Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft
File: 3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft (raw, json)
Hash identifier: p9olYSAsv5PXpRc50SR/MyogOO+cI6aKrj4kspVvb24=
Subject key identifier: 87:61:26:F1:69:EB:45:4E:8E:F9:55:23:51:FA:24:E3:96:AF:A0:F3
Authority key identifier: DE:AD:4C:89:F7:AE:D8:68:1D:02:02:D2:24:79:D8:6E:14:62:F8:89
Certificate issuer: /CN=dead4c89f7aed8681d0202d22479d86e1462f889
Certificate serial: 01A17D73A612290620894130EE56690CC174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft
Manifest number: 1AC4
Signing time: Tue 27 Oct 2026 13:01:33 +0000
Manifest this update: Tue 27 Oct 2026 13:01:33 +0000
Manifest next update: Wed 28 Oct 2026 13:01:33 +0000
Files and hashes: 1: 3q1Mifeu2GgdAgLSJHnYbhRi-Ik.crl (hash: L2zoxdggFKy+XRtYdEsoVbh0z17SYKxlyeN6Ol5wytE=)
2: nGLpAbzPIa0fYIAvBp2NmfsMLMY.roa (hash: kwgj2EY4C+VKLivxvxueFyLeX+WYaalA75ogbGHFJJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:73:a6:12:29:06:20:89:41:30:ee:56:69:0c:c1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dead4c89f7aed8681d0202d22479d86e1462f889
Validity
Not Before: Oct 27 13:01:33 2026 GMT
Not After : Oct 28 13:01:33 2026 GMT
Subject: CN=876126f169eb454e8ef9552351fa24e396afa0f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f0:f5:d2:ab:b4:61:6b:ab:db:45:c9:35:f2:
75:14:8c:b0:db:92:e9:0a:ed:39:6a:5f:ba:ec:7b:
62:f9:22:f8:ae:4a:db:2f:4a:9b:6e:bc:81:92:1e:
1e:54:ba:6f:af:57:69:02:98:87:98:02:e3:3c:3b:
23:71:b9:1d:9c:fc:65:c0:9d:d6:c9:e2:3f:16:7e:
1e:70:b5:ef:6b:55:39:09:2f:f3:ae:e8:69:ad:0b:
c9:2e:e2:7a:6e:6d:ba:df:ad:80:39:4b:a8:83:8b:
51:6f:f1:99:8d:89:9f:e0:94:6e:fc:d9:5e:95:f4:
6f:74:8b:aa:24:07:e3:03:55:d2:3a:2e:a8:73:11:
78:a4:8a:68:2b:b2:b6:29:e4:10:99:75:da:0e:85:
8d:8c:ab:fa:bf:b4:93:c2:d9:22:26:b9:98:80:c9:
71:e9:33:83:4f:ca:9c:c1:f0:f0:a6:8b:c6:19:16:
4e:9f:10:79:0a:04:2e:01:a7:74:05:64:81:e2:1e:
8e:57:68:59:a9:77:d5:7b:4f:0a:ae:b7:c4:1c:e0:
bb:4e:3d:83:82:da:fb:f2:1f:e7:fd:81:70:65:73:
e6:da:2f:34:10:a3:a1:ee:9c:89:06:4f:3e:4b:07:
19:cd:be:4b:16:94:54:60:8c:c4:83:40:29:80:ee:
5c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:61:26:F1:69:EB:45:4E:8E:F9:55:23:51:FA:24:E3:96:AF:A0:F3
X509v3 Authority Key Identifier:
keyid:DE:AD:4C:89:F7:AE:D8:68:1D:02:02:D2:24:79:D8:6E:14:62:F8:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f4:b4:c0:36:00:59:3c:c5:7a:46:fb:77:b4:34:78:30:1d:
a9:cb:ca:e6:3b:69:53:29:f8:19:16:71:66:86:4d:9e:54:5f:
de:3c:99:b7:bb:fe:0c:8a:2d:7c:62:ed:6c:d5:6e:4c:8b:c9:
6e:1d:51:da:9f:48:dc:23:02:3e:52:80:44:a3:1a:0d:8e:69:
97:6a:9a:02:e6:64:b4:e1:6f:a7:72:7f:aa:9e:d5:6b:82:0e:
86:ef:ec:3f:64:ca:f3:07:7f:4e:6e:68:af:27:63:85:e1:d6:
90:22:78:96:12:db:6c:91:aa:66:7e:82:49:28:a4:22:ad:ea:
ae:06:7a:e2:b6:61:84:c9:c4:09:a8:5e:5d:3f:44:91:b2:72:
82:35:9f:ad:e3:58:be:07:93:0a:38:48:e3:2b:19:03:83:44:
1d:a2:1e:ba:39:7b:fa:a8:19:e7:5e:e6:e6:6c:ad:ca:aa:70:
f9:73:86:fc:54:8f:a7:e6:12:59:b2:1c:82:57:5c:9e:44:44:
c2:1c:04:d8:ce:dc:c6:60:36:8c:5d:ce:54:95:1f:98:9a:f4:
62:86:39:98:6f:58:c1:c3:83:ef:a4:61:51:a4:05:ed:58:3c:
1e:16:be:87:f4:55:82:1f:4e:50:3d:c6:53:2f:cd:dc:40:0c:
a4:f2:99:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:28:44 2026 by rpki-client