Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
File: 3y3kqfK8Uj318Kf15DJJikLFX3A.mft (raw, json)
Hash identifier: oS3BGIJah/0bMfBvm9FfaIpPyhmW0ZzEmpeD5Jh8XKs=
Subject key identifier: 3A:B4:9A:AA:AE:7E:FB:0A:6C:86:9A:48:8E:2D:A0:C6:50:D8:B1:07
Authority key identifier: DF:2D:E4:A9:F2:BC:52:3D:F5:F0:A7:F5:E4:32:49:8A:42:C5:5F:70
Certificate issuer: /CN=df2de4a9f2bc523df5f0a7f5e432498a42c55f70
Certificate serial: 01A18DF892E41335F0C83A2D64D7C6107E62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3y3kqfK8Uj318Kf15DJJikLFX3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
Manifest number: 0224
Signing time: Fri 30 Oct 2026 18:00:40 +0000
Manifest this update: Fri 30 Oct 2026 18:00:40 +0000
Manifest next update: Sat 31 Oct 2026 18:00:40 +0000
Files and hashes: 1: 3y3kqfK8Uj318Kf15DJJikLFX3A.crl (hash: eYSkyspG/UI7Myoaovr4YfY/Wt3U7WMT3oBQGBc40I8=)
2: 8XebNTiumaUWcLbgsrPRqEK7yJk.roa (hash: wIkMYGUwRkloiGV8zcV817/8WXtvc8qz+eDzExEQl48=)
3: SU9_tB5lwfHPL_4Kt4ROwFHlUMI.asa (hash: wN65KwAJllI0kxcg5tgjkk0Y4QH9uf/hvRTzQ2pTovk=)
4: xtsoV3YrVhm4MKDjfu3IvjG7q1g.roa (hash: qMRfu2o1bzSJ1p0UvgBKjKi65ckvS8nI12aCVQ8a6vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3y3kqfK8Uj318Kf15DJJikLFX3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:f8:92:e4:13:35:f0:c8:3a:2d:64:d7:c6:10:7e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df2de4a9f2bc523df5f0a7f5e432498a42c55f70
Validity
Not Before: Oct 30 18:00:40 2026 GMT
Not After : Oct 31 18:00:40 2026 GMT
Subject: CN=3ab49aaaae7efb0a6c869a488e2da0c650d8b107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d5:83:05:f5:e6:be:67:a6:f1:0b:77:61:b1:
87:e7:60:4d:81:54:cd:95:e5:df:62:55:91:01:84:
31:87:07:53:93:45:e7:bd:a9:ef:23:21:11:22:f3:
00:5f:2f:7c:db:49:4f:c5:61:5c:d1:97:f4:26:d1:
10:29:4d:75:0f:46:60:b5:48:b3:a0:33:0f:0d:59:
02:46:d2:3d:05:ee:f1:13:1f:1b:36:19:8b:1a:26:
78:e6:9b:c2:ec:1f:04:de:f0:8f:6b:5c:c5:88:54:
2b:ad:b5:ca:e1:39:46:16:0a:4d:ed:2a:98:2c:d6:
d7:99:1a:6f:e2:f0:57:3d:84:86:48:fc:81:e8:4c:
4e:b0:8a:bd:22:03:16:12:2c:da:6e:b2:8e:88:8d:
7a:47:f1:70:e1:2d:d0:3b:4b:4b:92:56:95:e3:c0:
f3:4e:26:0b:a6:8d:ec:bd:85:5c:27:b5:16:4f:cc:
75:e8:1d:e5:38:22:3b:51:a6:4d:a2:85:76:24:f5:
d4:93:66:e5:0d:91:0d:9a:75:6f:12:a2:85:c7:ff:
c3:17:f1:51:ab:ad:c5:cd:c8:d1:4d:87:43:7b:48:
85:5d:ef:7c:ed:14:8b:41:2d:f7:db:bb:6c:e3:a8:
ef:15:3a:03:d0:a9:2a:e8:bf:8c:be:e5:ad:65:c7:
73:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B4:9A:AA:AE:7E:FB:0A:6C:86:9A:48:8E:2D:A0:C6:50:D8:B1:07
X509v3 Authority Key Identifier:
keyid:DF:2D:E4:A9:F2:BC:52:3D:F5:F0:A7:F5:E4:32:49:8A:42:C5:5F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3y3kqfK8Uj318Kf15DJJikLFX3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:8a:bf:56:0c:60:ac:42:81:44:38:ce:90:d5:0e:25:ed:53:
8f:18:78:6d:82:5e:c1:9d:a7:37:13:ce:ac:e3:f2:25:3a:7d:
02:ff:ad:76:49:b9:64:50:03:a7:43:4e:53:0d:92:e8:ba:22:
e3:b7:b1:8d:5a:03:9e:f9:af:cd:f4:16:7c:d1:d9:f6:e1:2d:
85:e5:63:f3:e4:64:f9:45:15:e8:76:60:84:88:d4:44:4a:0c:
6b:c7:d1:c2:dd:c0:da:5c:15:28:ce:c1:d2:92:9a:8a:7d:98:
ef:45:1b:a4:c5:23:c1:e6:47:c5:37:da:48:9d:70:05:2e:30:
29:ff:0a:84:a6:48:64:36:a0:70:d4:27:ef:cd:e5:c1:0b:0f:
30:58:e9:6c:13:ee:ee:78:3b:28:28:79:33:d3:de:8f:40:62:
9a:c1:a0:12:ca:cf:34:78:15:d0:48:75:89:d0:08:dd:78:41:
65:da:8f:61:c9:8d:d1:c0:25:0a:75:4b:4c:51:0d:db:21:2d:
eb:eb:ef:27:2a:6a:80:37:8b:50:c3:a5:9a:a2:88:f2:7f:6e:
94:7a:69:6f:00:a9:46:ed:dc:4f:63:59:0f:84:f0:ff:3b:e1:
d0:24:44:c2:3b:7b:84:a4:19:58:88:32:cc:63:92:86:fa:7c:
b4:3d:62:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 03:27:18 2026 by rpki-client