Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/619a7e-393b-4a35-99c0-48e69cc98612/1/3aCeRyucJahf8jydskIKSWCH-lY.mft
File: 3aCeRyucJahf8jydskIKSWCH-lY.mft (raw, json)
Hash identifier: oaREh6eSYoHypOGoFjxoo1QKNrW4adxs6CvMSu2EDUE=
Subject key identifier: C4:CB:BF:B4:D8:69:FE:CB:20:C9:65:33:48:4A:E0:CB:CA:86:6D:D8
Authority key identifier: DD:A0:9E:47:2B:9C:25:A8:5F:F2:3C:9D:B2:42:0A:49:60:87:FA:56
Certificate issuer: /CN=dda09e472b9c25a85ff23c9db2420a496087fa56
Certificate serial: 01A10701845569249DA67B6F9449D16E1260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3aCeRyucJahf8jydskIKSWCH-lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/619a7e-393b-4a35-99c0-48e69cc98612/1/3aCeRyucJahf8jydskIKSWCH-lY.mft
Manifest number: 43
Signing time: Sun 04 Oct 2026 13:01:42 +0000
Manifest this update: Sun 04 Oct 2026 13:01:42 +0000
Manifest next update: Mon 05 Oct 2026 13:01:42 +0000
Files and hashes: 1: 3aCeRyucJahf8jydskIKSWCH-lY.crl (hash: 1ELb4DBpDB14DTy8dtNoabdr7qqcV2lk2tLbI3eGGR8=)
2: xTtDR4yokQ7U_bsMzZ8Y6phU9gs.asa (hash: prFmwAXqESBX8SXJA0lfRIHoBHkJdTngIBMS4TtzhUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/619a7e-393b-4a35-99c0-48e69cc98612/1/3aCeRyucJahf8jydskIKSWCH-lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/619a7e-393b-4a35-99c0-48e69cc98612/1/3aCeRyucJahf8jydskIKSWCH-lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3aCeRyucJahf8jydskIKSWCH-lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:01:84:55:69:24:9d:a6:7b:6f:94:49:d1:6e:12:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dda09e472b9c25a85ff23c9db2420a496087fa56
Validity
Not Before: Oct 4 13:01:42 2026 GMT
Not After : Oct 5 13:01:42 2026 GMT
Subject: CN=c4cbbfb4d869fecb20c96533484ae0cbca866dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e0:97:bc:20:09:7a:6b:65:06:8c:31:83:2a:
bf:9e:9c:66:40:13:08:8b:79:77:2c:63:72:e5:7e:
50:d8:95:7a:ec:6f:31:4e:33:51:ff:a6:fa:e3:af:
ae:d6:c3:fe:9c:32:3d:32:00:05:1a:b5:a7:6e:d4:
7e:d0:a0:38:35:34:ef:3b:2f:bf:b9:72:bc:d7:d4:
62:0b:43:01:26:5a:89:65:cc:78:3e:5b:8d:b4:eb:
40:b1:95:9e:e7:92:31:a3:e5:e0:95:dd:bd:b4:e2:
59:ae:36:6f:63:59:14:e1:f0:70:9f:25:a2:36:84:
a0:c2:60:58:3d:e8:5b:c2:a0:96:35:0e:4f:2f:7b:
30:f9:73:43:38:b9:be:dc:4a:03:38:82:b9:97:5e:
b6:91:be:94:18:67:1f:27:66:6e:ed:04:1b:4b:ac:
15:52:5d:b9:72:e3:3a:62:d7:16:7f:59:26:94:e9:
a1:7f:f3:fa:4a:17:c2:a8:fe:e3:f5:bf:ed:d7:0d:
f6:72:e9:9a:dd:de:75:db:65:33:08:ef:e0:c9:ee:
03:b9:84:6c:ea:9f:8e:4e:ab:e4:55:5a:32:3c:27:
11:57:b6:25:89:c5:ea:01:9a:41:9e:e9:3b:fd:ac:
00:3d:ca:ec:70:bb:c7:84:11:bf:1d:6b:da:6f:be:
50:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CB:BF:B4:D8:69:FE:CB:20:C9:65:33:48:4A:E0:CB:CA:86:6D:D8
X509v3 Authority Key Identifier:
keyid:DD:A0:9E:47:2B:9C:25:A8:5F:F2:3C:9D:B2:42:0A:49:60:87:FA:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3aCeRyucJahf8jydskIKSWCH-lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/619a7e-393b-4a35-99c0-48e69cc98612/1/3aCeRyucJahf8jydskIKSWCH-lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/619a7e-393b-4a35-99c0-48e69cc98612/1/3aCeRyucJahf8jydskIKSWCH-lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:34:59:7e:7d:fa:c8:34:26:81:83:33:ca:72:5e:6e:58:f4:
f0:95:27:12:f2:4d:20:25:8a:3f:4e:74:aa:90:97:75:84:7a:
63:8a:02:3f:0a:61:1b:89:34:83:b2:a6:f5:5d:5f:26:f4:91:
aa:a5:3f:0d:29:81:d1:ad:10:6c:fc:78:41:26:a6:81:28:13:
dd:76:bb:e2:23:c5:24:d1:62:ed:c7:9e:00:16:87:54:a1:00:
fe:97:95:d6:cf:2b:b8:b1:ec:9d:53:3c:da:89:23:bd:0c:39:
e6:b7:52:2b:3c:a6:d6:db:f0:19:dc:ee:52:e8:39:15:76:40:
d3:a9:a9:4c:a1:6a:df:c8:27:1f:83:17:95:90:ba:11:4e:15:
08:0d:01:99:cb:9f:f9:51:41:a6:e4:39:a1:dd:12:06:ab:d7:
8d:c0:a0:1e:65:b3:77:28:81:69:eb:fd:86:94:bb:41:53:5b:
18:81:2b:99:b1:c4:ea:8d:84:65:51:b6:81:61:4e:7a:06:12:
95:e5:7c:d9:ed:a9:22:71:d2:35:b0:a7:db:9a:ff:02:af:62:
a4:e7:54:93:e4:62:41:d8:c4:c5:c0:f6:32:d9:3d:fe:d9:9d:
5a:f7:fd:22:01:82:f5:d5:b7:43:f2:db:e6:a5:13:c1:fd:58:
c2:9b:b8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:36:37 2026 by rpki-client