Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
File: r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft (raw, json)
Hash identifier: CYzdHLseRrKAuBxIvSJhO2yT0a6l3aLPW7Q8X86i4OU=
Subject key identifier: 40:EF:59:E0:93:DE:E7:32:6B:20:6C:06:D0:11:02:96:DE:FB:10:A5
Authority key identifier: AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1
Certificate issuer: /CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
Certificate serial: 01A187892BBED341B689A7635FD4CF5F258A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
Manifest number: 0A65
Signing time: Thu 29 Oct 2026 12:01:15 +0000
Manifest this update: Thu 29 Oct 2026 12:01:15 +0000
Manifest next update: Fri 30 Oct 2026 12:01:15 +0000
Files and hashes: 1: LwqXAM6lPGk_PmFvOULH64ObLAs.roa (hash: MrcdOxOshx/gVLtXaalP4jwQbNYdpAAfBt14JuVSsXw=)
2: r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl (hash: ss7PTS2DTWl/P7qT8KtDL7cZzwMTJ0gi9HvwnFMS4bA=)
3: s-1hinZK4tY9bZC4k9BOYyXjqxk.roa (hash: qbBIxBxOXTtMEXXkSI4yM3F77zIR/XL9wvzMoK2RSOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 12:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:89:2b:be:d3:41:b6:89:a7:63:5f:d4:cf:5f:25:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
Validity
Not Before: Oct 29 12:01:15 2026 GMT
Not After : Oct 30 12:01:15 2026 GMT
Subject: CN=40ef59e093dee7326b206c06d0110296defb10a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6b:b2:af:2d:59:67:51:01:0b:2f:90:c2:71:
cf:17:44:51:c5:b7:75:e5:bd:70:8f:d3:bb:cb:15:
86:bf:ef:41:9e:c1:c3:c6:34:13:08:e9:3a:bd:74:
99:6f:0e:8b:99:fd:6e:38:45:98:e6:f1:36:f4:ec:
cc:36:e0:02:df:f5:65:af:d4:ff:df:6e:5c:73:88:
47:dc:3d:b2:93:09:ad:f0:c1:0b:32:d2:2d:99:1d:
ad:34:aa:42:2c:62:aa:2d:06:e6:3f:61:75:23:4d:
b4:4b:34:6f:21:ae:8a:f5:0e:b2:68:c6:89:e9:6d:
16:74:b6:5c:f1:10:b6:b6:e0:ae:88:5e:a6:25:9e:
c3:f7:00:61:e9:c6:b5:2f:2d:cd:b7:f4:3e:34:fe:
4f:48:c2:09:9c:e4:cc:ea:33:08:16:0b:ac:34:c5:
b7:18:a3:6a:71:04:0f:7c:85:1e:48:13:1e:ad:b6:
7a:6d:0c:35:7a:8e:3c:0f:d0:a1:2b:91:68:fc:3e:
e4:d5:a6:1e:67:f3:aa:27:fa:39:ad:12:1a:76:75:
53:6f:a4:52:59:2a:68:87:ba:1a:2c:ba:76:55:60:
9c:3c:25:a2:ac:66:a8:41:17:f8:82:11:76:c6:7e:
df:b3:ad:25:ee:2d:3b:57:d6:06:b7:fd:41:d0:f6:
8c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EF:59:E0:93:DE:E7:32:6B:20:6C:06:D0:11:02:96:DE:FB:10:A5
X509v3 Authority Key Identifier:
keyid:AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:8e:08:5c:ff:aa:1c:73:35:15:77:1b:80:3c:ca:13:df:ef:
f8:28:d5:f0:f7:0a:d7:60:2f:d7:31:54:06:5c:e0:4d:8a:b0:
90:dd:df:c5:15:98:04:f7:c5:9c:c6:6b:d1:fc:7e:d5:c7:b5:
c0:3f:cf:83:9c:dc:0d:c6:b7:23:34:7f:f4:78:e3:02:c3:54:
14:bf:89:28:02:50:1e:60:be:4e:52:34:ea:0c:20:bd:ad:89:
85:b7:40:d7:6e:49:9a:05:87:cf:6e:3c:e1:cf:95:9d:4b:72:
01:b3:4d:37:5a:69:ec:2a:c8:8c:4d:72:69:f7:cf:4f:48:13:
ee:62:45:ad:eb:6f:4d:95:76:6f:d3:e2:ac:1a:c3:43:b0:f4:
93:89:9e:35:40:3d:1e:87:fd:00:f1:b6:de:ce:84:59:b1:21:
e9:33:19:1d:80:51:c5:3d:7a:c0:58:eb:50:c8:15:66:8a:a3:
a5:e0:2c:ae:42:32:94:65:b4:6f:71:1a:ac:13:b2:7f:8d:87:
40:4d:50:eb:9e:73:2b:1c:f1:78:86:78:b2:2e:d0:cc:26:40:
d2:1b:d4:e5:53:fd:ff:99:57:8f:2b:de:07:b8:38:76:1b:ec:
69:f6:c6:2a:e0:77:94:c6:72:ca:1f:89:c3:6f:15:df:48:e3:
fc:b8:75:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:05:33 2026 by rpki-client