Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
File: 3_XMSEiUO0_onSznH9weT_fX8-M.mft (raw, json)
Hash identifier: YpGre+bGiOP9/1qXCuAF4dUYclh7pbjcv+/g5uvHpi4=
Subject key identifier: A6:2B:49:F8:BE:00:AD:72:42:8C:5E:E0:45:B3:D4:87:E6:4D:97:C3
Authority key identifier: DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
Certificate issuer: /CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Certificate serial: 01A143163201A0EB9E44D0B398C4B7A283B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
Manifest number: 1A83
Signing time: Fri 16 Oct 2026 05:01:30 +0000
Manifest this update: Fri 16 Oct 2026 05:01:30 +0000
Manifest next update: Sat 17 Oct 2026 05:01:30 +0000
Files and hashes: 1: 3_XMSEiUO0_onSznH9weT_fX8-M.crl (hash: IpVOX4EOIeKzDDvWCyfXo1DDrIkRxeZ00Vz01iDbF24=)
2: I_klKsqV4Xc27UFkAneEsuB-gHk.roa (hash: AkW1e4Xf71kIFS8tvO/5F4giqlxcvlPyuHSMW67qHI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:16:32:01:a0:eb:9e:44:d0:b3:98:c4:b7:a2:83:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Validity
Not Before: Oct 16 05:01:30 2026 GMT
Not After : Oct 17 05:01:30 2026 GMT
Subject: CN=a62b49f8be00ad72428c5ee045b3d487e64d97c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:89:ec:8b:87:a2:e4:5e:02:39:26:a0:b1:4a:
a0:83:42:04:a2:df:a7:6b:00:93:03:9c:d2:c9:a0:
b9:66:3c:b4:0c:a7:6e:48:ff:77:67:1e:57:09:1c:
4e:7c:8d:e8:8c:de:2b:80:24:72:6d:6e:af:6f:c4:
eb:f9:28:22:52:09:ef:5b:90:46:50:38:48:61:6d:
fa:6a:eb:5c:18:db:56:59:2e:de:87:34:33:90:22:
e6:9c:16:5e:2e:4c:28:f6:49:f2:2f:23:81:eb:25:
1e:ac:da:5f:7f:36:5f:39:ad:5f:69:be:46:4d:9d:
ba:da:ad:8f:74:f0:e3:cd:02:80:ef:06:f6:53:b2:
53:85:57:3f:1a:35:51:9a:aa:71:26:a8:88:47:c9:
23:b9:69:46:10:a8:3c:f7:e4:09:15:32:98:71:a2:
96:00:13:cd:60:b8:51:a7:37:8f:15:98:9b:cf:4c:
0c:29:39:ff:51:3e:52:4f:1b:87:8a:de:64:c6:45:
cb:ca:1b:89:e7:fb:cd:19:16:1a:f6:c2:75:fa:de:
d7:3e:60:d5:4a:e2:35:13:94:ab:e0:3d:b4:c1:d3:
4a:42:76:e2:74:e9:9c:b8:cd:9d:82:2a:17:55:27:
11:bd:88:62:56:97:02:b8:a5:07:66:5a:c1:3a:74:
5c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2B:49:F8:BE:00:AD:72:42:8C:5E:E0:45:B3:D4:87:E6:4D:97:C3
X509v3 Authority Key Identifier:
keyid:DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b7:e4:8b:5e:b7:06:28:8e:ee:54:0b:07:e5:b4:c4:8c:16:
0b:8c:a7:3e:02:ad:da:99:2b:1c:af:09:95:ac:9d:29:1b:93:
fe:36:21:dc:74:ee:41:32:b5:3a:dc:d9:04:9d:16:8e:7c:40:
a1:fb:79:5a:6e:83:d2:f8:fc:ec:1c:db:d2:ed:f1:b2:ca:55:
ed:fa:21:1e:3a:09:6f:73:fb:10:07:8f:5b:33:25:13:a9:d2:
de:a7:81:a1:ad:5c:a6:57:60:ea:4c:94:37:8a:60:da:e3:e6:
d0:cc:ff:08:f2:cb:8b:be:b7:25:d3:76:81:4c:9a:8b:f1:c8:
b9:43:48:e9:0a:26:48:52:ee:8e:fc:08:b7:72:c0:23:f1:db:
c9:12:94:e7:02:55:26:ef:a6:42:1c:7f:48:d5:9c:1f:9b:45:
da:c5:1a:71:6d:39:b8:3c:9c:7e:56:01:b3:7d:2c:fa:03:bb:
8d:1b:ba:cf:4c:0f:ad:69:53:5f:60:22:cd:17:6d:1b:9d:c4:
09:d8:1a:1c:ab:b9:c4:11:33:7d:b1:80:f5:c9:33:14:40:93:
27:91:03:f5:cf:31:fb:1f:ce:20:c5:80:16:ef:db:cd:ff:4c:
15:67:2c:70:b8:1c:27:08:c0:6e:b8:97:5c:3a:e5:77:21:c3:
bb:e9:12:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 11:50:21 2026 by rpki-client