Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/6ccb8c-98f3-46b2-bc84-d0e17d8e1d43/1/v3tF0FTKdpicDK_pY8RemX0Ug4M.mft
File: v3tF0FTKdpicDK_pY8RemX0Ug4M.mft (raw, json)
Hash identifier: swLJMJJSEZszlqWv7c+hwe4slVEdT+Zk7GV0gX2egg8=
Subject key identifier: 61:A1:2D:A5:84:20:EB:62:EF:B7:AA:43:43:20:8A:E6:5B:04:31:63
Authority key identifier: BF:7B:45:D0:54:CA:76:98:9C:0C:AF:E9:63:C4:5E:99:7D:14:83:83
Certificate issuer: /CN=bf7b45d054ca76989c0cafe963c45e997d148383
Certificate serial: 01A17C978F3AF2BB105A0DD1401C8BD8F1D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3tF0FTKdpicDK_pY8RemX0Ug4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6ccb8c-98f3-46b2-bc84-d0e17d8e1d43/1/v3tF0FTKdpicDK_pY8RemX0Ug4M.mft
Manifest number: 3D
Signing time: Tue 27 Oct 2026 09:01:09 +0000
Manifest this update: Tue 27 Oct 2026 09:01:09 +0000
Manifest next update: Wed 28 Oct 2026 09:01:09 +0000
Files and hashes: 1: 6XNoU39QgIZuPnUaju4HG1Lm1Sw.asa (hash: zLUFdBiqcNMYtJtu5xBAuXp2lAoIqMdRBIoTnNzP5YE=)
2: v3tF0FTKdpicDK_pY8RemX0Ug4M.crl (hash: QBwIELngRk4cve4cZa7y3v6k8+bWhlU33SO1LDnCDZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6ccb8c-98f3-46b2-bc84-d0e17d8e1d43/1/v3tF0FTKdpicDK_pY8RemX0Ug4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6ccb8c-98f3-46b2-bc84-d0e17d8e1d43/1/v3tF0FTKdpicDK_pY8RemX0Ug4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3tF0FTKdpicDK_pY8RemX0Ug4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:97:8f:3a:f2:bb:10:5a:0d:d1:40:1c:8b:d8:f1:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7b45d054ca76989c0cafe963c45e997d148383
Validity
Not Before: Oct 27 09:01:09 2026 GMT
Not After : Oct 28 09:01:09 2026 GMT
Subject: CN=61a12da58420eb62efb7aa4343208ae65b043163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ec:be:fe:c9:99:69:8d:10:9f:51:3f:3c:0b:
01:8a:01:16:f4:53:3b:22:d4:e4:2e:03:ec:1f:ee:
1c:e2:16:28:b2:52:11:57:01:64:f9:77:89:b9:29:
cb:61:78:db:1b:e6:5d:e9:05:ce:d6:9d:76:e9:cd:
db:82:10:52:18:8b:d5:03:fd:a5:29:7c:7a:50:3e:
65:4d:94:f7:90:2e:23:31:80:fb:0f:08:f8:3f:d8:
df:e6:0f:b0:10:f7:88:11:00:43:84:0f:13:03:12:
8c:b7:75:7a:18:b0:ac:e4:fe:1c:54:8a:29:2c:19:
e2:3b:4c:61:0d:c7:11:f4:a2:de:b3:e7:f4:73:28:
40:65:01:d2:bd:58:78:d8:8a:16:7f:e8:27:ab:2e:
97:f3:4e:da:80:70:5c:2a:75:66:c1:dd:7c:c8:65:
86:b9:10:fc:d2:62:12:57:34:c8:6a:90:77:aa:7a:
02:1b:32:ff:a8:61:47:26:56:2a:18:e5:81:07:79:
aa:d8:34:f4:fd:70:c0:9b:98:ba:04:5d:c7:2b:01:
86:74:21:c3:93:04:1a:33:63:1a:fb:21:d1:e7:df:
07:7a:5e:70:f4:96:44:27:5b:7e:ab:41:85:c5:78:
fa:d1:7e:f2:12:0f:81:37:3d:3c:49:19:c0:e0:db:
fa:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A1:2D:A5:84:20:EB:62:EF:B7:AA:43:43:20:8A:E6:5B:04:31:63
X509v3 Authority Key Identifier:
keyid:BF:7B:45:D0:54:CA:76:98:9C:0C:AF:E9:63:C4:5E:99:7D:14:83:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3tF0FTKdpicDK_pY8RemX0Ug4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6ccb8c-98f3-46b2-bc84-d0e17d8e1d43/1/v3tF0FTKdpicDK_pY8RemX0Ug4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6ccb8c-98f3-46b2-bc84-d0e17d8e1d43/1/v3tF0FTKdpicDK_pY8RemX0Ug4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:0a:c5:f6:ed:36:98:03:90:21:0a:bc:17:96:1b:30:98:68:
58:1b:5a:cc:fb:9b:94:6e:f6:80:24:5b:0e:c4:f2:9b:43:14:
0f:d1:7e:2f:1c:4e:a5:ae:a1:ef:46:d4:e5:a9:0a:70:dd:61:
fa:2d:9a:86:95:a2:d7:8b:c6:5e:e9:89:ff:e5:92:f1:19:30:
df:80:f4:45:24:cf:fb:a5:20:a1:96:cf:ef:fa:ea:cb:b1:d2:
bd:e2:86:3a:16:1a:da:80:be:5b:94:64:f6:8c:62:9f:16:e5:
be:f2:69:87:34:fa:15:54:57:22:4d:52:4a:64:de:e8:02:80:
ff:27:ab:7d:bb:b2:df:38:f9:fb:8a:98:0a:8c:48:cd:9c:cb:
f8:df:aa:af:9c:90:16:c9:7d:56:98:fd:44:6d:9d:2d:ff:4c:
69:ab:ad:56:40:a8:65:2b:b5:ee:d5:e0:64:cf:71:31:15:17:
8a:02:04:1d:c4:0f:ed:36:89:54:b6:14:6b:60:5d:1e:b7:51:
78:89:22:a5:b6:ae:f5:82:24:4b:02:12:0b:ea:ed:ac:d3:fa:
17:97:73:61:1e:9d:f8:dc:e0:a2:d1:a4:43:81:81:c2:0f:e5:
92:88:0d:7c:b3:33:c0:98:c9:47:c3:a1:9c:8c:e1:10:dd:1c:
70:0e:db:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:11:52 2026 by rpki-client