Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
File: 3-xclF0DU12WcwlREFRrHJjmGGA.mft (raw, json)
Hash identifier: dfMZGJYm+uHj4kI4pCqPGi/2m8iOK8z/RJAN1FVrU+I=
Subject key identifier: A4:20:19:BE:50:58:1A:DE:70:58:D0:83:A9:98:9A:03:07:4B:B6:EF
Authority key identifier: DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
Certificate issuer: /CN=dfec5c945d03535d9673095110546b1c98e61860
Certificate serial: 01A13E95157C785183CD16DE0E66812C9B6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
Manifest number: 1459
Signing time: Thu 15 Oct 2026 08:02:00 +0000
Manifest this update: Thu 15 Oct 2026 08:02:00 +0000
Manifest next update: Fri 16 Oct 2026 08:02:00 +0000
Files and hashes: 1: 3-xclF0DU12WcwlREFRrHJjmGGA.crl (hash: ufNnEILvuZgduvuSgVphrupvQWyakBfQ2pQ27+UyR/s=)
2: m8pcNIGfAGz5wiEeCJ9aji1_KSY.roa (hash: SgAuRkWCSoQK2KWjI4kALGTvsxbiGO3Jz/Xs4XRVN3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:95:15:7c:78:51:83:cd:16:de:0e:66:81:2c:9b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfec5c945d03535d9673095110546b1c98e61860
Validity
Not Before: Oct 15 08:02:00 2026 GMT
Not After : Oct 16 08:02:00 2026 GMT
Subject: CN=a42019be50581ade7058d083a9989a03074bb6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b5:01:50:2e:33:88:8d:a9:47:7f:34:b1:11:
00:20:f1:e9:3e:73:3a:da:db:4b:68:ea:8b:88:89:
77:0c:ff:b5:74:3d:df:f9:c5:fe:67:f2:fd:e6:20:
65:14:c4:5b:a1:49:51:1a:4c:ac:4e:47:85:83:16:
b8:e3:e9:50:6a:8d:6d:65:5e:5f:8c:8b:eb:e0:5e:
ce:94:10:54:e9:74:b4:2a:f6:43:32:68:a6:f1:1b:
a3:c9:80:6f:19:9a:5b:c6:d8:10:10:eb:c8:3b:98:
29:04:62:0a:d5:52:ce:f7:4d:06:a2:f3:26:79:cf:
6f:a8:38:6e:27:90:ef:d5:7c:92:87:08:70:0f:21:
7c:b1:bb:f6:28:d0:f5:cf:2f:8e:ed:1f:44:f2:45:
ad:32:1b:28:58:cd:a0:f3:34:a9:16:48:f2:a3:00:
18:d1:3c:ad:1b:02:7e:eb:1a:63:e0:31:56:8f:cf:
04:75:6a:bf:68:8e:00:6a:0c:37:e7:70:d7:6b:eb:
18:8c:76:29:c1:36:73:97:8c:99:a9:09:c7:73:a0:
84:d2:77:d2:85:41:60:7b:c1:39:c8:52:70:6c:0d:
ea:0b:7e:8e:07:8a:50:d7:d9:bc:8c:e0:51:56:20:
82:f6:fd:4d:7c:2a:9e:3b:09:b9:c9:6d:94:58:72:
c1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:20:19:BE:50:58:1A:DE:70:58:D0:83:A9:98:9A:03:07:4B:B6:EF
X509v3 Authority Key Identifier:
keyid:DF:EC:5C:94:5D:03:53:5D:96:73:09:51:10:54:6B:1C:98:E6:18:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-xclF0DU12WcwlREFRrHJjmGGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f406c3-2789-43a5-b1d6-ddddef241216/1/3-xclF0DU12WcwlREFRrHJjmGGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:50:29:b7:36:f3:35:e9:f3:f5:a0:1b:c6:ed:9f:96:fe:29:
8b:7b:39:b9:8a:ed:85:89:a9:a9:65:45:12:a2:e1:d4:e8:57:
77:2c:fb:ad:3d:fe:2a:a9:40:92:d1:12:dc:6f:c7:0e:c5:7d:
ab:1c:0f:cd:6d:98:e6:fe:88:41:28:45:fc:9b:9c:d3:04:94:
38:90:2f:ea:83:e9:be:b9:15:8a:2b:90:7f:0b:c3:5a:b1:8e:
40:5a:80:80:4a:50:d8:5f:17:02:94:51:69:3f:a6:6d:1a:a6:
22:30:5a:91:38:d7:e7:d3:07:d6:8b:0b:f7:d4:4d:9b:41:04:
a3:5b:d4:58:eb:f0:95:f2:75:13:dd:77:fd:23:7f:0f:71:28:
e2:72:48:e1:58:6a:f7:e1:18:fa:42:8b:8f:78:1f:8b:a0:a3:
19:5b:58:e2:03:55:06:c1:72:94:a5:a7:b3:58:3c:2b:22:a2:
09:3d:09:30:2e:15:e9:d2:d6:20:73:93:95:ae:d7:d7:c7:42:
eb:37:06:ac:fd:9b:90:94:2b:2c:a5:a9:48:d0:5d:77:e6:3a:
63:38:45:1e:86:95:ce:6a:a6:19:0a:b4:ce:b2:ea:61:cc:d3:
77:b9:2d:82:3b:18:ff:56:b3:10:48:c8:21:e7:23:2b:1b:db:
20:6b:c3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:22:26 2026 by rpki-client