Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
File: 3BsrDhzng-t6Ljk__dEoxqnAIjk.mft (raw, json)
Hash identifier: 2Q/pPuTsQG8jTXSCMQ6ij3wu2l/YT04cSwLzf1YRrog=
Subject key identifier: 92:E4:F5:1B:92:59:14:7C:61:66:93:2D:7F:F0:A7:AF:24:29:5D:3D
Authority key identifier: DC:1B:2B:0E:1C:E7:83:EB:7A:2E:39:3F:FD:D1:28:C6:A9:C0:22:39
Certificate issuer: /CN=dc1b2b0e1ce783eb7a2e393ffdd128c6a9c02239
Certificate serial: 01A13CDC20DD3021B73BA1489D2C9E772B95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
Manifest number: 07FD
Signing time: Thu 15 Oct 2026 00:00:21 +0000
Manifest this update: Thu 15 Oct 2026 00:00:21 +0000
Manifest next update: Fri 16 Oct 2026 00:00:21 +0000
Files and hashes: 1: 3BsrDhzng-t6Ljk__dEoxqnAIjk.crl (hash: Cf4Z2KMkZW0ZfNhhNPS32FMpkWdoBiA26kfd7cw4F0A=)
2: 5ejH3yejqFEyn6aqh86TLRcJtvk.roa (hash: vwjQJrlUMM+ImHTAGzl34TDgOISTLZWm5ODvkzATioc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:dc:20:dd:30:21:b7:3b:a1:48:9d:2c:9e:77:2b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1b2b0e1ce783eb7a2e393ffdd128c6a9c02239
Validity
Not Before: Oct 15 00:00:21 2026 GMT
Not After : Oct 16 00:00:21 2026 GMT
Subject: CN=92e4f51b9259147c6166932d7ff0a7af24295d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6e:d5:5f:5e:6f:f8:bd:e4:bd:3f:7c:b1:6c:
63:c4:0f:63:f6:98:57:0e:04:12:c5:ad:50:7b:7a:
9d:3a:16:a0:d8:90:d3:a0:e8:fe:8f:96:86:b3:9b:
3c:a4:f6:bd:45:d5:2c:b0:30:f1:8a:48:0c:bd:79:
66:34:ac:db:41:e3:28:e1:55:2a:f9:49:78:9f:23:
68:e7:9c:7f:99:b6:57:36:f0:36:34:0d:53:b5:4e:
20:1a:96:79:00:5a:bc:05:29:10:f3:6b:30:94:6e:
cb:2e:bc:10:a9:f7:be:30:66:2e:23:28:40:09:3a:
cb:d9:35:71:f2:90:b9:05:70:4b:72:b5:77:0b:0d:
49:e3:25:a7:ce:35:a8:32:4b:2e:45:b2:bd:79:dd:
74:f4:5d:4e:7a:0f:d8:13:74:a7:a0:36:79:68:02:
b1:19:c7:c1:54:59:49:5b:6e:f0:5c:b7:fd:37:9d:
2d:e2:10:9f:ab:c1:3f:e8:0c:ef:5b:bd:00:8a:17:
55:7f:70:e2:91:24:a1:d4:56:1b:d0:2f:f9:c5:a7:
c5:d4:c2:28:44:d9:8e:9a:9a:81:e7:c3:0f:57:1c:
c7:6e:4a:37:af:2e:2f:33:3d:4c:23:f5:e2:b4:e0:
5c:b5:de:09:ea:4c:24:06:2d:0b:ac:65:a7:ae:58:
79:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E4:F5:1B:92:59:14:7C:61:66:93:2D:7F:F0:A7:AF:24:29:5D:3D
X509v3 Authority Key Identifier:
keyid:DC:1B:2B:0E:1C:E7:83:EB:7A:2E:39:3F:FD:D1:28:C6:A9:C0:22:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BsrDhzng-t6Ljk__dEoxqnAIjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/021f83-b37c-4f84-9c9e-adfe7e73dfee/1/3BsrDhzng-t6Ljk__dEoxqnAIjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:25:ce:34:bc:d6:ad:29:35:fd:c6:37:dc:d9:ee:e1:a4:94:
f9:37:0e:59:89:66:2f:f2:a1:20:93:30:21:bf:43:bf:de:6c:
4e:7d:ca:b6:7c:73:dd:97:ac:2f:6e:7c:20:1b:0c:b6:15:f4:
f1:c6:2e:f6:25:db:fa:78:12:80:51:82:3e:a5:19:e0:24:88:
2d:ba:0c:c0:ac:b1:e8:9f:b3:33:27:c8:ab:f7:23:cd:09:42:
b5:4f:f5:3b:92:55:f4:6e:0d:70:56:ee:81:8d:2a:b1:b0:bc:
e6:77:ef:b9:f8:c9:72:6e:e0:c8:ed:71:57:22:d9:3f:36:34:
88:59:02:ac:41:22:cd:ca:68:3d:08:d6:eb:72:ba:e8:25:9f:
cd:1a:c6:0b:ac:e6:8e:c0:84:65:78:2a:45:af:a1:04:49:47:
1a:13:9b:c3:3a:e9:d3:8e:f4:7b:17:ed:38:15:ac:70:fb:1f:
14:15:e8:98:78:09:74:cc:ed:8c:f2:dd:12:4f:44:32:f1:10:
0c:c3:92:3a:3c:d1:3b:c0:db:8b:75:18:7f:55:59:88:d7:2a:
bc:f8:1e:73:7b:a6:f2:d5:db:28:12:cf:4f:7a:1c:60:a7:03:
c7:ce:62:88:14:36:fb:0c:2e:05:2a:e2:1c:f2:9c:b1:f5:1e:
7a:ab:20:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:14:23 2026 by rpki-client