Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
File: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft (raw, json)
Hash identifier: vD8XNnsvoh/9jBacE7NVsBge3ymOfWjFP2bRBDS8EQ8=
Subject key identifier: F5:44:6F:59:C0:AB:F2:D9:D6:69:DB:8F:F3:51:42:0D:FB:DD:6F:EC
Authority key identifier: DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
Certificate issuer: /CN=df0198a7b3afdcdd7003562a0871878e238760ad
Certificate serial: 01A16C7F2BE056BDE9F3FBF00F48970B642C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
Manifest number: 1570
Signing time: Sat 24 Oct 2026 06:00:35 +0000
Manifest this update: Sat 24 Oct 2026 06:00:35 +0000
Manifest next update: Sun 25 Oct 2026 06:00:35 +0000
Files and hashes: 1: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl (hash: YB/EhPW7zvTtNU16/gUj/XK+0cJlU/+ZATXyFE+18d4=)
2: SO6QjR1hksAlM1LEwjsSfqyQA6I.roa (hash: ywShTaMxtKmWmIhHqGYn82a6dMwPRqUZ2JHI/iurJ+w=)
3: Y89C32NzpkA3PQGSAOSpiB1CVZA.roa (hash: A3b0H1rBdmLPnm3DdKs/p6L4k7I984tyefEWdXhVLr0=)
4: csf31rqb-Vtp8DxAcvND5Xzia2g.roa (hash: tIcC2hzx8VFbqFhPv8CNA+NzwFonxl1ILY4nFDsUkqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6c:7f:2b:e0:56:bd:e9:f3:fb:f0:0f:48:97:0b:64:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0198a7b3afdcdd7003562a0871878e238760ad
Validity
Not Before: Oct 24 06:00:35 2026 GMT
Not After : Oct 25 06:00:35 2026 GMT
Subject: CN=f5446f59c0abf2d9d669db8ff351420dfbdd6fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:02:cb:46:c9:70:88:be:de:f4:9e:6b:87:98:
1e:5c:d6:96:4c:d6:65:d8:ec:1b:81:18:c8:91:ee:
7f:00:44:76:05:ab:65:b5:c8:0c:6d:aa:00:56:a1:
63:20:c8:dd:d7:bc:df:db:74:fe:16:98:1a:b2:62:
0c:e6:80:0b:f9:3d:b0:b5:88:f2:33:f8:78:ce:9b:
f4:54:7f:d0:f6:b3:54:05:2a:99:c5:8e:3a:97:6c:
ae:1f:37:fe:cb:96:c6:46:23:29:6d:46:87:1d:d7:
cd:fc:9a:21:8d:70:f6:af:56:1e:11:eb:89:d0:d5:
54:03:03:f7:36:7a:ec:2e:19:70:98:c6:89:d7:e4:
54:a0:69:bb:f1:9f:7e:84:72:54:b2:f3:1d:96:d0:
7d:bb:ce:f1:45:7a:f9:e1:ae:10:70:c6:df:f9:5e:
05:73:17:17:ce:ed:d7:85:09:fe:f7:c7:74:5a:7d:
42:e9:ac:5d:1e:aa:9b:1f:90:5d:2a:19:2d:b0:74:
f7:7e:13:83:aa:c9:86:2f:ff:48:2c:cb:ab:22:11:
61:1f:56:1a:86:cd:9a:68:d9:aa:53:c6:54:79:5e:
93:ec:dd:54:c4:58:1f:a7:44:fb:d3:eb:0a:f9:44:
04:2e:56:2f:52:80:e2:4d:e3:68:de:25:21:4a:2a:
36:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:44:6F:59:C0:AB:F2:D9:D6:69:DB:8F:F3:51:42:0D:FB:DD:6F:EC
X509v3 Authority Key Identifier:
keyid:DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c5:59:9b:4b:5b:6c:44:18:a0:5b:cb:46:7b:5b:63:58:bb:
85:e6:20:71:68:8c:06:27:c9:f1:86:1b:15:24:bc:30:0a:10:
94:0a:f7:f4:58:4a:bb:62:e9:2d:a5:1f:08:4b:25:78:05:7e:
c1:34:46:21:36:29:a5:5a:f3:1f:21:5b:40:f1:ac:3b:45:4f:
3d:97:ae:6d:ac:08:5c:3a:f4:06:ea:23:4e:38:a9:73:14:cf:
3d:aa:ce:3f:cc:dd:85:5b:59:80:e1:d0:7f:87:af:95:2c:6e:
8d:79:83:d4:ff:d1:ea:6b:46:78:a4:8e:d6:62:f3:c7:2f:e7:
03:7e:43:73:7e:13:c6:af:68:70:39:28:43:a7:a5:4b:20:b9:
47:b8:cf:4d:be:bc:1e:33:36:34:89:1d:8f:6d:fb:d1:7f:99:
4e:ce:ba:01:c4:ce:b2:37:b7:41:5c:76:e3:9f:bc:e6:6a:df:
a9:1a:d9:f0:e5:4b:26:22:f7:6e:be:eb:ba:b6:d0:0e:46:15:
a2:b3:37:cb:b0:7a:2c:5b:d0:51:3d:0d:4e:c8:97:ba:c5:53:
07:58:9b:09:89:c8:a3:c9:99:4c:64:3e:59:b5:3e:92:6a:48:
3a:b9:3d:af:e3:58:3a:54:61:d6:62:90:f9:14:74:c8:f4:47:
e8:e2:07:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 11:04:59 2026 by rpki-client