Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
File: 3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft (raw, json)
Hash identifier: txzeaoXU21EVi1uaS5YsEEOWWsOvmPP5RxrrZowhMec=
Subject key identifier: 52:67:3B:28:C8:40:6E:66:B4:C4:D7:D3:D7:0B:B5:C2:4F:23:71:A6
Authority key identifier: DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94
Certificate issuer: /CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894
Certificate serial: 01A13F39C64860FC6299B7653236A66E28B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 11:01:52 +0000
Manifest this update: Thu 15 Oct 2026 11:01:52 +0000
Manifest next update: Fri 16 Oct 2026 11:01:52 +0000
Files and hashes: 1: 3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl (hash: XzW5ZzTiCtY+ssTZjocFh2lX0SLxUJz3kTfd0hH8aoI=)
2: nFQlym1aMKDG1iZXPXNlMoKyhB0.roa (hash: r3sbYclJIQsvLQBD+qrAOMivPnh7tcPSSaMitIINazI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:c6:48:60:fc:62:99:b7:65:32:36:a6:6e:28:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894
Validity
Not Before: Oct 15 11:01:52 2026 GMT
Not After : Oct 16 11:01:52 2026 GMT
Subject: CN=52673b28c8406e66b4c4d7d3d70bb5c24f2371a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fa:fe:61:77:34:d7:fb:92:29:3e:3d:33:e4:
0f:cd:f4:97:2c:cc:17:9c:35:8d:2e:3e:fa:5f:b6:
26:9f:01:10:44:45:67:27:70:72:00:91:83:05:b0:
7d:17:f5:5e:ef:91:e8:c0:a8:31:fb:8e:3a:e0:f8:
f4:b4:1d:33:39:93:d0:9f:53:41:68:f4:af:75:9b:
0c:3e:c9:2c:43:97:21:a5:ec:a7:3e:5e:6e:5d:8a:
44:8f:ec:07:ca:be:1b:7e:a6:c6:34:ee:a6:5a:6a:
23:53:fb:92:b1:b2:ec:e3:d2:5c:cd:7d:e7:53:40:
ee:fa:23:ad:2e:c1:58:7e:f7:f2:5a:26:ce:72:56:
9f:e8:c6:f7:fd:32:8b:f6:00:38:24:d6:a2:dd:67:
19:95:9b:d2:82:88:29:6b:69:c2:be:5f:4b:2f:24:
61:60:7f:79:94:1f:5c:b6:56:8d:a1:eb:85:15:3b:
74:06:a5:25:1d:d1:a0:a7:3d:63:68:12:4b:01:9c:
e4:2e:37:d7:34:6f:7e:19:c6:34:af:1d:54:f6:1c:
8b:e2:2b:63:a3:85:4f:6d:70:64:49:e8:a2:01:6c:
4b:2e:18:df:05:e6:50:3b:86:f7:ef:b5:b2:b7:6d:
e0:2d:b6:c2:cd:9c:82:45:7e:5a:c0:72:7b:7d:c7:
3a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:67:3B:28:C8:40:6E:66:B4:C4:D7:D3:D7:0B:B5:C2:4F:23:71:A6
X509v3 Authority Key Identifier:
keyid:DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d2:93:f3:79:8e:4c:70:4f:5f:c4:7c:7f:59:4c:67:12:62:
2f:9a:a1:13:5a:ef:0e:e4:0b:97:21:cc:4e:18:96:1f:66:d0:
46:55:bb:28:83:3a:59:58:7f:82:50:da:9d:7d:01:fe:c3:2e:
c3:22:13:52:98:06:8f:14:92:65:20:8e:1a:ab:b4:a4:36:1d:
e3:c2:ae:44:7c:b3:6c:eb:e3:6e:2a:49:65:37:ff:d8:13:b8:
f2:50:2b:86:b6:48:f8:bf:a6:bf:4c:58:f3:56:a2:7f:53:b0:
a4:93:80:c0:1c:4a:4f:5e:6b:5c:7f:a7:5d:f1:c8:7c:9e:85:
6e:ab:52:cf:51:19:21:0b:d5:e8:b9:37:6f:e6:79:d8:5e:cf:
9c:56:00:d1:43:31:53:e5:ff:02:51:d7:3c:95:ea:01:41:54:
65:33:41:02:26:85:0c:59:f1:a6:aa:7d:42:4a:df:44:86:8a:
81:a8:44:24:99:24:2f:65:fc:1f:45:ec:43:81:10:da:63:a8:
7c:93:86:27:3d:ee:20:30:69:2c:a2:ff:45:5b:bf:06:c2:9c:
55:ef:94:96:73:c6:ed:f4:fa:7c:36:b2:4e:19:99:7b:75:1c:
d1:a0:f7:62:1f:90:21:2b:d6:eb:b1:94:81:22:e9:bc:6a:d9:
40:b4:d4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:26:03 2026 by rpki-client