Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
File: 3KCCSJpBQMCnjgPVC2v9VAKwROo.mft (raw, json)
Hash identifier: B38hUYEB2zRsNNtC58rrj1DUFyGWzNrpGTqodcpQfBg=
Subject key identifier: 19:1B:D2:5F:65:4E:36:13:73:FE:29:AA:9B:18:D2:BE:AB:43:19:26
Authority key identifier: DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
Certificate issuer: /CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
Certificate serial: 01A10249432D962DC146484B5F15DA2652F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
Manifest number: 1521
Signing time: Sat 03 Oct 2026 15:01:57 +0000
Manifest this update: Sat 03 Oct 2026 15:01:57 +0000
Manifest next update: Sun 04 Oct 2026 15:01:57 +0000
Files and hashes: 1: 3KCCSJpBQMCnjgPVC2v9VAKwROo.crl (hash: HotJRQWc4wpIexxyBQCAXAi0wUzrFgt5/CoGZNlf7t8=)
2: 8LiOuIicwsY8-ml0zZmX3B_CKY0.roa (hash: PGF9mG8gxQZuhtHniYJ4M8QD71XqK/WXHLHoKAZKACI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 15:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:49:43:2d:96:2d:c1:46:48:4b:5f:15:da:26:52:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca082489a4140c0a78e03d50b6bfd5402b044ea
Validity
Not Before: Oct 3 15:01:57 2026 GMT
Not After : Oct 4 15:01:57 2026 GMT
Subject: CN=191bd25f654e361373fe29aa9b18d2beab431926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:71:c0:13:9c:1a:c7:eb:3d:6a:d4:1f:25:7d:
8c:2c:72:34:5f:3e:5c:ec:ae:67:77:7e:b4:9a:17:
86:bb:e4:fb:d7:37:8c:c7:90:93:e1:5c:1c:6d:5f:
c4:d2:d9:c2:66:59:c7:25:ee:b4:d8:52:89:39:6e:
a5:fd:cd:99:67:cb:d6:cf:e6:e8:de:8d:49:71:9d:
f1:73:a4:35:7e:23:da:2b:cf:22:90:35:5b:7b:03:
70:75:e9:70:b1:51:c7:e4:af:a9:25:33:a5:4f:09:
73:23:89:b7:ab:6d:4e:37:40:58:23:c2:0e:27:23:
c4:bf:43:89:24:dd:98:2e:fd:90:a3:a9:71:5d:b2:
8b:72:71:94:1e:57:8d:90:9d:57:94:4a:23:37:29:
c7:e3:07:f5:ce:ce:90:7b:88:b1:a7:b1:c6:02:89:
db:49:ef:de:a6:a5:05:9c:ab:fb:8f:09:df:11:82:
40:17:38:2c:e3:2a:c7:de:33:82:55:0c:fc:6e:cc:
2d:33:63:e4:fe:2e:51:2c:f6:9d:10:09:1c:90:3f:
88:f3:a5:52:aa:60:f2:4c:fa:66:1f:45:0f:ae:75:
90:3e:90:7c:ef:be:ca:34:e8:2f:6a:8f:0c:cd:cc:
16:1a:40:02:17:99:4c:84:f7:d7:97:5b:d3:c6:64:
69:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1B:D2:5F:65:4E:36:13:73:FE:29:AA:9B:18:D2:BE:AB:43:19:26
X509v3 Authority Key Identifier:
keyid:DC:A0:82:48:9A:41:40:C0:A7:8E:03:D5:0B:6B:FD:54:02:B0:44:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KCCSJpBQMCnjgPVC2v9VAKwROo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/db9bc8-4b06-4baf-8ba8-dfc056545be4/1/3KCCSJpBQMCnjgPVC2v9VAKwROo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:00:1a:84:76:b9:e6:c8:c9:0c:13:2c:fa:12:c4:7f:12:a0:
bb:90:5d:93:91:ee:84:86:60:39:f1:67:60:c7:29:c4:a9:03:
58:49:c9:33:cd:d5:34:18:aa:12:d4:61:a6:52:81:9c:ce:4f:
34:39:8e:a5:cf:4f:0e:bf:28:6e:01:ff:e9:8a:1e:9d:5c:0e:
24:03:4f:a6:7c:1a:ef:73:9d:b4:12:b9:08:0e:c2:83:ee:c7:
b0:20:4b:5e:48:64:8e:65:71:55:1b:e3:f3:2e:93:5f:82:e3:
55:c9:82:b4:98:aa:cd:ca:ef:29:65:bc:90:23:9f:d4:53:15:
24:b5:0c:ab:3c:ec:bf:d3:42:cf:d0:2e:0c:50:ae:e0:2e:22:
a7:be:99:0e:fd:c0:71:4a:c3:04:88:dd:99:a5:ef:46:33:71:
44:31:55:20:94:be:71:5c:22:b0:aa:e7:bc:49:d5:c7:88:2b:
0e:c9:66:44:ec:97:bc:3d:df:ca:b2:6e:b7:91:d8:98:73:ec:
1a:2e:4d:d2:7a:90:a3:6e:cf:3f:8b:13:50:2a:d4:84:ed:31:
d9:a4:d2:0b:6b:2a:49:2b:16:55:6d:5b:10:04:13:98:4d:11:
51:ae:d8:30:d3:59:c5:81:8c:0c:92:f4:a4:e5:29:0a:ce:13:
d6:f7:71:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:47:13 2026 by rpki-client