Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
File: 3Go3QvDw-xIJIrM57wHOz4f00e4.mft (raw, json)
Hash identifier: KrTeJbNRBBxldSjoi1YUDwfxDkq2t7Q1DHVdJa4bW9o=
Subject key identifier: C4:8A:71:CB:AF:5D:65:F5:09:AD:C4:05:6E:E5:B4:0D:B8:4E:48:5A
Authority key identifier: DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
Certificate issuer: /CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Certificate serial: 01A13F398EC2098182B8CF527307BC1CBE75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
Manifest number: 1AA7
Signing time: Thu 15 Oct 2026 11:01:38 +0000
Manifest this update: Thu 15 Oct 2026 11:01:38 +0000
Manifest next update: Fri 16 Oct 2026 11:01:38 +0000
Files and hashes: 1: 1YkIJofGDPbAKhB5ldovfVVJQaQ.roa (hash: ft15usCMKxpuecv7eKItu1OCSt1aYNUn7zhbarfUJ4o=)
2: 3Go3QvDw-xIJIrM57wHOz4f00e4.crl (hash: 8SF1XhLGSRoTDXoD/iAbrXNsd8yzfhQYMzeyFwkmbe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:8e:c2:09:81:82:b8:cf:52:73:07:bc:1c:be:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Validity
Not Before: Oct 15 11:01:38 2026 GMT
Not After : Oct 16 11:01:38 2026 GMT
Subject: CN=c48a71cbaf5d65f509adc4056ee5b40db84e485a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:da:e5:be:9d:df:a1:ea:c2:84:c2:42:c6:34:
4a:1b:58:83:12:dc:99:95:75:05:d2:f7:05:ad:f5:
c2:f0:86:34:05:7f:e1:05:4a:88:42:26:ce:fb:91:
30:3a:d7:15:42:3b:3c:ff:c1:79:4a:a4:59:10:77:
a6:d1:31:19:d5:36:9f:31:c9:e0:9a:f6:cc:c0:33:
ac:98:03:e4:d5:a8:41:fc:36:10:1b:a7:39:1a:4e:
e3:8b:5d:cb:b3:39:c3:cd:dc:47:dc:8c:d0:45:b3:
fb:42:06:9d:eb:b9:e3:80:9e:20:b6:ef:a4:a0:26:
f0:04:7e:86:07:93:ef:e2:ac:80:f4:80:67:21:43:
66:36:0b:66:05:27:97:95:57:df:ed:50:f2:ba:4b:
28:7c:de:41:42:11:cc:2a:20:c0:86:2d:e2:5a:93:
37:be:d2:ec:bc:af:90:32:99:21:15:16:b6:be:2e:
63:15:d0:aa:24:30:4d:55:aa:f7:ee:ca:07:c3:e9:
5c:d8:a6:65:90:b5:97:64:be:66:96:93:28:38:6b:
54:8f:01:79:5c:bb:a6:50:1f:86:3f:3c:bd:82:07:
7a:0c:19:25:7a:f1:0e:70:3b:a6:29:bb:6d:45:84:
99:c0:ad:ee:f9:f1:31:a0:0b:d3:ac:cc:72:bd:13:
eb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8A:71:CB:AF:5D:65:F5:09:AD:C4:05:6E:E5:B4:0D:B8:4E:48:5A
X509v3 Authority Key Identifier:
keyid:DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:0e:46:99:19:6e:02:e3:d2:cb:0d:68:b9:ad:5e:89:64:f7:
62:c1:06:61:01:aa:cf:f4:85:47:95:84:24:17:c7:94:34:23:
31:93:5f:74:b7:3f:29:b1:ec:b3:91:e8:6a:7a:17:98:52:50:
01:c4:cc:2e:5a:3f:12:71:09:40:f3:af:cf:71:fd:2f:e6:85:
7e:92:45:9b:12:22:74:5f:c6:37:85:f9:0e:01:ee:66:b4:3f:
bf:7b:11:5c:91:ea:60:9b:f3:89:4e:0e:84:20:6f:7c:99:97:
5d:e9:aa:49:4a:9f:73:36:96:62:b5:ba:40:80:e6:7a:27:ac:
d9:bf:da:6c:33:de:1d:78:75:5c:ba:45:2e:08:53:9a:15:00:
54:03:56:e7:b1:43:c5:80:4d:e6:c7:61:0d:d6:48:d2:7a:3a:
49:10:17:c4:e4:7a:ab:a4:90:12:b1:96:61:f8:30:86:b3:96:
d0:12:83:d3:a4:3f:63:b3:ab:b0:64:5b:14:77:90:31:17:97:
ec:cd:fe:1e:37:33:84:3d:e2:32:78:ea:f7:36:3c:28:9f:75:
36:12:3b:fc:a8:af:59:60:e2:cb:49:f5:b6:3b:c4:da:c6:92:
3e:55:f0:92:c3:c7:59:e4:6b:e0:a2:57:2f:33:56:f2:4c:48:
34:27:33:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:58:31 2026 by rpki-client