9:BD:D7:F3:A1:18:A0:5C:10:C4
Authority key identifier: DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
Certificate issuer: /CN=dffc49195a439d5b9d7112b336015eee2c944d89
Certificate serial: 01A15A0B5CC7868CDA0EAC3B90BFA9385C42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
Manifest number: 1AB4
Signing time: Tue 20 Oct 2026 16:00:56 +0000
Manifest this update: Tue 20 Oct 2026 16:00:56 +0000
Manifest next update: Wed 21 Oct 2026 16:00:56 +0000
Files and hashes: 1: 3_xJGVpDnVudcRKzNgFe7iyUTYk.crl (hash: 0Yqp3m439KTIi4JXDzhQHYIgRjmEXacscgwEwl9taNE=)
2: 6rPz8igkyZRlNFZsutLMqabI34I.roa (hash: Z2BW3rAqZoeVlHqBJzAMivNjITmnHOwFnbfJtV0fFqY=)
3: LuIPpCoB4V31cK2p5DsLz4qIQtI.roa (hash: HA29gUkPA7e326XQjVW4UCnX3LAB35fhH3vTvc7GqnM=)
4: iC10497tJji-WYhWTVtTKPnCEBA.roa (hash: 6xbmmivHgxTXa78A2SNCDzZGkpnLAKBTJU2rllnxUng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 16:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:0b:5c:c7:86:8c:da:0e:ac:3b:90:bf:a9:38:5c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dffc49195a439d5b9d7112b336015eee2c944d89
Validity
Not Before: Oct 20 16:00:56 2026 GMT
Not After : Oct 21 16:00:56 2026 GMT
Subject: CN=b0d8d0813d2c4f058c39e9bdd7f3a118a05c10c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:95:d5:73:12:bf:4a:37:fc:67:eb:42:59:0e:
ea:e2:97:bb:20:91:b2:59:84:15:db:f0:1d:ca:5f:
06:f9:32:ac:a8:62:bb:ce:c0:0e:46:e8:3d:00:fb:
79:08:5a:4e:1a:0f:5f:67:e3:f8:b0:3e:2c:fe:63:
30:f0:18:c6:d3:22:49:a1:e8:bc:8a:f5:46:5e:76:
58:a5:6a:d4:c5:c9:ff:6d:bd:07:0e:e2:b2:22:2b:
74:1a:ed:d0:d7:86:ef:d8:1f:36:69:20:5e:76:2c:
4a:87:00:60:9b:27:6c:31:4e:af:9e:2e:9e:14:b4:
a1:d1:06:78:71:72:5a:c2:63:6a:23:b7:10:ee:7a:
90:cb:22:19:c3:b1:92:2a:25:10:77:c4:ee:56:86:
ce:f4:f9:47:6b:10:2e:6b:04:65:0d:25:e6:38:c8:
bc:9c:29:6a:77:4a:f1:8d:22:8f:c6:07:25:24:71:
36:4a:17:c3:57:e0:9c:df:56:f6:23:22:66:fa:17:
b7:26:43:dc:83:d6:fa:6f:e4:a6:3f:34:90:83:9d:
ea:d0:3b:c7:bf:3a:cd:c6:47:06:dc:bf:9c:fc:9a:
64:16:48:94:c8:0c:ce:06:1e:82:28:27:f1:25:13:
99:67:e8:af:02:69:dc:f6:6f:9d:f1:ec:e4:be:ff:
7f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D8:D0:81:3D:2C:4F:05:8C:39:E9:BD:D7:F3:A1:18:A0:5C:10:C4
X509v3 Authority Key Identifier:
keyid:DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:74:30:ad:1e:75:67:9f:b8:58:7c:a7:0c:54:6f:e9:64:18:
19:99:be:75:27:c6:99:7f:08:5e:d6:d3:31:91:e7:74:30:ce:
2f:c7:2c:fb:19:67:6c:21:c6:46:ee:5c:e4:37:bf:a8:aa:bf:
d3:04:3c:ad:6c:3e:0a:80:79:f1:81:c7:4b:d2:00:bd:fe:c4:
60:0f:19:6a:36:6d:e0:d6:40:9b:87:cd:05:e8:64:fb:5c:2e:
08:25:06:71:e1:aa:97:4f:dc:77:be:fb:8a:ac:2f:ec:98:03:
5f:1e:2f:d4:dc:cc:96:31:23:68:51:f6:05:46:e8:12:aa:e2:
ca:18:44:51:86:48:41:14:44:16:b0:0e:a8:84:44:47:b5:13:
18:51:73:4e:85:5a:89:55:80:a2:cc:6a:7c:70:2c:57:f5:a2:
35:1a:92:0b:4e:c8:4f:50:f2:42:2f:2c:fe:74:8d:e8:b8:12:
14:53:3e:b3:26:1a:2b:e6:ae:65:da:82:29:72:ff:aa:aa:e5:
46:7b:d7:b5:6c:b3:ad:e6:de:7c:7c:51:f3:69:42:78:1f:12:
b1:28:9b:d2:f0:70:4b:51:22:b9:55:b4:a6:2b:29:84:4c:7e:
e7:77:a0:17:a4:ee:fc:ac:24:0f:ed:58:7d:bb:49:93:8b:3f:
c5:4b:1d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:11:49 2026 by rpki-client