Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
File: k3hbOp4zxStYueyVo3cj8ACL-UY.mft (raw, json)
Hash identifier: UJ2lFN4/RQQQd9WzXcQHLrbkFmMDAxRCcZz1URlz//s=
Subject key identifier: 86:37:5D:B3:67:43:E8:F2:21:69:AD:CF:D3:8E:AF:88:9D:DC:7A:2D
Authority key identifier: 93:78:5B:3A:9E:33:C5:2B:58:B9:EC:95:A3:77:23:F0:00:8B:F9:46
Certificate issuer: /CN=93785b3a9e33c52b58b9ec95a37723f0008bf946
Certificate serial: 01A1908C210C1B75B8EF9DDE1F5B2D1908D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
Manifest number: 1AD0
Signing time: Sat 31 Oct 2026 06:01:04 +0000
Manifest this update: Sat 31 Oct 2026 06:01:04 +0000
Manifest next update: Sun 01 Nov 2026 06:01:04 +0000
Files and hashes: 1: k3hbOp4zxStYueyVo3cj8ACL-UY.crl (hash: QKufdOKlfh5pKQPerMd51TZ9ijYvHk2SOiM2p73GPqs=)
2: lzqB-_xRsBzlfZC3i-581O0TRPA.roa (hash: p6cjxCw0yBX+JOEsw/uKDi48tVNBgWuDysGJUIAaJS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:90:8c:21:0c:1b:75:b8:ef:9d:de:1f:5b:2d:19:08:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93785b3a9e33c52b58b9ec95a37723f0008bf946
Validity
Not Before: Oct 31 06:01:04 2026 GMT
Not After : Nov 1 06:01:04 2026 GMT
Subject: CN=86375db36743e8f22169adcfd38eaf889ddc7a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:28:50:76:f6:ed:76:76:21:fd:55:3d:f4:92:
ad:00:28:5f:1f:5a:ee:5f:ea:13:63:bd:1c:c9:d0:
85:d4:e2:28:e8:3c:04:87:f2:40:b5:72:1c:ac:f9:
2d:50:bc:ad:f5:c1:b7:69:36:a9:f3:a6:61:58:20:
42:10:75:bf:72:9e:74:8f:83:fa:73:94:69:7d:28:
97:ff:d9:61:ce:ce:f5:3e:b8:41:39:bd:d5:f0:b7:
f4:58:c5:d2:74:29:38:ca:aa:ed:21:f5:ec:77:ce:
4c:ea:0b:d5:b0:5c:d1:be:e5:a7:ea:09:98:c2:d2:
a7:9d:b2:60:82:dd:95:ff:22:02:f9:5d:52:a4:7f:
7c:c0:df:f3:ab:3c:16:1d:00:65:c2:ab:ed:7c:a7:
c9:76:2c:51:7b:23:0a:d3:21:be:8d:25:43:64:5c:
d2:9d:da:ce:d1:92:06:e4:e7:37:59:41:01:e2:67:
7d:0a:9f:2e:f5:ef:6f:c7:bc:04:2b:34:18:67:e7:
26:5d:e3:b3:c2:5f:73:7d:e2:2c:11:a3:53:5e:97:
05:61:35:23:ae:d9:f9:d0:0d:73:3c:49:99:a9:51:
38:d7:ef:ce:da:15:7a:78:4d:ac:1c:6f:94:59:b6:
d3:36:7f:8d:a6:3c:df:bf:3d:e0:13:9f:c2:a3:04:
37:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:37:5D:B3:67:43:E8:F2:21:69:AD:CF:D3:8E:AF:88:9D:DC:7A:2D
X509v3 Authority Key Identifier:
keyid:93:78:5B:3A:9E:33:C5:2B:58:B9:EC:95:A3:77:23:F0:00:8B:F9:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:62:ae:c4:44:95:10:3a:f8:5b:e3:d7:ca:c2:aa:a4:27:42:
d2:2a:5d:ff:60:95:40:87:4a:33:cc:9c:aa:8b:70:f0:0f:96:
a3:ad:e2:0d:9a:3c:1c:8e:31:0a:12:7f:8f:b1:01:1b:d0:6b:
4e:0b:db:bf:c2:af:6e:7b:f0:66:27:66:08:e4:8c:85:b6:08:
b4:e5:26:4f:87:e1:e0:40:c1:ca:d7:5e:69:66:33:ec:95:e0:
eb:e2:20:27:33:aa:36:94:aa:cf:aa:1d:bf:28:d7:68:36:8a:
37:b5:a7:e3:13:f2:21:1c:72:92:5d:8d:62:46:31:fa:db:be:
06:0c:b8:e0:99:af:3f:83:47:09:fa:91:e2:bf:b2:fb:07:91:
d6:5f:03:c2:d2:24:08:c9:b9:04:19:a6:40:6b:a9:e0:c5:fe:
6f:f0:57:95:38:01:0d:ad:e0:be:cb:b1:41:04:0a:6f:de:89:
bf:b5:26:23:3b:64:27:f0:39:18:25:89:b8:4e:1b:4c:ae:4b:
cc:12:83:54:fd:a7:64:96:18:83:bf:8c:11:4d:99:bb:da:31:
e0:bb:42:19:ae:cd:b1:bb:fc:cc:3a:18:fa:55:58:88:d3:09:
82:8e:3f:e7:8c:28:27:85:7c:4c:15:57:12:1a:ca:a2:d6:6a:
19:2d:e4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:08:09 2026 by rpki-client