Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
File: 3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft (raw, json)
Hash identifier: 0iWZXc91apO5ABxq+GdcuVxgv/gRd8JhzJVcngUKujE=
Subject key identifier: 7C:3B:AA:21:5A:64:1F:48:6A:51:2A:A6:F9:B3:00:6A:22:1A:E5:1E
Authority key identifier: DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
Certificate issuer: /CN=dc94bb69453f139a60029e22db0fb3424a906cee
Certificate serial: 01A1746FC74762FB5D8C55F20CD16A631985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
Manifest number: 1804
Signing time: Sun 25 Oct 2026 19:00:44 +0000
Manifest this update: Sun 25 Oct 2026 19:00:44 +0000
Manifest next update: Mon 26 Oct 2026 19:00:44 +0000
Files and hashes: 1: 3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl (hash: IIpnLwq6KMbDLUy/wgtpPPsf5L94TlyfCIFV2DBDy1s=)
2: EvJXEnC7zFUYWLsUXhzwJeb526c.roa (hash: 2yJuq+SaVzl7mv1pagqpW7rfh/6PNh11sR0zDQ+hDZo=)
3: JMtxM_e2f4IyQOe7ag83ATmrnwo.roa (hash: rSI4U1a3IADB916oOPX87Zu4Y5DYpWavrDRX8n8/D+w=)
4: WuAI-H8NlswYvvMAMOlcviEzotw.roa (hash: B7KPgvRjador4ZwI7bCeT1UxGcCpNUqTQunKcDn/m+I=)
5: jZ3FO_mV9WrcoKTLceS8pJGW3yc.roa (hash: jtA00NOXzw+v3t4avm6wslZ9lfOfAkUHsLwcYHyN6g8=)
6: k9aptvqWA05x4uvgA-vKuzilVzU.roa (hash: BJ061QuQOWlxavQBE+4vNFSfiTJRQL5oGm4+Ibheqps=)
7: uY0sFNMzlqwBju7zNYnP8ksOTWE.roa (hash: SVkZbh6uHodPSzQYZV8KL/YnQleGlnDyzyp+5VJFwZ0=)
8: wy2l2xfgQzFulQvXU47aJXYQkIs.roa (hash: 4TLXNlTOb7jyrMM7V/2+VqJpYo+6cOyYEkTpDPdlFeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:6f:c7:47:62:fb:5d:8c:55:f2:0c:d1:6a:63:19:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc94bb69453f139a60029e22db0fb3424a906cee
Validity
Not Before: Oct 25 19:00:44 2026 GMT
Not After : Oct 26 19:00:44 2026 GMT
Subject: CN=7c3baa215a641f486a512aa6f9b3006a221ae51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:88:47:6d:59:4b:b3:2f:7a:a7:0a:d1:36:88:
27:89:af:0e:8a:5c:5e:0b:77:22:bf:02:ae:b2:b5:
ad:e8:cd:f2:55:17:1c:01:bc:06:e2:ac:5c:ca:00:
ad:2f:62:78:dd:e7:e0:d8:46:fd:36:78:fc:f0:82:
e7:f1:00:42:71:89:ca:70:d3:73:bd:a6:7e:89:16:
a6:80:bd:19:a5:e9:35:6d:23:89:e3:8d:53:10:ea:
a3:ba:38:84:84:14:7e:5a:bd:6f:4f:02:dd:07:a6:
d5:ac:d7:f2:50:ab:79:a1:85:e6:ed:a5:da:e5:03:
d6:f7:e0:c3:eb:53:62:fb:11:c0:5e:e5:8d:2c:89:
66:48:3d:ba:99:1b:0f:82:fe:9a:ad:38:4d:7a:a8:
8d:70:e4:1a:57:70:db:af:e3:91:37:78:a0:ed:0b:
bb:0c:18:96:9a:b1:02:80:be:4e:85:fe:b5:1b:9e:
9a:d6:77:4f:44:d9:4e:7d:e8:27:72:cb:f9:c4:de:
e5:31:83:a4:b8:8b:3e:a3:32:9b:ec:a5:32:68:50:
3f:17:cd:a1:e3:c3:c0:84:3a:ec:1d:1d:8f:33:71:
18:00:23:dc:e0:7c:95:14:dd:0c:e2:f7:51:6d:3c:
54:11:34:d3:ab:99:6c:77:ef:a8:9a:f6:55:e2:53:
d6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3B:AA:21:5A:64:1F:48:6A:51:2A:A6:F9:B3:00:6A:22:1A:E5:1E
X509v3 Authority Key Identifier:
keyid:DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d8:5a:b5:cf:00:56:1c:70:3b:d9:31:4e:5d:89:3b:12:15:
9a:56:fa:8f:db:13:b3:e4:97:fa:9d:0e:00:fd:2a:49:a7:59:
c1:36:94:aa:12:08:94:00:cc:99:ee:f7:c2:a4:b6:ef:9c:95:
dd:dd:5e:fe:e9:89:ea:d9:e2:79:fc:60:31:cf:d0:28:73:69:
22:8f:6c:71:33:98:8d:34:2f:fe:4a:54:01:3a:22:93:31:0d:
32:9c:f3:58:3d:5e:27:f8:f3:4e:41:f2:5c:53:3c:c5:31:ca:
62:b0:f0:e1:c3:dc:8b:6c:16:39:ae:09:7c:1e:41:12:4e:3c:
8d:15:5b:33:7e:df:21:64:6a:54:1e:2c:fb:1e:d8:de:3a:1e:
85:b1:4b:ac:8b:9c:71:69:c7:b4:8d:1a:92:38:6b:f0:64:78:
be:83:5b:71:8a:f5:1a:dd:de:49:34:98:1f:17:24:62:8b:fa:
7f:f7:f7:74:d4:82:d2:71:ef:2a:51:5c:64:13:3d:63:63:e1:
7e:2d:a7:1c:23:c3:d9:4b:4a:78:41:3c:f1:db:ad:5b:0f:ca:
c5:21:e7:df:19:4b:33:f2:92:c7:1f:76:da:83:37:80:d4:f4:
d7:5c:78:39:05:c2:41:fe:39:8d:5c:d3:ee:d4:19:5e:a6:5e:
4f:66:4a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:40:13 2026 by rpki-client