Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
File: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft (raw, json)
Hash identifier: nZFye/jJ6XvtRUPgulser2RjfkcMN6BuXkhOHx21NJY=
Subject key identifier: AD:37:F3:42:FF:DF:43:1F:15:E7:D7:77:F3:A4:BA:F1:D3:A4:69:FF
Authority key identifier: DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
Certificate issuer: /CN=de51da32762a6f9c126d63ba705d62c050b8484e
Certificate serial: 01A13DB8907D12A80F4F19B0C86C3787BF49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
Manifest number: 1AA3
Signing time: Thu 15 Oct 2026 04:01:08 +0000
Manifest this update: Thu 15 Oct 2026 04:01:08 +0000
Manifest next update: Fri 16 Oct 2026 04:01:08 +0000
Files and hashes: 1: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl (hash: XBMDm3GyScxAvkhHnRM2LGE0mX2e1xb56w1cJZ84u18=)
2: 8J_-hWHGPWEYN0vjZgr-eCklQg4.roa (hash: qBQWLHkgusN1QQCqlJvTYnenuo1KralG8LLl2synFhs=)
3: elKDEgk9yKtQtzq3PdJ4l_cpSZQ.roa (hash: 8uKk6fr9oWkQeVcBDQrXHD0Zpv9/C37D7zWtE6D01OI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:90:7d:12:a8:0f:4f:19:b0:c8:6c:37:87:bf:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de51da32762a6f9c126d63ba705d62c050b8484e
Validity
Not Before: Oct 15 04:01:08 2026 GMT
Not After : Oct 16 04:01:08 2026 GMT
Subject: CN=ad37f342ffdf431f15e7d777f3a4baf1d3a469ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:68:5a:18:eb:23:91:0e:b9:6b:ff:17:ab:a0:
74:88:2f:4e:88:33:ba:92:a7:df:f8:a3:47:0e:ce:
ab:f5:e1:a3:61:7d:cc:cd:ed:bc:4d:a4:a4:91:af:
a4:6f:fb:b2:11:d1:5e:ce:f9:4f:1b:cf:35:65:af:
30:6b:da:79:38:20:3b:32:aa:17:24:b6:69:38:03:
f1:96:d7:ea:b5:a8:96:56:62:da:6b:4b:5a:ce:06:
53:78:37:fc:4b:73:33:ad:0c:f8:2d:91:80:02:15:
e6:b9:bc:2e:63:08:b8:be:60:05:57:4b:c6:0c:c6:
fd:2f:d2:38:4a:02:31:4d:40:75:5f:7e:22:28:ee:
f6:aa:ec:95:8c:09:ea:ab:d2:ad:b5:03:ab:25:1d:
a1:dd:15:ff:e4:c9:2a:d2:f0:32:3a:78:9e:22:c5:
db:98:32:1b:3d:cc:4b:7a:c3:54:de:10:e4:85:76:
73:50:38:fd:91:86:60:d9:ba:d8:f9:db:4c:9f:e6:
29:e8:a4:91:db:cd:13:97:57:14:35:60:af:d3:4e:
40:b6:d4:87:3d:5b:ff:58:4c:fc:5e:78:4e:81:80:
11:87:cb:c2:28:3f:d9:a4:f5:2e:65:e4:e0:27:17:
e9:41:06:1c:14:77:3c:4b:57:7c:87:1f:7e:c3:7f:
e2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:37:F3:42:FF:DF:43:1F:15:E7:D7:77:F3:A4:BA:F1:D3:A4:69:FF
X509v3 Authority Key Identifier:
keyid:DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:a1:27:11:76:39:fe:69:6e:1c:bf:fc:87:39:bb:65:86:26:
37:66:3a:b8:56:5d:d8:c1:d2:00:6b:9c:54:c3:b9:94:71:81:
1f:cf:61:10:bd:0e:dd:24:33:2a:60:22:85:73:30:5e:82:0d:
16:e0:fc:d3:aa:3a:e8:bf:a4:bd:19:18:e1:3b:9a:c0:df:84:
28:9d:68:e3:a0:27:e6:e6:cf:0f:a3:38:b2:d5:91:ec:e1:cc:
e6:8f:b4:d8:be:6a:87:5c:23:34:68:c3:a4:1d:b6:f9:3e:13:
c1:af:99:39:7a:8a:ed:20:e1:a7:ee:f1:94:b8:e9:0d:70:c5:
28:c8:fd:d2:bc:5d:42:6d:20:7c:dc:1c:d5:fb:68:2e:77:6f:
b7:d6:6e:14:ac:22:58:84:ac:ac:63:ce:49:83:46:1a:e7:b5:
31:95:8d:aa:d7:e2:6c:26:29:cf:05:88:f7:09:a8:b0:3d:0b:
71:5e:e0:d9:2f:db:ca:a5:69:b3:5b:dd:ba:5f:cf:d1:2f:76:
47:7a:48:85:4c:c8:15:8e:2b:07:ef:16:ba:12:e0:1f:c9:6d:
1e:b9:99:b0:5e:3c:26:e6:0d:9f:48:1a:19:7b:8a:af:4d:88:
1b:e0:e6:85:eb:fc:0c:79:40:b8:7f:11:bd:ad:ad:92:d4:aa:
99:e5:f0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:30:22 2026 by rpki-client