Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
File: 3SoSF2c-sRypijUTlSBAfJdo38M.mft (raw, json)
Hash identifier: QnqTPLefPbLSTdW9THr2cwWS56BTv28vqkEyWYaVGbI=
Subject key identifier: 37:18:F0:2C:90:31:02:C2:A4:B5:EA:40:90:09:76:29:DD:D7:98:EC
Authority key identifier: DD:2A:12:17:67:3E:B1:1C:A9:8A:35:13:95:20:40:7C:97:68:DF:C3
Certificate issuer: /CN=dd2a1217673eb11ca98a35139520407c9768dfc3
Certificate serial: 01A10A701289AE9FDB1C60221DDE0C466ADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
Manifest number: 038D
Signing time: Mon 05 Oct 2026 05:01:19 +0000
Manifest this update: Mon 05 Oct 2026 05:01:19 +0000
Manifest next update: Tue 06 Oct 2026 05:01:19 +0000
Files and hashes: 1: 3SoSF2c-sRypijUTlSBAfJdo38M.crl (hash: Ft5OjS78QmPTpjhBMqHBmpHA9fjQvBLLks/LZ7Cx/8I=)
2: WQR-Dyl5ml38JzgsrWjiLr-jTjE.roa (hash: 8pC1xGdRfwbbzKrCgP0LBKBZ1huDVz6z9MO3fLjaue8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:70:12:89:ae:9f:db:1c:60:22:1d:de:0c:46:6a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a1217673eb11ca98a35139520407c9768dfc3
Validity
Not Before: Oct 5 05:01:19 2026 GMT
Not After : Oct 6 05:01:19 2026 GMT
Subject: CN=3718f02c903102c2a4b5ea4090097629ddd798ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:55:ac:fa:83:c8:a9:3f:3b:ac:3c:83:54:fb:
d7:98:d4:ea:1f:85:b1:f6:97:1c:13:53:86:4e:b9:
0d:3e:fe:87:80:97:c8:5c:7f:50:a7:90:df:f0:ce:
27:55:8e:19:97:76:71:e2:84:5c:9e:df:3c:ba:03:
0b:ea:4d:23:aa:29:c9:22:13:45:c0:46:59:29:b7:
b5:30:b6:8e:f3:44:29:bc:67:05:f1:5d:d3:b7:84:
a3:ef:0a:3c:90:ed:df:b5:21:ca:d3:d3:e7:1c:25:
a0:16:d4:0c:de:72:5e:8d:03:c4:0e:ec:65:cf:7a:
ea:7f:ad:56:6e:71:69:9c:43:47:ab:0c:b3:5a:8e:
b7:80:13:4a:d3:8b:7a:6e:d9:a1:31:1a:cb:e0:ea:
41:8c:4d:85:13:77:49:e0:bc:28:16:6f:7b:b9:87:
27:48:8d:0a:2b:3c:38:9d:af:8b:76:f2:2f:bc:be:
a4:c0:a8:47:b6:14:b6:41:b3:a8:8b:ec:68:2d:04:
09:5c:9d:d8:38:d7:c6:81:54:b7:7d:61:78:c4:3c:
a4:7b:da:e3:aa:c6:7c:c3:8e:d4:1b:9f:3b:f3:06:
82:e9:09:e2:e2:74:5d:8a:dc:0d:67:22:14:1a:dd:
86:26:23:40:cf:0f:12:9b:e0:b3:22:91:c8:d8:b3:
81:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:18:F0:2C:90:31:02:C2:A4:B5:EA:40:90:09:76:29:DD:D7:98:EC
X509v3 Authority Key Identifier:
keyid:DD:2A:12:17:67:3E:B1:1C:A9:8A:35:13:95:20:40:7C:97:68:DF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e5:fc:de:bd:3a:53:5b:b7:a1:bb:4d:55:58:14:1a:50:33:
9d:4a:da:56:77:ba:91:ca:62:0c:a0:08:8b:3e:1a:26:16:29:
4e:2e:76:25:3a:89:12:a1:fc:73:87:06:a3:1a:7b:a8:4d:d4:
86:7b:d0:ba:9b:6d:bb:d8:5d:8c:3f:d7:db:66:7a:a2:2e:41:
71:db:45:a7:0b:96:98:dd:17:41:1a:85:5d:a6:8c:88:ad:ab:
f6:61:d7:2d:38:9b:80:9c:34:c5:bf:03:fe:34:48:c7:9c:60:
2e:53:02:0b:b5:69:78:1d:c9:48:fd:29:07:e4:ef:96:c9:46:
36:85:14:04:bf:e7:44:2d:69:d5:fd:04:95:9c:d9:34:7d:26:
45:cd:5e:64:42:9f:92:1d:41:5e:e1:b5:d5:a4:65:7a:2d:33:
0f:53:c6:0c:1d:31:02:5c:3a:fc:be:2e:48:98:b0:38:ad:9b:
11:d2:e6:25:b3:92:df:60:e7:a6:46:fc:bd:36:f1:ca:b2:e7:
5f:ec:0f:6e:95:55:ac:06:14:43:08:c1:64:e2:38:36:44:02:
6e:9d:41:3b:3c:0c:fb:80:d5:c5:09:44:da:25:b0:19:38:26:
46:ac:ae:b6:38:3c:89:d9:c7:ed:f6:60:cd:59:5a:76:90:15:
c8:b8:1d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 13:04:41 2026 by rpki-client