Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
File: 3K5LBHGmGHLEBBQuH5D1B08NbxU.mft (raw, json)
Hash identifier: fdBp1EEQJNQ0mHbSPOrdKvMWMPbj4haVYTdkMMVODjA=
Subject key identifier: E9:03:1C:AB:40:B6:03:AA:A1:25:41:E7:5E:14:9B:0E:B5:26:7D:05
Authority key identifier: DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
Certificate issuer: /CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Certificate serial: 01A13D817B61E7E3E1C4E8244892A9B3B5B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 03:00:58 +0000
Manifest this update: Thu 15 Oct 2026 03:00:58 +0000
Manifest next update: Fri 16 Oct 2026 03:00:58 +0000
Files and hashes: 1: 3K5LBHGmGHLEBBQuH5D1B08NbxU.crl (hash: W2ltmGzKvUcFQvvlcjF6LtzxMYwRwCeeO/WCd6oOQqQ=)
2: 9ZJf1K0dS9GGEr-7vJUqYcT4VlM.roa (hash: 4biyXnO/yjSxTlfFAVtaFC6Bi7sH2DQW0oH896Enc7I=)
3: qsdjnJflN-hqMusJ8mRO3QvIelE.roa (hash: SE6UiCw/dJG6vG+istEe6e9u75qYp7RLjIy5NUM722g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:81:7b:61:e7:e3:e1:c4:e8:24:48:92:a9:b3:b5:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Validity
Not Before: Oct 15 03:00:58 2026 GMT
Not After : Oct 16 03:00:58 2026 GMT
Subject: CN=e9031cab40b603aaa12541e75e149b0eb5267d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b1:ac:8c:88:45:ff:18:a2:de:5d:c0:3f:6c:
a3:77:fb:b9:fa:44:f8:79:ff:8d:c8:51:b9:4e:7a:
3a:5f:04:13:06:6f:da:36:07:e1:20:eb:76:d6:32:
92:8c:28:95:82:ba:6b:dc:f0:78:04:dc:43:79:15:
81:36:3b:13:49:d9:7c:7b:3d:26:ea:ec:bd:56:fd:
ea:d8:d3:ab:3a:6b:ff:f5:0a:00:bf:6f:63:0a:17:
5a:12:d4:40:10:4f:2d:21:76:79:10:55:bf:c3:73:
ba:f2:97:d5:ce:08:e3:c5:f2:a4:79:9f:77:5c:52:
93:17:58:59:82:b0:1b:ab:aa:96:da:58:84:35:03:
e2:90:7d:64:c7:ed:4d:3b:c3:a0:e2:67:07:a1:30:
c4:83:b0:a3:09:9d:79:4c:ea:f6:b9:84:02:b7:dc:
16:23:d0:7e:a4:88:c9:7c:62:db:92:e0:02:00:b1:
f0:44:40:1d:d9:ff:4f:cb:ef:48:90:10:33:1c:68:
14:c4:25:50:d1:64:30:62:c3:74:df:20:96:05:4e:
27:88:eb:d5:19:cd:65:9a:5f:71:9b:c7:f8:04:12:
20:34:b8:30:61:71:cb:96:91:77:08:af:70:f8:c8:
b7:2b:cf:15:9d:fe:e7:64:cc:d3:23:de:83:71:af:
2e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:03:1C:AB:40:B6:03:AA:A1:25:41:E7:5E:14:9B:0E:B5:26:7D:05
X509v3 Authority Key Identifier:
keyid:DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f5:f3:9b:cc:d5:8a:e2:f7:36:0c:59:20:f5:9a:63:4b:cf:
9b:e6:91:e8:5d:15:8a:77:4b:49:40:c6:22:c6:15:92:9f:6c:
44:39:52:9d:c9:10:fe:73:f2:cc:08:57:88:c9:97:8a:a5:9d:
47:e6:de:15:63:0e:d9:1c:b2:a0:e3:d5:2a:f5:ef:12:2e:fa:
e3:3c:45:9e:85:80:4f:1d:a5:3f:22:00:90:19:e6:52:7a:1d:
db:66:9f:07:06:4f:76:fc:10:35:ef:2b:95:d0:a4:32:a0:15:
72:26:a8:8e:ac:42:2c:d6:87:8e:ad:29:f5:75:ec:6b:d5:70:
11:2d:54:40:59:24:fc:71:c2:04:21:53:3d:0a:8b:9c:c9:f7:
45:01:af:74:96:36:63:9e:93:f4:48:15:d2:31:2c:fb:7c:11:
08:8e:58:c7:09:b1:da:d2:7b:21:9f:54:19:51:cf:49:18:06:
01:85:1d:00:36:14:d1:cf:10:a4:0e:23:e3:53:a7:5c:d3:bd:
26:13:bf:ba:06:ec:8c:2e:47:5d:e0:63:21:8e:66:bc:c3:06:
e0:5b:69:7c:6c:19:1c:af:49:be:c8:f4:ad:7e:bf:89:35:fa:
0c:47:c8:cb:54:12:66:67:f2:d2:5f:e9:ad:30:92:ef:88:a4:
a9:57:81:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:18:51 2026 by rpki-client