
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
File: 3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft (raw, json)
Hash identifier: mfQ8m6LT4nqPYDdrRO+PAMIjSMSuPsy10e5t7V/xa6A=
Subject key identifier: 09:F5:5A:7B:CC:C8:62:5E:D3:BA:5A:1A:EC:33:47:71:73:1B:80:E7
Authority key identifier: DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E
Certificate issuer: /CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e
Certificate serial: 01A1404C6E76F4956CBFA32AD4AF3FD11945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
Manifest number: 0DC4
Signing time: Thu 15 Oct 2026 16:01:53 +0000
Manifest this update: Thu 15 Oct 2026 16:01:53 +0000
Manifest next update: Fri 16 Oct 2026 16:01:53 +0000
Files and hashes: 1: 3eK1ZL7O23CEW3-d4NQhqQce6UE.roa (hash: MyvSzm1E1BuNXsJH9y2br5JSC+bFdaTi0xbtRaMTOVk=)
2: 3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl (hash: GLPeeXzaHMXr4flqgCHcZyYIXZZ95w3/eJPocdtE43s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:4c:6e:76:f4:95:6c:bf:a3:2a:d4:af:3f:d1:19:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf20a0685b6fe9754ca22486775b2d8a7e9c11e
Validity
Not Before: Oct 15 16:01:53 2026 GMT
Not After : Oct 16 16:01:53 2026 GMT
Subject: CN=09f55a7bccc8625ed3ba5a1aec334771731b80e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3d:a3:fc:2f:83:9e:0b:d0:14:b8:6e:2c:0e:
ca:10:90:d9:89:23:29:ee:fb:a8:70:eb:59:31:e9:
70:49:90:8c:d0:67:53:4b:7b:c3:89:d6:84:96:6c:
cd:21:5b:57:75:94:6f:0f:8c:66:c4:92:2c:0b:f0:
2f:eb:65:18:68:b2:db:17:0b:6e:10:07:2f:3a:fc:
57:81:b0:f8:a4:bf:87:ff:e9:6e:81:c3:ab:df:0e:
01:e0:d8:ff:20:b6:d9:57:1d:6c:59:81:88:8c:52:
a5:5b:d0:88:d0:d9:f2:d7:4a:0b:5c:0e:b4:a4:0f:
75:22:ea:4e:4c:01:97:36:37:33:30:92:cf:b6:05:
5b:12:02:ae:4a:8a:92:77:10:29:64:e4:c4:67:cc:
c5:f0:2b:b0:8a:e4:e4:f1:0f:4d:2e:bf:f5:e4:e5:
f9:68:fc:88:5b:2d:d4:ca:b8:13:27:ff:8b:b3:06:
06:6d:4f:e5:39:1e:65:82:6e:4e:c1:19:aa:ab:51:
6f:e6:ba:dd:6c:ac:55:7b:7c:8d:30:43:75:2e:af:
9c:19:2e:bf:5b:9f:f5:43:55:ed:70:12:38:f6:5a:
92:f4:7e:3d:4a:6d:ce:65:a1:d4:a5:ad:25:6a:7d:
19:7b:8c:f0:39:c7:61:d2:9d:79:fc:d5:13:4a:73:
b3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F5:5A:7B:CC:C8:62:5E:D3:BA:5A:1A:EC:33:47:71:73:1B:80:E7
X509v3 Authority Key Identifier:
keyid:DD:F2:0A:06:85:B6:FE:97:54:CA:22:48:67:75:B2:D8:A7:E9:C1:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/594c78-4bd0-43d8-814f-58349f740e96/1/3fIKBoW2_pdUyiJIZ3Wy2KfpwR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:1b:63:03:b4:9a:14:61:96:fd:78:95:0a:d6:39:35:a9:80:
ac:25:f0:1f:a4:79:78:10:a7:28:4a:d1:32:2b:a6:e6:7d:0f:
43:88:f3:a3:8b:02:55:97:b5:94:9e:40:a9:79:01:11:48:22:
02:99:56:85:3a:5c:dd:ce:92:db:91:bd:f1:ed:a0:78:9e:2d:
ab:0b:4c:d6:f4:86:e5:b3:7c:e0:ae:06:f3:97:17:48:8f:d6:
b1:79:2d:13:51:8a:c0:d0:f4:ed:86:80:48:04:20:1d:32:4d:
5f:4b:54:3d:a2:ff:c5:84:48:07:fe:03:be:d7:8a:f6:1e:c4:
a8:32:3d:79:7d:cd:6b:ed:dc:3b:8a:bf:02:d3:dc:7f:f7:17:
e3:52:f8:57:fe:f1:e2:31:4a:81:91:85:53:65:34:15:29:d0:
8a:14:2a:07:1a:c5:9e:bf:0c:76:ea:75:20:80:69:9a:b5:02:
95:cf:ac:85:e6:e4:b5:a0:75:e9:af:57:0f:c2:7a:e0:4b:ca:
e2:01:6e:15:01:b9:48:14:0d:08:74:6a:d6:50:cf:d3:0e:d6:
9a:9f:c1:b4:d8:28:af:2d:44:a1:66:44:b2:74:48:31:9c:bd:
1d:5b:45:9e:bb:d6:03:21:8e:25:7d:a6:05:6f:8b:b1:22:b5:
f6:cb:d7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:36:09 2026 by rpki-client