Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
File: 3SoSF2c-sRypijUTlSBAfJdo38M.mft (raw, json)
Hash identifier: mwk7tV3oMQpJyBp9K/rwARiiNZEjzY9PwwUmKkVMq+M=
Subject key identifier: 46:95:7B:B8:E8:97:33:7E:92:30:5F:A2:A1:89:5D:75:95:46:36:D5
Authority key identifier: DD:2A:12:17:67:3E:B1:1C:A9:8A:35:13:95:20:40:7C:97:68:DF:C3
Certificate issuer: /CN=dd2a1217673eb11ca98a35139520407c9768dfc3
Certificate serial: 01A10E4C5EDCE35584016F124B7317258690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
Manifest number: 038F
Signing time: Mon 05 Oct 2026 23:00:48 +0000
Manifest this update: Mon 05 Oct 2026 23:00:48 +0000
Manifest next update: Tue 06 Oct 2026 23:00:48 +0000
Files and hashes: 1: 3SoSF2c-sRypijUTlSBAfJdo38M.crl (hash: Rfmj35bkyFMdwwtg7lgQqvblYujH4NvSSkFVmsSM89A=)
2: WQR-Dyl5ml38JzgsrWjiLr-jTjE.roa (hash: 8pC1xGdRfwbbzKrCgP0LBKBZ1huDVz6z9MO3fLjaue8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:4c:5e:dc:e3:55:84:01:6f:12:4b:73:17:25:86:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a1217673eb11ca98a35139520407c9768dfc3
Validity
Not Before: Oct 5 23:00:48 2026 GMT
Not After : Oct 6 23:00:48 2026 GMT
Subject: CN=46957bb8e897337e92305fa2a1895d75954636d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2c:2e:89:40:0e:a4:8d:73:50:06:57:88:27:
1d:1b:40:a8:22:56:8c:dc:87:8b:34:dd:3e:f5:0a:
b9:b8:48:4c:42:e7:9d:d3:67:32:c9:40:2f:e0:58:
49:37:85:70:20:81:d0:11:b8:71:17:ee:7e:4e:fe:
5d:15:11:a8:d8:e9:47:eb:d4:14:bd:05:27:5f:9d:
ea:0b:ab:2a:a9:d9:1a:88:32:db:a5:fd:0b:1a:25:
f4:d2:ff:93:94:77:2a:b6:f3:52:f3:fc:b6:1b:61:
d3:b7:df:b6:93:0f:40:43:ce:99:b4:fd:cb:fc:78:
7b:e7:c6:3d:75:ad:72:d2:54:7b:0a:fe:b4:9c:7e:
5c:e1:f7:d4:08:ee:6a:4e:97:62:d6:3b:f1:fd:d7:
55:cf:c0:d4:f8:a7:f7:67:da:43:12:07:a6:c8:c5:
1d:e8:3d:7a:f1:63:31:af:4c:a8:74:18:b9:8b:9a:
bd:0e:fa:5d:40:56:2e:84:24:ac:53:45:55:db:fb:
b3:a4:ae:6e:01:87:6e:32:1c:25:b3:4f:bc:18:79:
04:d6:4f:da:59:42:58:a3:67:cb:43:ac:a5:fb:56:
aa:3e:1f:0e:5f:3e:d3:59:18:bb:ce:f3:30:1e:22:
e1:ea:a2:4d:aa:f2:90:be:c2:04:79:5b:8a:d5:a1:
71:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:95:7B:B8:E8:97:33:7E:92:30:5F:A2:A1:89:5D:75:95:46:36:D5
X509v3 Authority Key Identifier:
keyid:DD:2A:12:17:67:3E:B1:1C:A9:8A:35:13:95:20:40:7C:97:68:DF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:9f:ea:14:4f:42:a1:8e:ed:94:75:b7:39:29:a6:4a:8a:a1:
8c:ff:ff:de:e0:2d:9a:ef:20:fc:e0:6c:0c:cd:ec:15:fb:1c:
0d:c6:ee:08:8e:ab:d3:7e:d2:5a:73:45:09:4d:86:53:6f:69:
fc:c0:c2:fe:8c:2c:1c:6f:9f:71:1e:c1:b1:89:dd:e2:6a:4d:
d6:76:2f:9d:f1:42:ef:13:f3:b2:1a:b0:04:63:54:ac:7e:09:
e4:00:3a:e3:bb:19:07:49:02:95:63:8a:9d:5d:ad:6d:cd:a6:
26:14:00:9f:70:66:75:32:25:f9:72:fa:bd:f5:c1:9b:9e:e6:
77:9f:f3:a0:97:77:bc:74:97:a6:cf:31:04:ff:39:6a:3a:b6:
f5:52:7f:c0:80:81:ac:84:7d:54:07:5d:28:5f:85:e0:32:f9:
8c:23:46:3a:d0:ce:83:40:6c:07:eb:85:61:fa:8d:b5:ed:ec:
d7:d7:1c:69:8c:d3:a6:23:bb:65:e8:d4:d0:41:3a:46:fb:15:
92:1b:7f:48:8f:84:ef:5f:64:f1:3f:d2:16:06:3b:15:99:eb:
5b:8a:2d:dd:7a:69:3d:9c:43:2f:35:68:0a:fa:cf:bd:a4:f3:
92:f4:49:54:02:d3:ef:1f:8e:31:9b:05:a0:4c:5d:f5:66:8b:
a2:02:ac:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 08:42:37 2026 by rpki-client