Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
File: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft (raw, json)
Hash identifier: ofmWeaKKLULkH4pwBwYIFx/A9i5ZXCBm/OSf1DAcBwc=
Subject key identifier: 67:7A:31:C8:21:AD:13:5D:61:70:7A:92:E1:A7:D8:F7:7B:C1:76:E0
Authority key identifier: DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
Certificate issuer: /CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
Certificate serial: 01A13F02F4942FEE0F6094D2359DAC9FE1CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 10:02:00 +0000
Manifest this update: Thu 15 Oct 2026 10:02:00 +0000
Manifest next update: Fri 16 Oct 2026 10:02:00 +0000
Files and hashes: 1: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl (hash: 81aMqPtx2ixzZk5Qmg1POCLwUpZB455N1baiVNuTMsY=)
2: SIrHAW8-wlZDKzvy2I8a6ATw1Os.roa (hash: J87HrMwqHtHS9Z8HI1NmmjUGTf0po2q7EzVGTEZtP5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:f4:94:2f:ee:0f:60:94:d2:35:9d:ac:9f:e1:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
Validity
Not Before: Oct 15 10:02:00 2026 GMT
Not After : Oct 16 10:02:00 2026 GMT
Subject: CN=677a31c821ad135d61707a92e1a7d8f77bc176e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3c:19:fe:a5:49:0b:3f:2d:ab:ae:ed:1c:f9:
d3:fb:a6:5b:ed:fa:dd:03:91:1c:12:ba:60:b0:b6:
13:06:3e:01:1d:26:bc:78:bc:d7:9d:f5:28:83:29:
8c:da:75:00:7d:15:93:dd:d5:f2:0d:a6:1f:89:f3:
68:b9:24:cb:f4:79:1e:96:bf:d5:ff:30:47:a0:37:
82:c6:ea:e3:34:29:80:76:f9:00:5e:2c:85:8f:8a:
ee:ff:b9:56:96:0c:6b:b4:52:8b:a1:ae:13:64:93:
0c:d5:75:4c:01:24:a6:59:0b:bd:45:6e:03:52:1f:
06:43:24:dc:57:3c:59:3d:e7:82:73:d5:66:e4:98:
01:3a:12:8a:cd:b6:67:39:d0:dd:49:c4:91:95:27:
af:e9:ee:00:ab:92:af:98:10:e4:37:22:a1:b9:81:
6c:44:e4:36:db:41:2b:48:59:dc:18:93:e6:87:2b:
3e:47:89:d5:e8:f6:ff:66:de:0f:29:de:47:bb:34:
4e:62:01:32:3a:15:c5:3f:98:de:ff:c1:f3:5e:c5:
25:e6:4e:cb:ff:0b:c0:29:75:bf:40:84:14:df:7d:
6d:32:ef:e9:74:58:f4:ac:3a:a1:3a:f2:7e:15:a1:
7f:46:18:56:5a:da:2c:0e:20:a0:61:bc:23:34:a2:
ea:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7A:31:C8:21:AD:13:5D:61:70:7A:92:E1:A7:D8:F7:7B:C1:76:E0
X509v3 Authority Key Identifier:
keyid:DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:0c:da:ae:59:d9:00:30:3e:9d:e5:53:d2:71:c5:fd:1a:0e:
1d:db:85:e5:34:35:5f:f0:27:25:3f:e8:b6:08:0a:68:7b:1d:
ae:2b:68:b6:04:4e:b3:85:d5:b6:3c:3d:d4:72:04:6c:0a:85:
7e:17:c3:e5:68:7d:93:51:6e:f5:0b:b2:1b:22:09:11:fc:23:
c6:8d:19:09:52:e2:ef:38:9d:bc:8c:7d:14:13:a6:b4:5b:83:
65:f1:07:01:21:21:b2:b4:22:c0:3e:e0:8b:bd:1d:8b:e3:27:
ab:08:c7:ae:cc:13:a5:05:a2:17:5f:29:ea:5c:7c:b9:53:1d:
0c:5c:e1:b1:b4:23:ad:5f:1f:49:5e:f6:71:bd:aa:4c:03:85:
97:61:20:ed:ce:10:05:9c:9b:a9:64:58:9a:cd:3f:4b:b9:aa:
a1:7a:13:22:d0:c9:18:e9:96:df:1e:3a:76:be:34:61:c0:02:
3c:00:8f:65:4f:2f:b0:c4:ba:7d:5f:df:29:fe:67:16:2c:95:
3f:5c:f7:ea:ca:f9:61:91:29:dd:05:27:e0:64:40:12:5f:4f:
42:97:d4:23:ad:4d:c9:2c:dd:45:79:ba:a1:be:cf:15:f8:fb:
30:43:d0:61:a0:21:e5:d1:d0:ed:92:0d:65:fd:19:d3:d8:09:
41:d0:7b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:17:52 2026 by rpki-client