Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
File: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft (raw, json)
Hash identifier: pDXIE+YWk4zxLIsRM1fwHXZJRIr5lmySW/O3gT+OvsQ=
Subject key identifier: 1E:5C:F0:75:E5:54:8F:17:F2:B7:78:DE:BE:0E:F3:BF:E4:28:1F:B3
Authority key identifier: DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
Certificate issuer: /CN=df0198a7b3afdcdd7003562a0871878e238760ad
Certificate serial: 01A06D95C85DA3AA36DE7F8949197B6D302A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
Manifest number: 14EC
Signing time: Fri 04 Sep 2026 18:02:07 +0000
Manifest this update: Fri 04 Sep 2026 18:02:07 +0000
Manifest next update: Sat 05 Sep 2026 18:02:07 +0000
Files and hashes: 1: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl (hash: w5hhQ24AKarw81qIGssqefa/WJmDIyM4ot8r5CKjErg=)
2: SO6QjR1hksAlM1LEwjsSfqyQA6I.roa (hash: ywShTaMxtKmWmIhHqGYn82a6dMwPRqUZ2JHI/iurJ+w=)
3: Y89C32NzpkA3PQGSAOSpiB1CVZA.roa (hash: A3b0H1rBdmLPnm3DdKs/p6L4k7I984tyefEWdXhVLr0=)
4: csf31rqb-Vtp8DxAcvND5Xzia2g.roa (hash: tIcC2hzx8VFbqFhPv8CNA+NzwFonxl1ILY4nFDsUkqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:95:c8:5d:a3:aa:36:de:7f:89:49:19:7b:6d:30:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0198a7b3afdcdd7003562a0871878e238760ad
Validity
Not Before: Sep 4 18:02:07 2026 GMT
Not After : Sep 5 18:02:07 2026 GMT
Subject: CN=1e5cf075e5548f17f2b778debe0ef3bfe4281fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:75:5d:70:cd:4e:4f:3b:28:4f:3b:2c:21:35:
f8:0a:1f:c8:3c:9a:ec:65:80:5f:28:38:a2:af:01:
3b:1e:29:ae:6b:ed:b3:ee:2d:72:9c:71:18:fc:31:
20:41:a8:2b:71:5c:c6:9e:52:3c:63:fb:02:c4:12:
d4:a2:ec:16:aa:40:f1:89:5e:f7:85:7c:9c:81:c0:
dc:d0:ec:e0:d8:ed:d6:9b:c7:c0:a8:4b:d6:97:74:
ad:7c:e7:f2:ab:fa:f0:37:f1:53:4e:be:f2:73:d6:
72:00:26:fa:55:a0:25:ec:f0:6c:89:96:39:9a:60:
aa:5e:ff:76:bd:dd:8b:ca:b6:b1:d2:fc:5b:bc:6b:
85:c4:76:8b:eb:8c:d2:07:aa:1d:b5:b9:9a:b2:a7:
98:65:19:0a:8f:40:60:f2:cb:90:91:c0:69:ae:20:
60:f8:47:b5:4a:43:59:34:0c:4e:ad:bc:53:e8:ac:
7a:0c:6a:ff:63:8f:0a:4b:a7:d9:e7:79:20:a4:15:
ed:c2:6d:74:b1:1b:88:bd:65:3d:a7:32:2f:95:b2:
82:e9:29:60:52:14:f1:82:0c:bc:7c:8f:a3:13:e5:
6e:15:04:6f:dc:d1:f5:f4:73:07:dc:14:b2:17:17:
f5:88:81:28:98:46:29:72:02:07:25:ea:21:9f:04:
df:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5C:F0:75:E5:54:8F:17:F2:B7:78:DE:BE:0E:F3:BF:E4:28:1F:B3
X509v3 Authority Key Identifier:
keyid:DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:4e:0d:58:72:75:06:ae:64:2c:9f:f2:04:61:35:33:24:02:
25:33:d3:0e:fb:12:b3:c5:af:b3:31:58:8f:bf:c6:a3:16:cf:
8b:17:aa:b0:fc:b7:f6:59:95:ed:22:d7:61:38:87:ed:d0:88:
e2:40:fd:a5:12:0e:6f:26:97:ab:be:7e:6e:ae:76:81:b6:6d:
d7:60:46:2b:78:06:39:6c:bf:69:0f:f8:cb:cf:31:e5:bc:1c:
75:1f:2a:ef:65:41:39:c5:e9:86:e0:91:06:5f:6b:fa:de:19:
bc:5f:cb:c7:03:8c:e5:13:f7:1c:47:08:2e:8a:91:32:c3:86:
4e:38:4b:74:43:31:3d:38:dd:66:f2:24:88:92:6b:24:6a:b9:
30:2a:59:ac:1d:86:11:38:f8:38:b3:51:08:f3:f3:c5:7d:e4:
44:82:c1:26:55:46:59:a7:e1:7b:00:cb:b0:38:a4:d8:54:a6:
91:5b:be:7f:28:55:6d:78:d0:d1:7e:c1:ee:cf:4e:da:1d:2f:
14:c3:f6:8f:97:d5:3f:f7:a0:7f:b5:d1:59:91:0e:b6:b7:17:
aa:55:50:79:71:97:9e:aa:67:90:ba:88:cf:85:b2:1f:39:d1:
62:8e:9e:9c:f7:9f:1d:7a:55:a3:62:7c:0d:ea:36:62:0a:8f:
13:b5:34:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:35:40 2026 by rpki-client