Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
File: 3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft (raw, json)
Hash identifier: cnC+ztAaIrijWTyO+usAsfp/+w49FpSE8XO6xCzeS/M=
Subject key identifier: B2:27:D2:22:6F:86:35:86:47:3E:4D:73:10:F5:B9:B0:E0:61:9F:5A
Authority key identifier: DC:FA:86:86:3C:55:86:57:00:63:4E:11:35:E6:17:E4:07:9A:F8:B9
Certificate issuer: /CN=dcfa86863c55865700634e1135e617e4079af8b9
Certificate serial: 01A14EE2A0F5C99520091BFC3F574FAA4243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
Manifest number: 1609
Signing time: Sun 18 Oct 2026 12:00:37 +0000
Manifest this update: Sun 18 Oct 2026 12:00:37 +0000
Manifest next update: Mon 19 Oct 2026 12:00:37 +0000
Files and hashes: 1: 3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl (hash: 3aQ2i3BTRkoQIc9M+pS0WFa5dddZN2TCXeHT3aBs9Q4=)
2: FT--4t0eY_HMytLIaG7T71X7cUo.roa (hash: 095emcTK3nDAck/cjTBbtBo2FJ9TXj6HZHetumiraec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4e:e2:a0:f5:c9:95:20:09:1b:fc:3f:57:4f:aa:42:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfa86863c55865700634e1135e617e4079af8b9
Validity
Not Before: Oct 18 12:00:37 2026 GMT
Not After : Oct 19 12:00:37 2026 GMT
Subject: CN=b227d2226f863586473e4d7310f5b9b0e0619f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6b:27:af:82:4e:ee:7a:d5:21:9c:4c:71:90:
b8:c6:c2:3a:d1:bb:56:58:45:ea:b8:0b:56:e6:89:
78:3c:a3:0d:f1:c4:63:69:fa:81:bb:a3:ab:6a:24:
61:9f:84:2f:87:98:f3:38:37:df:ad:70:e3:c0:57:
60:73:3e:89:22:65:8c:c7:47:0c:51:7d:56:e7:47:
ec:97:a1:39:1b:89:4d:fb:49:60:dd:e0:6c:3f:65:
20:99:30:90:11:ef:3d:03:f0:11:49:60:63:86:00:
04:1c:ae:0e:60:cd:a8:0a:4c:25:c3:e0:ed:59:44:
7c:33:e1:fc:e5:dc:ca:d3:06:c3:c8:53:33:fc:3e:
74:b6:19:3c:b7:38:22:8a:0c:10:e3:bb:4e:42:ce:
df:82:41:86:0a:41:36:df:53:a8:b5:65:0f:92:75:
ad:e0:79:d5:d5:73:9f:3e:6f:38:33:1c:5e:df:be:
ee:18:15:fb:67:a7:25:da:47:8f:26:78:d5:fd:38:
ae:5c:fb:67:50:9f:a6:38:a3:db:1c:57:fe:45:39:
3b:05:93:00:64:a9:09:74:8f:4a:6b:48:ee:68:61:
ee:07:cd:b6:9f:84:08:d6:9b:f5:4b:3c:35:aa:2c:
4e:a2:00:51:f5:b7:2e:29:1a:72:5a:4b:f7:82:c2:
47:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:27:D2:22:6F:86:35:86:47:3E:4D:73:10:F5:B9:B0:E0:61:9F:5A
X509v3 Authority Key Identifier:
keyid:DC:FA:86:86:3C:55:86:57:00:63:4E:11:35:E6:17:E4:07:9A:F8:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:4b:30:02:f5:82:e4:c4:42:79:b0:1c:98:23:96:1a:c5:2d:
db:2c:c6:dc:eb:b4:29:21:d6:c7:06:c7:e7:b6:0b:9e:46:d5:
35:9b:c4:46:b3:f0:f8:28:4e:05:b9:e6:64:47:be:aa:11:71:
ee:7d:fe:be:fb:c0:f7:98:98:1b:88:57:bd:be:ec:3b:ec:ec:
9c:0a:f4:8e:92:64:a5:47:cf:42:a3:4b:ad:3d:40:b1:c2:4b:
92:01:16:67:e9:fc:1e:05:fe:be:2b:a9:b6:6d:db:59:75:93:
65:c1:3c:9c:8f:f4:84:00:c1:5f:2e:b4:98:98:5f:f9:08:2c:
c6:a1:21:41:88:cf:61:bc:05:8a:18:cc:d5:88:40:84:6c:04:
16:4c:c4:75:f1:ee:91:4b:e4:bf:37:8f:13:0a:9e:0e:9e:d2:
49:fa:43:26:48:d2:62:f0:36:5d:8a:d4:d7:63:de:ad:bd:51:
e7:83:e3:90:a9:ae:d8:53:84:70:6b:55:85:30:e7:a9:81:15:
37:b5:4d:d5:d7:39:6a:76:54:bb:6e:b6:7e:74:b1:d3:58:18:
fa:70:63:c9:cd:3b:b5:c5:db:df:71:e9:10:51:b4:89:f1:87:
76:36:2e:6b:eb:92:59:23:c0:07:72:d8:cd:e3:b2:cf:cd:b7:
c1:6e:7c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 00:12:23 2026 by rpki-client