Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
File: 3erZGbhaEwUdAgi34o3cyzmLFNY.mft (raw, json)
Hash identifier: +JA+u4lSh6+SPTsRZ6TJOg1YbLgSZZCl8OPGIYSMeJY=
Subject key identifier: 94:A0:A3:FE:F3:F1:37:C3:FF:2C:C6:36:63:07:B9:3B:67:D9:BB:15
Authority key identifier: DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
Certificate issuer: /CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Certificate serial: 01A14CBD462219FC70CE701D8A328C4CA7C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
Manifest number: 1AB2
Signing time: Sun 18 Oct 2026 02:00:34 +0000
Manifest this update: Sun 18 Oct 2026 02:00:34 +0000
Manifest next update: Mon 19 Oct 2026 02:00:34 +0000
Files and hashes: 1: 3erZGbhaEwUdAgi34o3cyzmLFNY.crl (hash: TppQt3XL8lFmUOAPJvyNM1REAq8OotR6idbvgM5rsJI=)
2: iKwLG1q1sDs9tvR7rIxpNbBHq4g.roa (hash: 5Al8Pm91tYMp0+j7fJGmguSqWX96C92TH8gJMDHEyyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:bd:46:22:19:fc:70:ce:70:1d:8a:32:8c:4c:a7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Validity
Not Before: Oct 18 02:00:34 2026 GMT
Not After : Oct 19 02:00:34 2026 GMT
Subject: CN=94a0a3fef3f137c3ff2cc6366307b93b67d9bb15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c4:c4:d3:da:cb:8a:cf:da:32:13:dd:3a:75:
af:35:0b:1a:c2:a2:ea:36:4e:fb:ce:e2:52:68:a6:
a9:e6:31:60:5e:fc:54:72:5d:d8:fa:bd:4f:60:ff:
1b:66:40:7c:22:18:08:8c:81:e3:d7:3c:1e:77:43:
77:ff:e8:af:20:6d:a8:80:bc:f0:ee:c0:43:4d:4f:
50:ba:5b:72:13:ce:f8:9a:53:e1:fc:9b:3a:83:fe:
c1:43:89:d0:a7:6d:5b:9a:5d:23:5a:c0:24:8f:69:
33:8e:9c:28:33:a1:a6:ca:17:f1:d5:00:da:7c:99:
d1:b3:d9:bc:fe:15:77:2d:6b:c2:ff:5e:e9:29:b6:
53:18:33:cc:da:e2:7d:c4:38:90:ed:b2:9f:8c:6d:
29:7c:f5:8c:d8:15:63:b4:a2:61:1f:cb:e6:cd:5a:
f6:59:25:8b:22:60:5e:28:cd:ef:3b:39:51:5b:da:
e0:18:d1:1e:0f:da:53:d5:d6:74:52:c9:4b:04:34:
62:17:e8:f5:0a:bf:d3:b5:e8:13:8a:da:9d:2b:f7:
3c:2d:a6:36:14:74:b9:a0:01:38:00:30:32:80:86:
de:c5:4d:82:c5:51:e0:7a:a4:7b:42:f0:38:58:fc:
85:31:06:16:24:4f:c9:50:6b:b9:09:1a:c1:2e:cc:
3f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A0:A3:FE:F3:F1:37:C3:FF:2C:C6:36:63:07:B9:3B:67:D9:BB:15
X509v3 Authority Key Identifier:
keyid:DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:8c:da:6f:57:e6:97:2d:ff:87:96:0a:98:ec:d3:d6:9e:85:
f1:1e:5e:f9:da:19:65:83:88:5d:c7:59:b9:82:3c:16:01:52:
e8:aa:01:36:78:b4:b8:63:75:f7:73:96:01:3a:3a:84:cc:e0:
a9:f5:9e:84:dd:09:40:53:e5:95:cc:38:5e:5d:e7:e9:71:44:
d1:0b:ee:2e:2c:ab:ed:f1:7c:f4:8b:8d:33:44:8c:90:44:1d:
60:e4:b5:c1:1a:dc:34:d8:86:25:b9:14:43:3b:33:b5:12:74:
9c:44:92:52:b0:39:1c:82:3d:4f:47:5d:41:ca:51:d0:a9:46:
28:bf:50:f9:aa:fd:33:04:40:0d:13:28:1a:05:b1:a6:52:c0:
26:89:a0:9d:8e:bf:25:9b:21:28:cb:16:a4:32:30:22:a8:76:
0a:77:57:00:e8:60:a7:8e:4a:ad:d7:ac:3b:ef:86:37:dd:6a:
5e:57:dd:3f:96:05:1c:b7:39:2e:fb:21:d2:53:ef:1b:89:bb:
6e:af:cf:e4:81:76:8a:11:6b:b0:9a:b4:9b:d3:8c:66:d6:bf:
bc:59:f0:71:9b:95:06:e4:9d:45:e3:c8:da:da:10:90:b1:7d:
67:c6:ed:bd:3e:02:76:7e:77:0a:3e:8e:d9:1a:19:06:ff:28:
6c:77:78:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 12:05:13 2026 by rpki-client