Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/2a1d35-6e31-40e6-94b4-4ac856a8182d/1/3YXca2FDoX_rSYIOpSAEiVj0itw.mft
File: 3YXca2FDoX_rSYIOpSAEiVj0itw.mft (raw, json)
Hash identifier: f1oUEL0UBPRpD9oYEBakE40vBrEIFGKjFOV+pP0v41M=
Subject key identifier: 7E:7F:DB:CC:F7:CA:23:5A:3B:6E:78:42:0B:AE:34:93:A2:6A:35:A6
Authority key identifier: DD:85:DC:6B:61:43:A1:7F:EB:49:82:0E:A5:20:04:89:58:F4:8A:DC
Certificate issuer: /CN=dd85dc6b6143a17feb49820ea520048958f48adc
Certificate serial: 01A13E94F0FC48E14A900BD8CD03BAF0CF7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YXca2FDoX_rSYIOpSAEiVj0itw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/2a1d35-6e31-40e6-94b4-4ac856a8182d/1/3YXca2FDoX_rSYIOpSAEiVj0itw.mft
Manifest number: 153F
Signing time: Thu 15 Oct 2026 08:01:50 +0000
Manifest this update: Thu 15 Oct 2026 08:01:50 +0000
Manifest next update: Fri 16 Oct 2026 08:01:50 +0000
Files and hashes: 1: 3YXca2FDoX_rSYIOpSAEiVj0itw.crl (hash: xCKNaRQG9ho5v0zD6wf1XzmfJ/7jB+U0GKn0msoYKjw=)
2: BsyNzVaxxAwnI04Dd9aOhMe6ucE.roa (hash: 0aNXoEKl0ws+Toia/ObhW+i07V56stDq9dLrY8oS6mU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/2a1d35-6e31-40e6-94b4-4ac856a8182d/1/3YXca2FDoX_rSYIOpSAEiVj0itw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/2a1d35-6e31-40e6-94b4-4ac856a8182d/1/3YXca2FDoX_rSYIOpSAEiVj0itw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3YXca2FDoX_rSYIOpSAEiVj0itw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:f0:fc:48:e1:4a:90:0b:d8:cd:03:ba:f0:cf:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd85dc6b6143a17feb49820ea520048958f48adc
Validity
Not Before: Oct 15 08:01:50 2026 GMT
Not After : Oct 16 08:01:50 2026 GMT
Subject: CN=7e7fdbccf7ca235a3b6e78420bae3493a26a35a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:47:02:49:20:21:5d:5a:8e:a8:11:dd:39:90:
9f:3b:e9:05:a7:02:54:27:eb:be:6f:df:1d:0a:23:
b1:0d:e1:05:96:4a:e2:eb:24:0e:f0:93:99:86:73:
57:9b:e7:b6:eb:ae:b3:a7:7c:88:17:5d:f5:d5:02:
f0:b2:cf:59:b1:28:ef:62:1e:b2:07:b7:75:26:a3:
05:59:39:4e:17:f0:08:61:60:4a:54:53:1d:ff:bf:
a6:26:ce:a4:82:e4:55:ad:f5:a7:8b:23:09:20:d2:
a4:12:2e:95:d5:17:58:b8:2a:3e:b3:aa:28:fb:84:
e2:93:e2:4a:d4:1c:a9:ed:b0:e2:76:94:c4:b4:c2:
94:2f:12:8b:3a:f6:50:15:70:27:3c:27:a3:6f:91:
49:c5:e4:4c:53:56:76:e0:e5:72:b9:73:ec:c2:75:
b4:c5:dc:bb:fd:de:e8:f5:59:96:9a:07:77:9d:c1:
38:3d:58:42:99:39:5c:84:38:6c:17:1e:ef:71:93:
55:cc:cf:48:da:30:b0:8e:85:46:9b:95:e5:a0:94:
72:50:29:27:f5:d3:d7:d7:84:5b:a3:21:e3:a0:a9:
0d:14:4e:42:fe:8a:b3:56:b6:4c:cf:25:08:ce:e3:
70:77:84:f2:dd:e5:45:e6:b5:24:70:59:44:0e:92:
5a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7F:DB:CC:F7:CA:23:5A:3B:6E:78:42:0B:AE:34:93:A2:6A:35:A6
X509v3 Authority Key Identifier:
keyid:DD:85:DC:6B:61:43:A1:7F:EB:49:82:0E:A5:20:04:89:58:F4:8A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YXca2FDoX_rSYIOpSAEiVj0itw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2a1d35-6e31-40e6-94b4-4ac856a8182d/1/3YXca2FDoX_rSYIOpSAEiVj0itw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2a1d35-6e31-40e6-94b4-4ac856a8182d/1/3YXca2FDoX_rSYIOpSAEiVj0itw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:54:90:28:8d:8f:08:39:ed:14:a0:ec:35:ae:a9:2f:82:bb:
12:18:2b:d9:2e:c7:1b:59:be:fb:8c:0b:0b:4d:a0:44:23:28:
39:dd:08:ea:85:ac:18:af:a0:b9:3a:3a:18:25:d1:cf:4c:d7:
96:57:ed:08:fe:07:3b:29:cc:20:d1:5e:ef:b8:bf:1a:2e:5f:
13:f4:9b:0b:6f:0e:c1:66:16:26:bc:b3:ff:5d:57:1e:65:48:
f7:2b:69:af:56:c6:2f:1d:3c:df:9c:bd:77:1b:98:e2:6e:56:
60:ef:a1:f3:9a:7d:22:00:b5:34:89:2d:e5:fb:67:aa:0b:8a:
0f:f9:ce:c0:bc:7b:2c:87:47:cd:70:f3:f0:c8:ab:ce:56:dc:
7e:e8:36:49:42:4f:7d:d3:64:35:51:cc:07:98:5c:71:71:43:
c7:f1:11:29:7b:4a:da:98:d0:b1:e1:33:9f:2b:20:76:5c:7c:
d0:d8:c2:72:42:59:67:7b:e0:49:09:f3:7a:b7:ef:fc:25:7c:
2a:ed:6a:cf:a0:d2:6c:8d:13:e3:d4:55:ed:90:20:46:2e:6d:
16:0d:95:74:5c:cc:e3:56:24:18:a2:fd:84:7b:db:ce:9d:ef:
95:c0:2d:f3:1d:67:5e:e9:4c:ae:b1:58:ff:64:37:4e:dc:73:
e4:71:9c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:22:19 2026 by rpki-client