Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/3cHKqpDJHGKtslTJSjfVxfecXxw.mft
File: 3cHKqpDJHGKtslTJSjfVxfecXxw.mft (raw, json)
Hash identifier: +l/JMc6a3W2WjKXlU1/HBhEjBpJr3J5xQ+wir5L0iz4=
Subject key identifier: C8:CC:DE:93:92:F9:21:C3:0F:E3:2D:F0:33:6B:D6:E7:19:90:01:CE
Authority key identifier: DD:C1:CA:AA:90:C9:1C:62:AD:B2:54:C9:4A:37:D5:C5:F7:9C:5F:1C
Certificate issuer: /CN=ddc1caaa90c91c62adb254c94a37d5c5f79c5f1c
Certificate serial: 01A1347ED305C2C7EC4196018221F8C87A24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cHKqpDJHGKtslTJSjfVxfecXxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/3cHKqpDJHGKtslTJSjfVxfecXxw.mft
Manifest number: 0119
Signing time: Tue 13 Oct 2026 09:01:28 +0000
Manifest this update: Tue 13 Oct 2026 09:01:28 +0000
Manifest next update: Wed 14 Oct 2026 09:01:28 +0000
Files and hashes: 1: 3cHKqpDJHGKtslTJSjfVxfecXxw.crl (hash: tSk1eVlEDXnX7JvzU/oGGT5NyNTc5l9kiwTskNQ56Z0=)
2: YN9Cw4qcHXYpLVHYm4VWqw0i0Is.roa (hash: hKz3CdgByzclOsSKFERuifJCiSNf9f2KayzZQ7/xtmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/3cHKqpDJHGKtslTJSjfVxfecXxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/3cHKqpDJHGKtslTJSjfVxfecXxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cHKqpDJHGKtslTJSjfVxfecXxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 09:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:7e:d3:05:c2:c7:ec:41:96:01:82:21:f8:c8:7a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc1caaa90c91c62adb254c94a37d5c5f79c5f1c
Validity
Not Before: Oct 13 09:01:28 2026 GMT
Not After : Oct 14 09:01:28 2026 GMT
Subject: CN=c8ccde9392f921c30fe32df0336bd6e7199001ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:5b:16:fa:44:99:f0:4c:d3:0e:0e:48:05:db:
47:f3:dc:f3:9a:79:19:d7:78:d9:37:d9:24:5f:49:
db:72:83:7f:88:28:fd:d3:f4:b0:d8:01:f1:74:54:
43:66:da:48:c1:45:90:c2:00:a2:ed:e0:f4:e6:0d:
94:cb:8f:8c:24:b0:84:38:6e:74:6c:eb:4e:16:2b:
7e:ee:b3:43:4a:18:0a:77:34:7c:97:39:24:63:b2:
f8:a3:bb:30:95:7e:18:ec:ed:b9:b3:fb:7b:aa:e2:
91:41:4d:b1:ce:dc:29:2a:c1:9e:b6:43:8b:0f:48:
68:b3:e2:a8:3a:6e:e6:78:86:9a:97:d8:f0:67:8f:
2d:cc:1f:29:71:f2:36:ce:3d:10:52:07:79:5e:fe:
9f:7b:1c:c4:d9:90:e4:5c:a9:4b:c5:52:18:f0:50:
6c:9f:a5:e1:d1:bb:93:1e:a1:4d:10:c6:79:f1:84:
92:ce:49:66:c2:c4:fc:ba:89:dc:a1:a3:65:9c:52:
31:e0:4b:fa:e4:0d:f8:cd:18:c4:f4:0e:d7:bb:5b:
d6:ad:95:21:83:15:7d:ab:1d:e1:0c:15:39:bc:dd:
23:a3:e1:f1:c9:69:99:d5:b1:28:5f:71:53:48:51:
96:5c:9f:30:5a:21:94:5d:7d:86:1c:1d:b5:2c:8e:
5c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:CC:DE:93:92:F9:21:C3:0F:E3:2D:F0:33:6B:D6:E7:19:90:01:CE
X509v3 Authority Key Identifier:
keyid:DD:C1:CA:AA:90:C9:1C:62:AD:B2:54:C9:4A:37:D5:C5:F7:9C:5F:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cHKqpDJHGKtslTJSjfVxfecXxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/3cHKqpDJHGKtslTJSjfVxfecXxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/3cHKqpDJHGKtslTJSjfVxfecXxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:43:af:4d:e1:cd:a4:e8:c2:63:23:b0:3f:a7:99:5c:71:eb:
38:10:95:47:1e:53:e4:5e:2e:9d:39:8d:9b:9d:79:62:c3:ac:
93:76:8c:d8:20:23:f7:b0:60:5c:b1:ac:0e:28:b9:fd:7c:1d:
d9:76:60:08:f2:6b:eb:43:d4:fc:73:05:85:38:4e:44:43:32:
b1:d8:a1:dc:ff:31:ce:c7:e3:a9:a4:b5:db:00:84:1e:a9:d0:
4a:cc:9b:3a:b4:b3:d6:7d:f1:73:27:7d:f4:1f:c4:a6:fa:0f:
e7:97:5e:be:6b:b4:1f:b7:a6:8f:40:35:ee:ac:f3:31:34:f9:
5b:88:4b:a2:fd:82:1b:ca:a4:44:b5:ba:ce:7f:f5:f5:7b:36:
51:65:b2:39:e5:47:5f:cc:ff:a8:c1:9f:98:fb:d5:87:e1:71:
07:d2:c3:76:77:a0:a7:11:fb:f1:1b:97:3e:af:12:51:7c:51:
15:9b:b4:c9:76:80:54:1c:c9:6f:d9:d4:6a:db:37:b1:d6:3e:
d0:e3:54:6c:d4:4d:9a:c0:50:78:49:04:83:de:7d:23:04:ee:
44:07:24:6a:59:d3:10:5f:7d:18:64:7f:03:74:3c:0d:69:5c:
8a:b4:2c:2d:e9:12:b2:27:51:e2:95:c9:7c:e6:84:53:d1:ac:
85:23:3e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:42:01 2026 by rpki-client