Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
File: 3UZwwqb9ciMyf2i62-bQgyK3gFg.mft (raw, json)
Hash identifier: v3Ytgg+O3BDHGUEUvS12xDSLPsis8uN8VIaXxKJd5fU=
Subject key identifier: B6:10:79:2D:17:1D:17:E4:89:09:87:D9:02:A6:12:F8:6D:18:C6:7D
Authority key identifier: DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
Certificate issuer: /CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Certificate serial: 01A1859AAB5C80DC89456D7E578C9781C04B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
Manifest number: 19AB
Signing time: Thu 29 Oct 2026 03:01:08 +0000
Manifest this update: Thu 29 Oct 2026 03:01:08 +0000
Manifest next update: Fri 30 Oct 2026 03:01:08 +0000
Files and hashes: 1: 3UZwwqb9ciMyf2i62-bQgyK3gFg.crl (hash: U88drE7P0YNlDvxZmzWXW7wPe/jy8QL4CDOjFWqF1kw=)
2: bVMAJxgCCY41-bMNJGxkMP_zK8Q.roa (hash: MyD2KvEBFXRQiu4BFiBKjZI4Q2af6YWWceKAjMolm2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:9a:ab:5c:80:dc:89:45:6d:7e:57:8c:97:81:c0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Validity
Not Before: Oct 29 03:01:08 2026 GMT
Not After : Oct 30 03:01:08 2026 GMT
Subject: CN=b610792d171d17e4890987d902a612f86d18c67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e1:fe:b5:84:60:db:34:56:c6:d2:7a:60:04:
4b:ce:73:6a:b2:85:f3:a0:20:c0:f3:b0:4d:6e:f3:
a3:69:3f:4f:9e:f6:4c:4b:90:19:ab:e4:71:4c:53:
50:ee:b2:02:6d:a6:16:be:aa:73:ea:eb:a2:f7:c9:
0c:0f:df:ef:35:a4:a4:59:f5:bb:51:9e:55:4d:6e:
78:bd:f4:44:8b:1e:d3:23:3b:32:04:f4:28:fe:82:
df:32:ac:c8:4c:da:0f:42:fd:41:63:98:7e:84:a4:
04:ff:b9:a9:f4:86:dd:e4:9f:73:1d:26:fb:85:43:
d4:a9:22:48:13:ea:84:51:ec:cf:04:71:43:1d:51:
7d:83:36:f9:d0:e3:dd:5a:9b:41:0f:0d:f4:c7:d9:
a8:f0:ef:d3:8f:d6:00:e4:19:08:81:69:be:49:23:
68:0b:aa:45:a4:88:2f:0c:28:bb:37:56:0e:d4:97:
38:4a:5a:e5:69:9c:2d:b1:8c:53:9d:bc:85:2e:00:
ca:41:aa:a0:4c:80:bb:6c:60:a0:ef:2f:49:1d:7f:
e3:93:73:43:5d:fa:87:81:8c:ed:cb:e2:dd:18:46:
14:fd:40:1a:4c:8c:41:be:5f:9d:f2:e8:d7:35:86:
07:39:5d:c7:8c:8f:e9:41:0d:cc:63:a6:10:58:fd:
68:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:10:79:2D:17:1D:17:E4:89:09:87:D9:02:A6:12:F8:6D:18:C6:7D
X509v3 Authority Key Identifier:
keyid:DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:e6:4b:c6:0b:c4:1b:f7:75:39:32:bb:d8:4e:a7:d9:66:cb:
da:e2:7c:0f:0d:35:20:e7:fd:dd:b0:ef:21:61:ed:50:5e:fe:
8e:24:f0:4f:40:80:b4:fb:f9:a3:1b:58:df:a2:59:08:da:7b:
32:6f:e2:0d:89:7a:ea:8f:f2:75:8c:03:3e:75:e3:d0:c4:1f:
03:a0:0e:8e:2c:4f:48:c2:65:55:8c:06:39:72:fc:54:b7:a8:
f9:88:2a:11:d4:fd:e7:74:27:cf:bb:26:ff:b3:18:0f:d0:d2:
22:32:95:90:9a:8f:0f:d4:a5:71:73:f1:90:a0:c7:65:66:0d:
25:fa:4f:e1:47:e9:15:19:68:c2:5a:51:e9:06:e0:96:74:8f:
34:bf:fb:ba:91:fe:59:fb:4a:b3:04:c7:b3:36:20:06:4c:40:
62:31:d1:a2:bf:92:16:4d:d5:37:ab:4e:e4:0c:18:ff:2d:1d:
a5:72:cd:2f:2b:c2:5a:c1:0b:e6:aa:80:97:20:d4:19:5d:f6:
70:43:35:5c:9c:2f:2b:be:07:70:b5:a3:c2:9a:85:0d:17:6c:
bf:b5:c0:81:0a:28:f0:51:4b:2c:63:5e:42:a5:67:0d:6a:c7:
f7:ab:5c:44:3d:42:ba:dc:78:7d:fc:14:93:65:62:8e:ba:d5:
0a:ea:3a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:49:59 2026 by rpki-client