Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft
File: 3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft (raw, json)
Hash identifier: Ha5LcFd7g7dhiZt15JpbJElKu96kUKIC9oizgQ5eDlM=
Subject key identifier: DA:DE:D6:46:8E:67:31:BF:65:9F:7A:C9:7E:AF:FF:8A:91:DF:C4:A0
Authority key identifier: DD:CB:EF:E6:C6:4D:29:A3:46:B2:B4:01:09:F8:D8:6B:F1:83:81:CC
Certificate issuer: /CN=ddcbefe6c64d29a346b2b40109f8d86bf18381cc
Certificate serial: 01A17B84EF605339AF5AE328C0E44A40E749
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cvv5sZNKaNGsrQBCfjYa_GDgcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft
Manifest number: 02DC
Signing time: Tue 27 Oct 2026 04:01:11 +0000
Manifest this update: Tue 27 Oct 2026 04:01:11 +0000
Manifest next update: Wed 28 Oct 2026 04:01:11 +0000
Files and hashes: 1: 3cvv5sZNKaNGsrQBCfjYa_GDgcw.crl (hash: 6pN+NCrYa52KMtbWLbAd3cgn+JdDhVoerHUjFjeEwg8=)
2: VGuckUmXD3FffNojHBh4mr4L2f8.roa (hash: 8TbPfvVyzj3G5WKw2nSbHXcBZE5w35KkZHPmx5cAQsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cvv5sZNKaNGsrQBCfjYa_GDgcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:84:ef:60:53:39:af:5a:e3:28:c0:e4:4a:40:e7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddcbefe6c64d29a346b2b40109f8d86bf18381cc
Validity
Not Before: Oct 27 04:01:11 2026 GMT
Not After : Oct 28 04:01:11 2026 GMT
Subject: CN=daded6468e6731bf659f7ac97eafff8a91dfc4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:15:e8:83:62:45:e8:dc:ee:db:96:61:05:3a:
81:52:a0:58:b6:e0:7d:ed:d4:35:09:db:0b:d8:1d:
a3:e7:d4:97:a1:bd:c0:d9:27:2b:99:a1:6d:ab:d0:
c3:42:3f:ab:44:69:59:d6:82:be:0f:22:6a:80:cb:
1e:ed:76:e0:f0:0f:72:b6:aa:b9:d5:7f:11:b3:9c:
dd:87:9c:71:71:6f:6e:bf:e3:3f:69:89:83:0b:bf:
a4:62:b5:76:6c:81:8b:8e:ca:f9:eb:dd:73:44:a2:
77:be:95:23:9c:d7:9c:c4:41:01:60:d5:8f:61:19:
a8:3c:df:d7:e8:7e:2b:c8:94:24:5c:45:8d:80:d6:
ce:96:2c:67:f8:25:ae:ac:4c:e7:ab:b1:51:88:75:
57:ec:f0:b8:99:57:cd:93:ed:5b:a0:2f:39:10:88:
56:eb:23:a8:66:29:84:74:b0:b9:5f:30:9b:24:d5:
90:f3:2c:2a:7e:d8:66:5c:07:25:60:ca:8b:84:60:
62:e6:29:4e:da:48:c6:9d:ad:cf:ca:71:e0:d5:05:
e9:9c:98:62:c5:f7:bf:de:f2:00:b6:ae:0f:ed:f5:
72:18:14:ce:24:6d:f6:df:d0:e0:cd:c9:19:cb:c9:
00:c6:f3:14:5a:1e:60:f5:7d:de:ac:12:10:09:67:
8d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DE:D6:46:8E:67:31:BF:65:9F:7A:C9:7E:AF:FF:8A:91:DF:C4:A0
X509v3 Authority Key Identifier:
keyid:DD:CB:EF:E6:C6:4D:29:A3:46:B2:B4:01:09:F8:D8:6B:F1:83:81:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cvv5sZNKaNGsrQBCfjYa_GDgcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1b9964-687b-474e-b93f-45506c7be05d/1/3cvv5sZNKaNGsrQBCfjYa_GDgcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a7:b3:9a:a2:85:b3:66:e2:99:89:d8:dc:c1:d8:ae:29:bd:
87:3d:a1:94:8b:69:e9:21:d6:4e:fc:90:28:f0:6f:b6:19:a8:
61:51:87:c6:21:d2:5d:5d:50:a2:c9:02:2a:43:fc:1f:32:a4:
50:2f:c0:23:ea:21:14:50:16:4c:f8:42:11:57:f2:2f:3d:df:
08:24:8d:67:47:3b:06:73:3b:eb:d2:6e:f7:96:7b:49:f1:78:
9e:10:7b:21:c0:70:40:4c:c8:0a:fa:60:94:84:3f:fe:28:29:
bb:10:f9:b4:b3:5e:4b:a4:0c:76:0a:de:71:73:d2:14:51:99:
a0:60:25:7d:11:b0:b7:44:33:67:87:5a:d1:09:b3:dd:45:e4:
45:f2:5c:9e:21:f4:d8:d1:1b:f0:92:ac:ba:b2:f9:f9:d8:d0:
a6:4d:36:5c:34:5d:85:84:7c:35:68:aa:14:56:f2:12:43:49:
4c:74:cd:e0:43:e1:ff:c1:91:71:50:08:a9:bf:5b:d7:8f:be:
92:24:15:f4:67:e7:62:16:79:7f:3b:51:e5:11:b1:8b:1b:8a:
41:d1:e3:eb:bc:24:99:e4:ac:59:01:f8:fc:7b:5a:50:c2:cd:
10:af:91:75:9d:46:dd:48:9c:b9:68:4b:0e:c9:1b:b2:c3:48:
ea:bc:a2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:43:00 2026 by rpki-client