Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
File: 3Os5Sq4INtNDQfetMZSUdlq1awc.mft (raw, json)
Hash identifier: A+08w7Tf4m+59qeHmx/u+IM3w/8A71Rr+F9oPl/i008=
Subject key identifier: DD:6B:09:70:AB:E4:2E:FB:DE:89:EA:54:E0:E7:A6:A0:3D:07:74:50
Authority key identifier: DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
Certificate issuer: /CN=dceb394aae0836d34341f7ad319494765ab56b07
Certificate serial: 01A17CCEA3A4861617D2DF582BFD00FCD1F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
Manifest number: 066A
Signing time: Tue 27 Oct 2026 10:01:19 +0000
Manifest this update: Tue 27 Oct 2026 10:01:19 +0000
Manifest next update: Wed 28 Oct 2026 10:01:19 +0000
Files and hashes: 1: 3Os5Sq4INtNDQfetMZSUdlq1awc.crl (hash: iQmJvcUcz+HDsSl9hubo0cPaArn7oqBNAb0b3vugk+I=)
2: RwZ9F-pdINA65vVgGDGApgyfhto.roa (hash: eZaWhNjBT1qB/UTcePoZ/N6A45ILygXPpUHwGv0YfOw=)
3: SFQQoJg97TGHjrgzii8KpRT8xfc.roa (hash: iv/LMo2P0Oa29pglyapnh+eYTODXjJUku1HA9y8udbA=)
4: sOAijZZYpwie6wu7M4Wlx6kerB4.roa (hash: H5sz+pWO9A1d2Sg5RORtCUGJSuWJhTFvhX/iRzLdtRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 10:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:ce:a3:a4:86:16:17:d2:df:58:2b:fd:00:fc:d1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dceb394aae0836d34341f7ad319494765ab56b07
Validity
Not Before: Oct 27 10:01:19 2026 GMT
Not After : Oct 28 10:01:19 2026 GMT
Subject: CN=dd6b0970abe42efbde89ea54e0e7a6a03d077450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7a:87:af:32:d3:4c:37:96:dc:cd:32:f5:8f:
bb:91:99:ea:a3:a0:2e:5c:a4:3d:2b:d0:0d:0f:94:
54:52:cb:bb:b2:27:d3:60:05:bc:fc:36:0c:57:ea:
81:73:0d:d0:01:7d:87:d1:aa:91:2a:fa:bc:55:e6:
bc:c0:1e:b9:72:36:e4:85:82:b6:de:4d:40:ce:85:
82:d2:bf:db:34:ba:d0:85:82:3f:9f:e9:87:c6:d0:
c5:9c:1f:e5:92:af:74:3f:9d:af:72:2f:ea:34:f1:
0e:79:20:99:e1:89:63:da:2f:7f:cb:a1:c9:ca:d5:
57:34:ef:89:df:e7:2c:b4:ac:c0:52:37:48:15:11:
9f:0a:43:b5:b5:de:c9:c4:76:c2:d2:18:5c:ac:79:
d9:fd:bf:a7:c4:08:0c:1c:4f:ca:00:28:a2:75:d3:
ce:25:b8:72:cf:29:45:a8:43:35:66:e5:ee:4e:9d:
52:bf:35:7b:7c:37:e7:e8:b5:84:de:49:f2:ce:b1:
8b:e6:dc:23:b1:f4:8b:ab:fa:0c:1e:f6:76:e3:d0:
5a:50:fd:33:f6:75:24:ad:fa:41:57:5e:49:a0:8e:
90:06:c0:22:70:43:61:49:aa:29:00:6b:cc:14:49:
54:fa:9a:7f:0a:ae:4e:da:6c:2a:f3:81:4f:05:34:
ba:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6B:09:70:AB:E4:2E:FB:DE:89:EA:54:E0:E7:A6:A0:3D:07:74:50
X509v3 Authority Key Identifier:
keyid:DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:e0:ef:ca:4e:66:f8:61:77:9f:b7:b4:d4:52:f5:65:38:69:
08:d9:03:74:ae:36:20:dd:b6:0b:8d:3b:57:4f:ef:0d:99:5a:
59:f0:c6:3c:7f:f1:77:2b:cc:24:9c:44:f6:7b:7c:5c:3b:19:
e7:41:35:da:ba:f0:b5:f8:a0:9d:4b:a3:ac:98:38:38:04:42:
92:30:06:e3:1f:a5:f6:20:b7:c5:43:3a:34:30:45:fa:05:09:
2d:e7:83:70:73:50:b1:0c:5c:79:10:5a:dc:c4:d4:6b:de:ce:
6f:9a:5c:06:f4:eb:bf:43:a7:75:e6:d5:79:91:57:44:c5:04:
c8:03:ed:fc:bf:35:ad:4c:c1:39:e9:0e:ba:08:20:1c:04:f2:
79:2a:e0:b2:c0:55:d2:ec:22:19:7e:75:da:4a:3a:22:06:19:
83:7a:8c:64:51:d2:b8:c3:0a:d3:b9:2f:4f:ff:65:b9:92:df:
48:12:ae:e3:7b:72:4a:c3:27:60:20:ea:6e:03:04:67:c4:14:
5e:e3:7e:d8:2e:ee:96:3a:82:7c:9b:87:5c:0f:a1:da:4c:fc:
d7:69:5d:95:ec:b5:1c:69:95:9f:d6:f0:e9:68:5d:cb:2d:85:
9d:e2:8f:ce:d8:0c:4a:8c:95:57:9a:ae:d7:0e:8d:24:32:e2:
ae:48:b6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:33:07 2026 by rpki-client