Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
File: 3eNumAISZPWoBwEGeAvinUihbGc.mft (raw, json)
Hash identifier: NKWwDy1HmobFMsbsyHRnbmCmPbN6m0Fku1w3eJEVEZ4=
Subject key identifier: 83:12:7A:3B:03:3B:6F:68:A0:04:FF:0D:6A:50:12:91:A9:09:1F:68
Authority key identifier: DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
Certificate issuer: /CN=dde36e98021264f5a8070106780be29d48a16c67
Certificate serial: 01A159D45832CAA328B84653145739B63104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
Manifest number: 13F8
Signing time: Tue 20 Oct 2026 15:00:50 +0000
Manifest this update: Tue 20 Oct 2026 15:00:50 +0000
Manifest next update: Wed 21 Oct 2026 15:00:50 +0000
Files and hashes: 1: 3eNumAISZPWoBwEGeAvinUihbGc.crl (hash: IWwPgTyPYh8u/iA5TYIVXebcQW3SpkF6dwNo3Wk+RZc=)
2: SpTT9-sbWMhVBDjsZYsqJNdl4z4.roa (hash: DetJ0LlDZnlGmwIXOCXqSyycEMtjT8ysire41FdrJY0=)
3: wGffXotQutM5YPxgbpljeS3a9Gg.roa (hash: mICd/WsUOrkWcP68fCHD3+9zyqzcoi13I1Pp/yVs0e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:d4:58:32:ca:a3:28:b8:46:53:14:57:39:b6:31:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dde36e98021264f5a8070106780be29d48a16c67
Validity
Not Before: Oct 20 15:00:50 2026 GMT
Not After : Oct 21 15:00:50 2026 GMT
Subject: CN=83127a3b033b6f68a004ff0d6a501291a9091f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:03:60:97:7a:eb:93:ce:3c:da:48:6d:dc:f4:
7e:f4:ed:33:9f:a8:bb:aa:2a:42:f5:29:85:be:37:
90:93:5b:b1:b4:d5:fa:74:05:1a:cb:55:a0:9a:ea:
e9:81:84:2c:12:a5:e7:f5:75:8b:ff:33:5d:14:fc:
80:12:22:13:60:c5:43:c1:5f:e6:09:46:12:c8:1c:
c0:c7:94:39:8c:64:f0:de:18:8f:04:fb:53:30:ca:
05:1b:9e:53:0c:21:9c:b3:46:95:be:69:ec:a2:11:
70:5b:9e:1b:db:c9:d0:ac:7c:b5:31:f0:ef:eb:c0:
88:bb:9e:7e:ad:0c:f9:41:1e:53:38:6f:c3:20:11:
ea:ef:63:34:b2:02:11:2b:34:33:84:cd:f8:52:dc:
63:59:4d:9e:c7:23:4f:fb:b6:87:d7:29:74:ce:b9:
d4:ca:5b:3b:dd:36:53:c3:ce:44:15:25:54:8c:2e:
77:91:b0:23:4c:d1:54:6e:24:e4:31:f7:05:0d:a0:
f3:21:90:9d:15:c4:7a:1e:c6:68:a7:47:74:fa:92:
35:07:eb:db:09:39:04:bb:c1:03:cd:7e:ad:22:d5:
5f:75:a4:c6:cd:97:81:f7:d4:f1:56:bf:ef:4b:3d:
8a:85:43:96:98:19:3e:14:d4:24:5e:78:d1:48:83:
39:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:12:7A:3B:03:3B:6F:68:A0:04:FF:0D:6A:50:12:91:A9:09:1F:68
X509v3 Authority Key Identifier:
keyid:DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e3:8d:9a:ba:92:82:11:39:d6:b4:69:d6:92:aa:97:ba:51:
93:fa:7f:d8:70:a4:10:58:b8:3c:e1:8c:dc:22:54:8b:80:33:
f9:32:0b:4b:e6:1a:84:71:3f:41:2f:5f:f4:e6:03:1d:46:a4:
ec:a4:2c:32:18:6d:e3:49:90:d6:ff:80:50:46:05:f3:09:4f:
ba:46:49:5d:09:8a:1a:89:ab:55:19:c3:20:18:e4:72:d7:64:
f9:0c:bc:60:22:33:60:51:a3:4b:75:36:18:8f:60:9c:42:29:
66:e9:f8:4e:2a:b7:a2:46:3d:66:a0:bb:78:da:b4:7f:73:f0:
93:7f:2e:89:65:b5:b3:2a:a2:1e:0e:ad:87:ce:5c:aa:32:38:
02:ed:57:ba:f8:28:f9:5a:23:96:1e:db:cf:bb:7b:5c:ac:78:
03:1e:4a:ef:19:a3:b7:66:0f:0c:b9:95:c2:35:e5:a6:33:06:
4f:8f:4b:d6:28:79:e9:f5:c5:69:40:80:63:05:6d:b7:09:95:
ee:b6:1d:99:4e:a9:04:51:1d:25:76:b4:69:9a:57:f6:ab:57:
39:12:17:96:5f:ce:c9:71:d0:e8:92:a3:d3:65:95:47:76:b1:
90:59:af:36:8c:1b:2b:9e:89:64:a4:3d:b4:e0:6a:16:bf:3b:
f8:50:30:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 03:30:21 2026 by rpki-client