Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/f4b9b0-702d-4351-8f26-8ea3bf751f91/1/3HD46wQ8RN9iLnU6t_H3e34du7g.mft
File: 3HD46wQ8RN9iLnU6t_H3e34du7g.mft (raw, json)
Hash identifier: RU75yJ6jFJfn9k5XTOAPMGFQ0I8TjNooGUgzoJPnV4E=
Subject key identifier: 06:DD:90:94:85:B9:74:8A:D9:2C:E8:87:D8:CD:04:80:27:88:AB:D5
Authority key identifier: DC:70:F8:EB:04:3C:44:DF:62:2E:75:3A:B7:F1:F7:7B:7E:1D:BB:B8
Certificate issuer: /CN=dc70f8eb043c44df622e753ab7f1f77b7e1dbbb8
Certificate serial: 01A190C36ACFDC49D6F2FD5F4BBEE2627B8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HD46wQ8RN9iLnU6t_H3e34du7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f4b9b0-702d-4351-8f26-8ea3bf751f91/1/3HD46wQ8RN9iLnU6t_H3e34du7g.mft
Manifest number: 4F
Signing time: Sat 31 Oct 2026 07:01:28 +0000
Manifest this update: Sat 31 Oct 2026 07:01:28 +0000
Manifest next update: Sun 01 Nov 2026 07:01:28 +0000
Files and hashes: 1: 3HD46wQ8RN9iLnU6t_H3e34du7g.crl (hash: LNiU/qUchyQRKX9p4cXNKNj3JJLwYKWOsM6H/dKW9b8=)
2: gEZcdZz7z6dGkLs1cl9tfEFlCGc.roa (hash: Xf7WlANUfn1z8PHRe3mKG3PE8OvnHVCOT/oTuvXYEvM=)
3: sWWsEN31q_NXH27tiXvXsHLbStQ.roa (hash: 3GkdvcbfV03sAP9hrllS3hwfTI6F25H3pl+wgfTOhbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f4b9b0-702d-4351-8f26-8ea3bf751f91/1/3HD46wQ8RN9iLnU6t_H3e34du7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f4b9b0-702d-4351-8f26-8ea3bf751f91/1/3HD46wQ8RN9iLnU6t_H3e34du7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HD46wQ8RN9iLnU6t_H3e34du7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:90:c3:6a:cf:dc:49:d6:f2:fd:5f:4b:be:e2:62:7b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc70f8eb043c44df622e753ab7f1f77b7e1dbbb8
Validity
Not Before: Oct 31 07:01:28 2026 GMT
Not After : Nov 1 07:01:28 2026 GMT
Subject: CN=06dd909485b9748ad92ce887d8cd04802788abd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:59:0f:5a:4f:5a:78:9c:45:73:c6:cc:51:86:
0f:6d:4c:c0:eb:d0:0b:41:67:bb:a4:c7:41:36:08:
d3:04:8f:a9:ea:53:de:35:0b:cc:e0:80:4c:be:18:
8c:6d:a7:3e:7e:f3:34:96:cd:5d:85:23:c1:7a:d5:
6c:f5:24:66:bd:1d:d2:f4:5d:dc:76:1a:9e:13:f7:
97:79:94:22:04:58:5e:22:9a:17:76:3d:9c:a4:be:
ac:23:73:c8:a0:ae:85:ad:09:0a:a8:c4:53:78:b8:
3b:9b:d4:b4:9e:af:7b:43:fa:3d:78:16:f9:f0:fa:
6d:b1:15:b1:13:c5:1c:0f:b3:ca:bb:20:95:a6:c3:
7a:25:63:20:a2:29:ab:ac:57:66:9a:16:10:fe:1d:
97:63:b7:8b:aa:e9:11:8f:34:41:e9:97:11:d3:86:
27:9e:6b:5d:4b:e8:8f:eb:5a:a1:14:2f:ed:b0:36:
9b:50:ca:2a:4e:b3:07:0b:22:99:46:54:5f:77:ac:
bf:31:d1:22:3c:8a:5a:6e:af:c0:f2:fd:97:af:cb:
21:df:12:d1:ad:4b:9e:a2:d2:5f:d6:dc:2f:88:1c:
d8:8e:9f:d3:d8:e8:25:df:30:d2:1d:a6:82:a1:32:
20:a7:65:d9:3b:e8:90:04:d2:0f:a2:c8:09:36:4e:
10:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DD:90:94:85:B9:74:8A:D9:2C:E8:87:D8:CD:04:80:27:88:AB:D5
X509v3 Authority Key Identifier:
keyid:DC:70:F8:EB:04:3C:44:DF:62:2E:75:3A:B7:F1:F7:7B:7E:1D:BB:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HD46wQ8RN9iLnU6t_H3e34du7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f4b9b0-702d-4351-8f26-8ea3bf751f91/1/3HD46wQ8RN9iLnU6t_H3e34du7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f4b9b0-702d-4351-8f26-8ea3bf751f91/1/3HD46wQ8RN9iLnU6t_H3e34du7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e3:34:e1:f5:6d:41:3e:fc:8f:bd:e7:06:7e:c1:a8:2b:33:
95:ae:01:95:b9:4a:12:c0:de:7c:0f:7f:21:80:1a:a8:78:cc:
de:64:ae:22:07:38:89:f7:18:5a:1f:5c:7b:3a:7b:7b:4f:d7:
48:38:e3:fb:64:45:3f:4d:d2:39:23:8c:45:2e:b0:43:64:9f:
4d:70:65:b5:de:04:ec:72:db:09:f2:b0:c6:ad:63:37:ee:86:
d8:01:de:0f:73:a9:7b:6f:92:01:a3:af:fc:b3:6a:e6:66:b5:
96:b7:bb:0c:de:11:69:52:fb:99:25:5d:3c:3e:22:5a:ea:59:
62:a5:cc:41:3c:3d:4a:5b:d9:f0:91:16:58:c0:ac:81:f3:e8:
ad:fd:3c:93:5a:23:ea:6c:f0:f7:1c:89:3a:89:43:f8:6c:69:
e6:d3:47:81:cb:5d:03:a9:80:e2:85:c2:31:3d:b1:a5:52:2a:
d4:17:de:bb:6c:ef:57:3a:3b:94:b2:a4:af:23:65:25:6b:c9:
e4:e3:40:0a:d3:4b:98:72:9c:b5:dd:9a:ca:4a:ef:1d:c0:41:
89:20:1e:24:b4:ef:80:d9:c0:ca:14:9f:55:1e:a2:d4:aa:01:
4f:cc:f0:68:ea:11:dc:cf:37:d6:ba:c0:d0:5e:78:f6:9e:39:
d3:dd:21:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 11:14:55 2026 by rpki-client