Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/41dbcf-0ee2-4ffe-b4ac-bdf202abb4ad/1/3laK3DUoN5ZVSyvrhbzB0_Px6Bs.mft
File: 3laK3DUoN5ZVSyvrhbzB0_Px6Bs.mft (raw, json)
Hash identifier: 6la0g2PWNQoyMgOK2c2XgCK8cxZpRh2pq4KMlrEM3IE=
Subject key identifier: CA:F8:ED:ED:4A:17:97:A2:88:74:AC:88:57:24:AE:78:2C:5C:9E:C0
Authority key identifier: DE:56:8A:DC:35:28:37:96:55:4B:2B:EB:85:BC:C1:D3:F3:F1:E8:1B
Certificate issuer: /CN=de568adc35283796554b2beb85bcc1d3f3f1e81b
Certificate serial: 01A179CCB1E76ABC0EAF3BE1F79DB6DD644E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3laK3DUoN5ZVSyvrhbzB0_Px6Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/41dbcf-0ee2-4ffe-b4ac-bdf202abb4ad/1/3laK3DUoN5ZVSyvrhbzB0_Px6Bs.mft
Manifest number: 24
Signing time: Mon 26 Oct 2026 20:00:20 +0000
Manifest this update: Mon 26 Oct 2026 20:00:20 +0000
Manifest next update: Tue 27 Oct 2026 20:00:20 +0000
Files and hashes: 1: 3laK3DUoN5ZVSyvrhbzB0_Px6Bs.crl (hash: 87hWF29gab2grCaA6OArZbLCpvF08ZytScJpGNMeRQ0=)
2: bMk8m7albPuDGUCZVOZfipZcp00.roa (hash: 1ds0a7jQWV1Q8oPHPD/jS7Bot1lIzjMJKQRHJhFi2Ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/41dbcf-0ee2-4ffe-b4ac-bdf202abb4ad/1/3laK3DUoN5ZVSyvrhbzB0_Px6Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/41dbcf-0ee2-4ffe-b4ac-bdf202abb4ad/1/3laK3DUoN5ZVSyvrhbzB0_Px6Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3laK3DUoN5ZVSyvrhbzB0_Px6Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:cc:b1:e7:6a:bc:0e:af:3b:e1:f7:9d:b6:dd:64:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de568adc35283796554b2beb85bcc1d3f3f1e81b
Validity
Not Before: Oct 26 20:00:20 2026 GMT
Not After : Oct 27 20:00:20 2026 GMT
Subject: CN=caf8eded4a1797a28874ac885724ae782c5c9ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:27:d0:68:02:d6:5e:b0:b0:e1:a0:7e:0f:42:
d2:8f:27:58:22:db:59:ad:45:d0:d8:66:66:81:4c:
ed:cc:78:a8:ec:87:6c:8c:84:e9:b5:11:39:da:94:
5f:6a:7f:a3:7f:4e:1d:b5:51:87:cf:cf:1b:d2:1d:
58:a6:d9:a3:94:74:82:3d:65:12:3a:7e:f7:64:7a:
22:58:af:4f:bd:6f:c3:80:78:7f:d8:ea:4e:71:55:
a9:68:86:17:0e:5b:09:a4:79:8f:90:fd:f1:59:41:
7d:cb:92:a3:d1:aa:6e:b1:bc:77:74:41:23:d8:aa:
bf:00:f2:1b:e7:a7:21:32:9c:b9:0e:5e:1c:7a:e0:
7c:d8:62:16:ff:7b:45:ce:89:cd:90:a5:e1:5d:2d:
b0:37:cf:fd:64:0f:50:96:cb:92:43:5f:4a:58:55:
d7:8b:2f:42:c4:c5:17:70:94:69:d8:15:cf:1b:4b:
aa:86:ea:f9:80:40:b1:8e:96:11:0b:98:89:24:e1:
fa:38:3c:94:f9:88:75:3d:3d:6f:07:86:f3:a5:75:
1c:95:58:22:d7:f2:71:1b:87:a1:56:c3:b8:70:46:
96:83:2a:a9:aa:4f:50:d1:d7:1e:20:d4:d9:b2:11:
0c:88:ce:d4:08:b7:c6:2a:9d:6c:53:ba:c5:75:c3:
56:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F8:ED:ED:4A:17:97:A2:88:74:AC:88:57:24:AE:78:2C:5C:9E:C0
X509v3 Authority Key Identifier:
keyid:DE:56:8A:DC:35:28:37:96:55:4B:2B:EB:85:BC:C1:D3:F3:F1:E8:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3laK3DUoN5ZVSyvrhbzB0_Px6Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/41dbcf-0ee2-4ffe-b4ac-bdf202abb4ad/1/3laK3DUoN5ZVSyvrhbzB0_Px6Bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/41dbcf-0ee2-4ffe-b4ac-bdf202abb4ad/1/3laK3DUoN5ZVSyvrhbzB0_Px6Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:dd:cb:a1:d3:9d:93:09:4e:fa:0b:9a:85:05:14:01:63:0b:
f9:07:ed:b2:f8:d3:06:b3:10:6a:64:e5:42:98:b1:91:9b:d3:
55:55:54:cc:6b:ec:d0:a6:1f:48:76:8f:84:80:c0:a9:ab:10:
6b:73:b4:53:8c:54:03:67:6d:78:0c:cf:3f:69:ff:3f:4d:62:
30:b5:38:1e:7b:1a:94:3f:35:73:03:51:e3:9a:6e:b4:8c:67:
59:99:8e:10:3d:67:14:80:2e:93:00:f8:ed:33:f3:13:93:70:
aa:6b:f4:95:1f:ce:39:15:2d:af:44:46:6c:4b:86:86:8b:53:
85:60:d7:ec:4f:1a:27:d5:10:54:48:e4:0e:3a:ee:fb:ac:ae:
54:ce:5e:59:97:e9:5b:54:b7:79:1c:b1:95:df:e5:4d:9a:ed:
98:29:72:fd:10:f3:78:54:9c:fe:70:33:4d:76:39:bd:17:d3:
ff:a0:dd:c3:0e:ff:0d:85:5c:00:9b:71:09:d0:21:36:42:07:
ab:4d:1b:3f:43:c8:45:a5:be:2a:b7:e9:a6:a7:58:73:f8:96:
2f:f1:7b:c4:ae:22:39:f6:81:5d:5b:b1:04:78:b3:3a:34:c1:
c8:52:ab:e2:25:f9:d6:de:ca:f1:cf:51:1b:aa:61:8d:b0:c0:
99:fe:5b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:54:14 2026 by rpki-client