Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
File: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft (raw, json)
Hash identifier: femm4q7dEV6RQQJyOarjyXC2VFYQ9lLeC+grZKgRLOA=
Subject key identifier: CE:89:38:89:0C:7D:0B:B0:58:1D:F9:C3:D5:3C:16:A5:23:CC:A5:17
Authority key identifier: DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
Certificate issuer: /CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Certificate serial: 01A13E944189DEDA04271E40D145C63EEBD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
Manifest number: 15AC
Signing time: Thu 15 Oct 2026 08:01:05 +0000
Manifest this update: Thu 15 Oct 2026 08:01:05 +0000
Manifest next update: Fri 16 Oct 2026 08:01:05 +0000
Files and hashes: 1: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl (hash: ZvQJeRoqXtxZqyFv8mVMQMaW/tP6Al9c5z02j67mWho=)
2: H6HTDOjZlQ2VG-BteD4I1nTRn4k.roa (hash: a6IB6fLHDx6lViiB0ReUyYalYXgmOEaBsh6fJ2aLk04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:41:89:de:da:04:27:1e:40:d1:45:c6:3e:eb:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Validity
Not Before: Oct 15 08:01:05 2026 GMT
Not After : Oct 16 08:01:05 2026 GMT
Subject: CN=ce8938890c7d0bb0581df9c3d53c16a523cca517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3a:e8:1a:07:7f:c2:70:6e:ec:85:f2:20:5e:
fb:88:b1:9e:0e:ce:32:d6:b0:b5:92:ef:31:11:0e:
fb:33:b4:fc:d9:52:a8:17:b7:52:23:df:d9:6e:2d:
49:96:b3:f8:23:13:2f:0b:fd:ef:c1:d7:5b:0e:aa:
cc:87:e4:2d:16:7b:58:4a:05:af:bb:f1:6b:1c:6e:
c1:26:e6:7c:49:7c:df:8e:cd:b3:01:ab:8d:d5:8e:
c0:a7:16:f6:ef:5f:6d:9b:d2:5a:57:58:ce:51:bd:
57:fa:13:fb:79:8c:b0:aa:54:ff:25:68:b6:64:e7:
66:51:f9:19:0e:86:3a:a5:71:25:c4:9c:ae:1c:c0:
9c:21:b6:3e:6a:99:65:77:b1:d5:93:67:de:aa:09:
1c:a2:72:62:f0:51:31:10:aa:0f:71:f8:c2:d1:85:
80:22:01:b5:fd:fd:84:4b:a0:cb:f0:56:1f:45:6a:
99:a8:7f:4e:3c:2b:9b:f2:b4:6f:c1:ac:84:05:18:
71:67:ed:48:16:21:0c:07:3c:f2:36:45:a5:dd:55:
0b:c8:32:f2:98:c2:1a:8a:51:ba:aa:45:1f:0d:c8:
bf:26:3c:9b:4f:24:ad:71:60:1e:90:c7:4e:d9:f8:
4d:93:7e:c2:35:db:68:ea:77:de:85:b8:87:0d:ae:
bb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:89:38:89:0C:7D:0B:B0:58:1D:F9:C3:D5:3C:16:A5:23:CC:A5:17
X509v3 Authority Key Identifier:
keyid:DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ab:f4:67:d6:08:59:9d:8e:0a:d9:ee:28:c4:d4:58:ec:ad:
de:d3:1b:26:57:85:a8:27:a0:2a:24:69:8e:85:d1:5a:ef:66:
3c:3e:40:02:1e:08:f0:71:58:99:0a:96:a2:2d:ea:5b:04:9a:
bc:e5:b9:91:dd:cd:98:3e:b0:7d:e6:a9:59:7b:f9:23:a8:ee:
65:95:e8:ab:1b:7b:42:6a:a1:4a:c9:8f:d7:02:09:b3:ca:49:
86:7a:9d:f6:51:a5:a4:d1:ac:4b:ab:54:09:0e:bb:12:58:a5:
fd:73:43:a7:0d:0d:d8:c3:ab:8b:06:94:99:ce:97:3b:b0:11:
53:55:a1:a7:c3:90:99:c9:e2:a1:58:26:c4:6a:f0:17:cb:13:
9c:fd:75:57:be:3c:0f:76:de:e1:ac:4a:14:f0:3f:f6:0b:99:
b0:fc:c1:51:a9:0d:88:48:2e:87:d5:ec:fa:aa:ac:71:e5:2f:
d7:69:53:b6:6e:a4:eb:12:49:e0:3b:c8:57:50:ef:2a:b9:83:
46:35:bd:e8:e0:58:7b:db:59:61:ef:73:c6:22:e0:ee:85:26:
a5:1a:35:0b:0f:90:1c:3b:a8:66:66:7f:15:9a:9b:b8:1d:77:
a4:c7:5f:ce:cf:e0:5c:91:8c:8e:a8:68:98:46:05:0b:88:16:
3a:0f:46:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:19:50 2026 by rpki-client