Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
File: 3fHfWY9KjzotB0zLb20WtU0dERw.mft (raw, json)
Hash identifier: pqP5Fc68bQR8IHx6PtN67z4wV3NLVX7FoiE20rpCZmY=
Subject key identifier: A5:22:7A:AD:BD:BA:69:EF:46:4A:02:3F:EF:5B:1C:8A:31:85:18:F6
Authority key identifier: DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
Certificate issuer: /CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Certificate serial: 01A13F399F4299B30287B568D33445AF9712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
Manifest number: 1AA7
Signing time: Thu 15 Oct 2026 11:01:43 +0000
Manifest this update: Thu 15 Oct 2026 11:01:43 +0000
Manifest next update: Fri 16 Oct 2026 11:01:43 +0000
Files and hashes: 1: 3fHfWY9KjzotB0zLb20WtU0dERw.crl (hash: UjcBM53ONv/ZuWBgmB/uspw20cDrP9NwK5WOu8iadDk=)
2: 3zlYESujx6iqyh6hQsCczNEcHfA.roa (hash: giiowx0wopsav1ocUyq7di4cnnYmyvwdPI251v0t4Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 11:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:9f:42:99:b3:02:87:b5:68:d3:34:45:af:97:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Validity
Not Before: Oct 15 11:01:43 2026 GMT
Not After : Oct 16 11:01:43 2026 GMT
Subject: CN=a5227aadbdba69ef464a023fef5b1c8a318518f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7c:82:b6:26:79:98:c5:e5:99:46:dd:4f:00:
4f:42:4a:2a:bf:b9:0c:d0:42:0c:33:2a:1e:63:71:
58:d0:2c:8e:c7:75:ba:c2:69:41:76:b1:99:98:45:
fe:95:da:6d:0d:5c:f8:16:1f:96:3c:87:96:09:dd:
98:af:98:ca:cc:5f:e2:fb:82:43:7e:5f:2f:5b:d4:
a2:da:e6:95:17:7f:89:fb:6c:b8:b0:73:cc:9b:0c:
33:82:8e:13:65:12:4b:b0:5c:ff:7b:c0:40:b8:20:
09:60:4b:24:95:31:48:ed:53:8b:76:34:0a:53:f9:
9c:76:25:51:70:63:0e:51:cb:98:89:9b:8e:9e:2e:
d0:53:71:b1:3c:48:ac:fd:7b:99:78:31:4f:13:ae:
83:c9:39:bb:4f:f0:0b:8d:46:a8:b8:c8:1a:e4:cc:
8f:e1:c7:fc:32:69:d5:e4:87:3d:6c:cc:b3:85:57:
bd:3e:10:20:67:78:be:18:7d:e3:b6:51:aa:5f:ab:
fa:89:fd:1b:19:c9:07:ea:dd:2f:98:13:52:c8:90:
bc:0f:9f:91:08:45:e3:c8:1a:76:e6:38:f2:03:3e:
43:da:0f:b7:a1:fe:63:96:ac:8c:69:be:47:48:c6:
26:3f:f3:2a:dc:c5:ed:93:8e:04:dd:d0:9e:10:91:
78:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:22:7A:AD:BD:BA:69:EF:46:4A:02:3F:EF:5B:1C:8A:31:85:18:F6
X509v3 Authority Key Identifier:
keyid:DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0c:58:d9:89:50:c9:7b:85:2e:cd:93:49:75:1f:6b:7c:6d:
3b:88:b5:48:ec:52:17:a5:e9:30:19:90:52:41:e3:22:21:8e:
53:c9:aa:83:39:27:73:2c:a2:d4:d9:10:18:c2:d1:92:cd:14:
a5:3e:2c:2d:c2:0f:8d:84:05:66:0f:69:47:23:db:bd:c8:1e:
da:98:28:8e:29:91:69:0c:df:ab:a5:6b:e0:ff:44:15:97:b8:
b4:ae:dd:f7:0d:73:d1:35:c0:8a:0b:84:d7:21:b5:f5:20:39:
34:fe:f3:f6:c4:87:1a:13:8d:a5:ac:49:8d:e5:1c:cb:4a:9c:
8c:6c:72:b7:e0:4c:51:db:e5:fe:28:0e:b2:13:cb:99:c7:78:
22:b6:b5:f6:ac:9e:e8:8b:aa:cf:ea:d3:ca:3f:92:a2:2e:5f:
25:79:a5:4a:47:49:ed:30:8b:6d:09:cc:74:48:e2:f7:87:80:
a6:f4:7d:22:53:aa:68:e1:f8:34:c9:63:c6:1d:d6:5b:53:2c:
99:1e:de:4b:3b:31:7f:c9:4c:c4:cd:64:67:db:7b:dd:bc:80:
af:e7:fe:cb:49:65:ef:45:36:82:59:61:e4:f0:93:f0:6d:a8:
94:23:ff:98:25:6e:21:b4:b4:4b:af:0d:05:86:13:9f:af:88:
71:7a:fd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:57:44 2026 by rpki-client