Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
File: 3pDUMpPP6_h-fqsrDVU_0hpulkE.mft (raw, json)
Hash identifier: iQr+uTYXHztAiPYxoNDa52VnFi6ttaCi7HViLs09sQY=
Subject key identifier: 4D:4F:BB:91:E6:A1:41:37:58:BF:DA:FF:9B:67:18:8D:4A:66:96:92
Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
Certificate issuer: /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Certificate serial: 01A18006560F9959FEC775E18C008E7C68FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
Manifest number: 1ACF
Signing time: Wed 28 Oct 2026 01:01:01 +0000
Manifest this update: Wed 28 Oct 2026 01:01:01 +0000
Manifest next update: Thu 29 Oct 2026 01:01:01 +0000
Files and hashes: 1: 3pDUMpPP6_h-fqsrDVU_0hpulkE.crl (hash: 4hQO4OaBdzQFtCp7LZX8NDniGHaEkMHbo8wlJfWGEXQ=)
2: M4QUOFTfojfe9Puztb3G-E5hYsQ.roa (hash: nVwzsK/0G0L0DeqaFuH81eDkbF0VoyZV22ct2zx5OnU=)
3: dyDacYG9aeiRlaiQgtNvE4ErVUI.roa (hash: PdpYlK5IJJ0ruhbi5o/udgWox1/LLP1tGzCkyDFpfcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:06:56:0f:99:59:fe:c7:75:e1:8c:00:8e:7c:68:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Validity
Not Before: Oct 28 01:01:01 2026 GMT
Not After : Oct 29 01:01:01 2026 GMT
Subject: CN=4d4fbb91e6a1413758bfdaff9b67188d4a669692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a5:49:52:a9:58:16:ec:88:aa:8c:e4:05:83:
54:fd:4f:8f:29:c6:ca:3d:ac:df:be:b5:3f:42:34:
4a:3d:69:99:8e:6c:8e:c8:b6:f2:a0:b3:59:bc:4a:
a6:57:dc:7c:1c:1e:4e:dc:39:84:c6:6a:49:f6:19:
0e:8c:2e:89:48:cf:2c:a9:11:bc:ac:1c:5d:ba:0f:
ef:86:e0:8a:a1:39:6c:3c:b9:e8:86:2c:5e:55:d3:
af:91:b7:81:55:38:f9:9b:30:59:82:9c:14:69:f1:
ba:f6:7e:58:ce:ab:84:4d:12:37:30:1b:1e:dd:a1:
ec:98:41:dd:60:47:12:48:20:80:2b:82:5c:a4:ea:
b1:5e:9b:2f:fa:58:a4:bc:2d:e4:f8:38:30:9e:b9:
81:45:fd:dd:e4:24:71:a7:f3:0f:6c:c2:1b:d5:92:
00:30:6b:0f:88:af:79:6c:6e:13:fb:3c:f3:de:2b:
5e:c6:10:9b:ca:d6:e8:7e:6f:a2:ee:83:0f:a6:08:
7e:cb:a2:ee:94:d5:f0:db:69:25:e9:a0:cb:0f:76:
f4:5c:8a:b6:92:0d:7e:e3:0b:3a:ae:eb:31:11:ac:
2b:a0:87:0f:60:fe:77:4d:65:34:dc:49:85:7c:f9:
62:16:1d:e5:83:81:6b:61:fa:a9:0b:66:52:38:d8:
bb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4F:BB:91:E6:A1:41:37:58:BF:DA:FF:9B:67:18:8D:4A:66:96:92
X509v3 Authority Key Identifier:
keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:34:47:fc:df:6a:5a:46:3b:82:19:e4:0e:9e:94:27:4c:ef:
bc:93:c2:a1:c4:58:d3:70:29:45:d8:04:99:60:45:0c:4f:b0:
87:c6:fd:3e:de:52:8d:8d:72:19:8a:81:40:c9:e2:9d:cf:b5:
e6:0b:ca:00:6e:0e:f9:2a:a5:84:87:12:cc:55:0a:14:45:7e:
47:a4:89:c7:e2:1f:02:3d:bb:c6:6c:e8:5a:25:b3:c2:66:c1:
02:b9:cc:3c:a1:e5:a3:8c:93:d4:25:ed:e3:0d:24:19:9e:02:
25:86:98:ff:ab:2d:5e:d4:c1:f6:0a:bd:6d:0c:cd:84:d7:6b:
ed:71:65:11:b0:35:47:39:25:e5:05:fc:75:7c:68:1d:01:69:
e3:91:2e:d3:1b:c7:f7:af:44:3d:5f:6b:fc:ea:90:7f:e4:fb:
33:fa:89:97:40:ac:10:8f:fb:82:95:3f:ba:c0:9c:25:61:1d:
84:22:fb:92:47:de:b3:9a:b8:05:1d:23:9b:f9:18:50:4b:97:
3f:a5:1d:64:74:12:5f:80:d5:be:15:be:23:29:49:4c:81:60:
00:ef:68:50:ad:e3:3d:3e:36:fa:0e:ed:44:11:8f:b1:96:c9:
a3:b4:6d:c4:eb:47:6a:7a:0d:04:1d:ff:7a:cf:99:48:2e:4a:
ef:92:e1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:22:07 2026 by rpki-client