Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
File: 3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft (raw, json)
Hash identifier: 4dhA9pgo/j//ntMPndSj1ylgOC8P6CyhUUiC6GfpKqY=
Subject key identifier: 34:63:BF:21:8E:9E:CD:99:97:89:29:1D:EE:D6:CC:2E:D3:58:92:2E
Authority key identifier: DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
Certificate issuer: /CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Certificate serial: 01A140F1671327B6F26D229C8E6AD89AF4D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
Manifest number: 1287
Signing time: Thu 15 Oct 2026 19:02:04 +0000
Manifest this update: Thu 15 Oct 2026 19:02:04 +0000
Manifest next update: Fri 16 Oct 2026 19:02:04 +0000
Files and hashes: 1: 3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl (hash: Ze7mYV6Z3pGXA3YJY/oWEkT9O+yySpQVQmYPkjbqD9w=)
2: ZupcI2nbSj0kv3bOiTJw_7ju_nM.roa (hash: 8lfURhp4+6wvfeyaLwrd59nHvD9zLaiHI+8CWa149w4=)
3: uRzlID_nfuupcIGUXbHpyyUrxts.roa (hash: 5LvqBXGtCHTt2jvIwKxCsctM10tlaiQJ5CWlpcE9cx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:f1:67:13:27:b6:f2:6d:22:9c:8e:6a:d8:9a:f4:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Validity
Not Before: Oct 15 19:02:04 2026 GMT
Not After : Oct 16 19:02:04 2026 GMT
Subject: CN=3463bf218e9ecd999789291deed6cc2ed358922e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6b:b2:6f:d3:38:34:d2:02:80:46:4a:2c:1f:
9e:63:89:20:5c:8b:d7:7f:71:bc:f4:cd:c1:37:67:
ff:2c:13:7e:5b:84:45:14:1d:15:28:72:28:04:9f:
36:3f:e9:4d:d3:cf:a5:46:12:81:74:f8:10:19:53:
70:cb:c1:0d:55:eb:a8:28:a3:97:e2:1d:ab:56:68:
1a:25:7f:b4:e7:52:1c:e2:8e:15:42:82:3b:5a:32:
95:10:2f:77:57:15:fb:e6:2e:8c:ff:ef:af:32:26:
67:6f:80:22:77:cd:a1:df:0c:da:a9:1d:ba:45:cf:
5f:65:87:fb:46:9f:c8:3e:90:89:68:a4:d0:0e:ba:
f0:e4:7a:38:1c:3e:7d:4a:e4:c1:90:61:14:c6:13:
fe:7a:6e:b5:45:68:78:e0:b7:a4:9d:a1:a2:b3:dd:
2b:0b:1e:56:02:b7:a7:05:67:d0:46:81:77:7e:fa:
2b:11:f3:ed:4d:15:69:16:43:0a:4a:68:05:32:0b:
6f:7b:35:02:f9:1e:1c:2d:47:5d:5f:1b:fa:ec:d7:
1d:21:8b:ac:24:9f:d0:67:07:a1:50:8d:ea:b1:43:
ff:16:6b:ef:0d:00:c3:3c:25:16:35:14:29:36:fc:
88:38:1d:03:10:76:bf:e1:38:ce:2b:5a:f5:ca:23:
2f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:63:BF:21:8E:9E:CD:99:97:89:29:1D:EE:D6:CC:2E:D3:58:92:2E
X509v3 Authority Key Identifier:
keyid:DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:75:04:d9:55:1a:95:5c:cf:f1:03:9e:9d:e4:c4:ec:c1:0e:
68:07:d0:d9:13:ac:2e:b2:5e:5c:7c:99:d3:25:2e:50:fd:f7:
46:76:63:98:f6:21:aa:96:46:7a:df:25:57:d2:50:f7:21:1d:
37:24:15:d0:c9:93:04:cb:d5:0c:70:49:33:f0:3f:bb:f7:89:
c1:e2:10:c9:5b:30:66:eb:d2:83:ab:76:bf:0a:0a:4c:82:36:
fb:40:fd:db:6e:25:8c:e1:67:c2:9b:07:07:ad:62:37:40:b6:
5c:0b:3e:c2:34:f4:3b:74:37:a9:21:12:a7:1e:13:f5:d3:97:
eb:3b:8b:f0:8b:a6:dc:36:47:95:7e:6d:b3:dc:f6:a6:8e:dc:
af:bc:3a:29:49:30:16:cc:d5:4d:59:94:bc:22:fe:dc:4e:ee:
fc:54:8a:8a:cb:0e:98:4f:f5:ff:d9:f4:4a:82:aa:e7:e8:2c:
d8:d1:68:88:de:ab:a8:29:4e:8a:07:70:a8:5f:be:3c:8f:e9:
31:61:cf:a4:73:30:16:9a:e5:ce:6b:d0:9f:a9:7f:10:66:b5:
ac:59:b0:42:2a:94:5d:31:37:94:65:d9:91:0a:9b:06:1c:3c:
ad:13:93:09:03:53:16:81:4c:85:f3:59:58:b0:81:30:3b:ab:
33:98:e8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:33:14 2026 by rpki-client