Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
File: 3pDUMpPP6_h-fqsrDVU_0hpulkE.mft (raw, json)
Hash identifier: eV7cNJ7z14QSJSrRaxKECat3TXnQrSFyACjybZdQs2U=
Subject key identifier: 2A:08:58:B6:1A:D5:7C:2B:7D:D0:70:00:24:24:3B:FE:F6:ED:E0:B9
Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
Certificate issuer: /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Certificate serial: 01A17C294643A04A451E6605DA744CEE639A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
Manifest number: 1ACD
Signing time: Tue 27 Oct 2026 07:00:41 +0000
Manifest this update: Tue 27 Oct 2026 07:00:41 +0000
Manifest next update: Wed 28 Oct 2026 07:00:41 +0000
Files and hashes: 1: 3pDUMpPP6_h-fqsrDVU_0hpulkE.crl (hash: PKQUBxTJVu2RdPWicmLH2RxBrMsuRJRvv+I3IUSGBQc=)
2: M4QUOFTfojfe9Puztb3G-E5hYsQ.roa (hash: nVwzsK/0G0L0DeqaFuH81eDkbF0VoyZV22ct2zx5OnU=)
3: dyDacYG9aeiRlaiQgtNvE4ErVUI.roa (hash: PdpYlK5IJJ0ruhbi5o/udgWox1/LLP1tGzCkyDFpfcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:29:46:43:a0:4a:45:1e:66:05:da:74:4c:ee:63:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Validity
Not Before: Oct 27 07:00:41 2026 GMT
Not After : Oct 28 07:00:41 2026 GMT
Subject: CN=2a0858b61ad57c2b7dd0700024243bfef6ede0b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ae:c4:79:15:e8:13:30:75:7d:25:25:09:e4:
f6:35:96:48:a5:7a:e4:f8:db:5c:d6:79:7f:b6:24:
56:d7:e0:48:e9:b9:bb:2f:a9:86:91:3b:b6:75:52:
fa:ee:74:86:f1:dc:e5:8e:ff:e5:20:ea:46:07:0a:
80:a7:40:66:02:9e:59:1e:72:11:27:01:e7:35:52:
d5:db:31:9a:31:1e:58:06:26:0b:34:23:ac:1e:3a:
68:f0:24:66:cf:3e:e8:6e:44:17:36:16:de:07:0a:
c2:e0:41:56:af:0a:4b:29:c7:75:ea:a4:c9:73:9f:
e7:88:6f:77:0e:54:9d:ff:54:d3:b5:63:26:57:16:
74:15:7a:61:2a:79:19:b1:a0:71:0e:ec:71:87:58:
f8:e9:8e:1e:f4:d2:97:78:16:87:53:e7:28:04:d7:
f2:db:39:22:4b:5d:d9:cf:1e:d2:40:0a:bd:0e:e5:
45:92:1d:a5:a0:be:ea:3f:6d:d0:80:ca:8d:d4:e2:
63:31:eb:13:5b:35:8c:20:7c:2f:ba:a6:11:2e:b9:
a9:74:47:a6:75:6c:52:fc:1e:cc:e4:7d:a7:96:e5:
34:55:5f:a0:09:92:51:4d:0c:c7:8a:f7:0b:d7:5a:
f1:e7:73:fc:1c:b0:ca:8f:d0:35:b0:9f:71:bc:3d:
b3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:08:58:B6:1A:D5:7C:2B:7D:D0:70:00:24:24:3B:FE:F6:ED:E0:B9
X509v3 Authority Key Identifier:
keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:5c:fe:71:a7:e8:9e:49:80:4c:97:d7:c6:17:65:da:6c:06:
96:21:08:bd:62:77:4d:c4:ef:88:62:32:33:6f:4a:17:3f:29:
ba:60:32:72:71:d4:f1:ae:f3:da:2e:29:4e:90:4d:6c:6a:57:
74:cc:cf:50:c9:92:99:20:08:0d:5a:67:82:8d:9b:d7:f6:bc:
0b:f0:e9:a7:77:e5:4e:a5:c7:d9:be:f1:fc:53:b8:6c:7c:6b:
5a:58:fd:7f:28:2f:dd:ad:c3:9d:c9:08:7f:66:0f:14:b3:c3:
67:5a:58:9c:1b:a0:12:a8:36:cd:49:4d:2a:91:7a:f6:ce:ea:
c0:5e:24:57:ac:79:d9:6a:94:a6:8a:cf:60:82:e0:8c:a2:38:
87:66:8f:99:7c:37:0f:02:d5:03:ff:0a:71:65:99:20:ac:45:
c8:ab:79:ef:a2:02:4a:d9:1d:57:26:a1:c6:a7:21:fb:e9:5c:
e0:ad:79:e1:03:00:2a:0f:f4:b1:13:4c:96:91:3d:1d:72:2c:
54:ce:66:c9:b5:0e:94:f1:84:50:62:c2:89:e1:77:0a:8d:15:
4f:8a:cc:8c:37:cb:85:c3:0a:bb:16:06:46:82:11:83:15:c2:
1d:98:fa:ad:0b:ce:b2:81:1f:5f:7d:74:16:dc:a9:54:f8:c6:
9d:5f:0d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:21:44 2026 by rpki-client