Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
File: 3Prn1OadQuT0yV2Z9IK5qUTb78g.mft (raw, json)
Hash identifier: KAj6l0IF9Z7N9GggHXXyICNeqhbQDbat9kvrR/aKKUY=
Subject key identifier: 28:B2:B3:62:0B:D9:A6:86:34:9C:ED:60:C4:6C:F5:19:D0:2A:47:A0
Authority key identifier: DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8
Certificate issuer: /CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8
Certificate serial: 01A17E4F559C036CAECEDE8B2F6B917C2F71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
Manifest number: 17AC
Signing time: Tue 27 Oct 2026 17:01:30 +0000
Manifest this update: Tue 27 Oct 2026 17:01:30 +0000
Manifest next update: Wed 28 Oct 2026 17:01:30 +0000
Files and hashes: 1: 3Prn1OadQuT0yV2Z9IK5qUTb78g.crl (hash: xHfZ8a98/cpDMiqGcqg3XZ+vPl1m1wXsFXFkXBCLuTM=)
2: V7cnWr0yTia_O83ZQ8f1SQpxbe0.roa (hash: V0l2BUlDEC1rED6uk06tkHISjZ000fzVHFtSK8PSDC8=)
3: g6jJ9UyqD8gZUMIuEEYXLhGmn90.roa (hash: Vvh+6n3XDAJwELvj5IwGzupocif24c58GMylsOXJ+aM=)
4: i_ltRwYEioUiSqM_N0IGaAXBwww.roa (hash: i9BjibDTOdKVln71YPwL1G7OdUxiUoFhFjozV67L+Z0=)
5: wQFCgIWKeHWn0AoEBFccOjnC2TU.roa (hash: JB49W9zliA5p5Mlat2myJvjej3ubOs2xynZ5e8qh7Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:4f:55:9c:03:6c:ae:ce:de:8b:2f:6b:91:7c:2f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8
Validity
Not Before: Oct 27 17:01:30 2026 GMT
Not After : Oct 28 17:01:30 2026 GMT
Subject: CN=28b2b3620bd9a686349ced60c46cf519d02a47a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7c:fc:0f:37:5e:18:c7:a0:59:23:76:9a:33:
e8:5a:3c:76:60:51:24:69:94:db:7c:e1:43:50:42:
2e:a3:fe:cd:9e:f5:10:fa:69:4e:a9:00:5d:56:38:
a2:a4:af:c0:63:b1:ac:89:0f:66:9d:8f:92:04:37:
a9:69:a1:a2:ee:e4:53:14:7e:21:54:ca:46:25:05:
1a:36:d7:02:75:5c:7b:f1:71:0c:03:c2:39:57:0a:
11:5f:48:62:ef:3e:83:e2:7e:d1:3a:d8:41:8f:d0:
ad:c8:2b:2f:47:0c:ae:78:de:c8:44:bd:28:c4:88:
b7:6e:75:2a:1a:bc:40:41:8a:63:de:d4:d1:0a:7b:
af:2d:23:6b:f8:05:4a:e5:d5:a1:a3:39:4d:97:1e:
64:1b:1e:e8:e9:e1:db:3d:3c:46:46:60:89:7c:2e:
18:0b:b6:82:28:6a:d8:f0:01:f2:45:36:34:83:40:
1d:a9:d9:04:7a:8c:16:7b:d0:2a:ef:b8:85:cd:19:
7a:f7:2e:e8:c5:46:67:9a:c3:2a:0c:3a:5f:57:a9:
73:36:0e:bb:e6:27:83:b0:b1:93:89:c6:2e:f9:1a:
d2:de:be:4d:6b:31:0d:85:17:bb:02:c6:d8:2a:08:
81:07:51:60:e2:48:44:b0:7e:7d:46:9a:78:56:a4:
9a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B2:B3:62:0B:D9:A6:86:34:9C:ED:60:C4:6C:F5:19:D0:2A:47:A0
X509v3 Authority Key Identifier:
keyid:DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c3:de:2d:9d:24:43:52:4e:10:d3:08:ec:10:28:23:87:f4:
b0:44:f2:6f:1c:de:c9:4e:74:82:6a:85:42:8c:32:9a:5f:ae:
b2:62:3f:af:5d:f8:11:f4:bd:4e:6c:e7:5c:79:b5:f2:01:df:
35:3b:47:37:46:b7:1f:39:b5:b0:07:98:9d:e7:46:a3:5e:29:
75:e9:d8:ae:8e:58:9f:f7:9b:b4:15:52:23:38:f4:73:1c:98:
9f:9c:40:17:00:56:48:98:e7:04:e6:66:70:e9:e6:5b:e9:b4:
85:8e:1e:43:41:08:cf:76:6a:51:b5:fc:77:a9:09:da:55:5f:
cf:1e:09:dc:b8:b2:eb:50:0a:85:1b:c9:e3:de:23:83:f4:1d:
63:9a:60:d9:cd:4a:5d:73:3e:d5:7f:01:16:80:45:f2:11:49:
45:e4:12:8b:76:38:c9:3e:48:5d:c8:92:9d:b8:58:4c:16:ef:
25:3e:c7:85:1b:a1:43:fa:65:b8:c3:05:50:a5:c2:a3:08:a3:
83:e6:43:7c:05:0a:eb:81:5c:7d:11:09:cc:fd:ca:aa:a2:4b:
14:bc:8c:3a:81:06:e1:44:82:bc:6b:27:e4:74:8a:ac:73:58:
c9:7a:17:49:68:8a:46:c2:36:c6:1a:a2:15:dd:f1:d3:7f:2f:
24:f2:b3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:24:48 2026 by rpki-client