Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
File: 3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft (raw, json)
Hash identifier: GoA/v+fofC/jEAlyQ/K+YmYuM563po8TwENeifLbYj8=
Subject key identifier: 12:86:BC:A0:FE:C0:C9:74:1D:88:9B:27:C7:FE:A3:DC:1E:BB:46:89
Authority key identifier: DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
Certificate issuer: /CN=dee623e2aff7b03afeb94260348c1633b54d9056
Certificate serial: 01A1186245C1D50C3E3CE0F9CD35A1404D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
Manifest number: 1AA6
Signing time: Wed 07 Oct 2026 22:00:55 +0000
Manifest this update: Wed 07 Oct 2026 22:00:55 +0000
Manifest next update: Thu 08 Oct 2026 22:00:55 +0000
Files and hashes: 1: 2WGl8G8pi8oMegi8RKRiyyTcfBY.roa (hash: eFPA6RWwauuX6BAg0wBN5keK8VZL6vRlLkve+VSJ0ZE=)
2: 3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl (hash: Pluc8t+Kmzan0Q3GX+BMGUboSilYINDA7FsJg8F77tg=)
3: WSkrs1ltbglcOvmgNNdKDlpJVJo.roa (hash: EfPSiAnXovgs9qwouEhgN4C060q6TwU5BAOhp7sYuHU=)
4: _fWzLCKSJmnuveEvkqcAAbIsnQU.roa (hash: hfCXoWjDXZMkDBWfgzrI+fe9FDLmJGHVyF9Qx+EgAyg=)
5: _xnVn4Z2mdrwXIaogX13bELVsCM.roa (hash: ApqTNIYHPR2DmL0Vq3O1QjPD2Uk/9+5OvGzlqh5bBUk=)
6: p04FvvBEHzMTXVoNNN3LSmN2jSQ.roa (hash: HB8efpVA3BHYu9Zn4BAQKGXl8PNjjJD4B4das4y3Wnc=)
7: xJ4TSRJyqffQgy_-86pjaJ3lB3I.roa (hash: ewjgg7+zEymo+Ubr8e5xOG/nC4U9si8j1VyBDgd9eok=)
8: ygo3H5OHWrmMxmaU3h9Trr2iclQ.roa (hash: 3KarnZJsM1oC9NHKT7Yavsz5aIphKie2KhT0LQNo1gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:62:45:c1:d5:0c:3e:3c:e0:f9:cd:35:a1:40:4d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee623e2aff7b03afeb94260348c1633b54d9056
Validity
Not Before: Oct 7 22:00:55 2026 GMT
Not After : Oct 8 22:00:55 2026 GMT
Subject: CN=1286bca0fec0c9741d889b27c7fea3dc1ebb4689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4a:58:95:05:de:69:7e:11:06:6c:16:37:8c:
2d:74:3c:57:a2:97:87:49:51:ea:f9:48:3b:60:c4:
91:01:3a:18:bf:ba:e8:32:0f:6e:97:f1:28:55:97:
f9:af:97:04:cd:1f:13:e9:7d:3b:45:2f:77:13:26:
03:fa:a5:3e:b3:52:c9:d4:fa:2d:f2:69:38:c1:2e:
20:10:b7:79:cd:0f:9d:6d:0f:bf:fa:6c:f2:77:59:
41:29:04:46:79:6f:59:a1:58:2c:f8:df:f7:ba:ee:
c4:0d:e5:ee:37:03:0b:1a:0e:b3:c7:6f:69:f1:8a:
31:56:d6:35:c4:a4:bc:99:17:bc:86:f6:69:14:1d:
d9:33:a4:01:95:36:8c:f1:82:32:d8:3a:5e:e8:3b:
11:64:3f:e3:56:7a:b5:f8:d4:ed:da:fd:94:17:c1:
a1:c4:2b:f0:68:ad:9c:ad:89:42:39:74:a1:66:9d:
e5:34:ea:2b:38:3a:79:65:00:55:49:22:ca:96:80:
fd:cc:e3:e4:8a:7c:14:61:4a:92:76:36:41:d9:1d:
6f:db:75:77:3c:eb:a4:16:ad:4f:60:bf:fe:13:ce:
e8:00:90:cd:d6:2b:57:6e:2c:8e:ff:d7:3b:0e:74:
79:f6:73:f9:da:c7:0e:8b:74:ed:4c:5c:86:e7:3f:
12:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:86:BC:A0:FE:C0:C9:74:1D:88:9B:27:C7:FE:A3:DC:1E:BB:46:89
X509v3 Authority Key Identifier:
keyid:DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d9:e7:c7:ce:dc:a5:29:28:25:e8:9c:5b:d3:79:93:7e:f2:
50:c6:ab:6a:69:f6:d1:2e:b5:97:68:3f:e3:a2:43:50:ac:29:
fe:cd:95:5a:52:e7:1b:2b:c5:af:bb:59:51:13:4b:f0:1a:86:
5e:56:8d:38:49:9f:f2:37:5f:a1:fe:b3:de:24:dc:df:d1:b7:
c4:65:30:ed:3f:32:7e:9c:9d:b0:be:d8:ac:ca:b2:62:be:9b:
5e:ea:0e:68:48:10:bb:69:df:9f:9a:d2:15:8f:e8:ee:21:d4:
9f:f0:42:eb:17:7c:d3:2a:bc:d7:4d:31:06:fd:2d:33:ee:27:
cc:f7:f5:b0:90:dd:28:db:5c:2a:85:c9:dd:d1:cc:29:e7:7b:
59:c8:77:38:90:f5:35:f7:6e:87:87:2f:8b:eb:6a:a8:d7:05:
70:53:f4:b8:26:9f:87:d2:cb:78:f5:1d:94:16:d8:9a:0a:80:
8a:db:5b:0e:33:07:6c:43:32:b5:d9:ce:26:12:d8:79:ee:6a:
95:66:7e:a0:89:73:13:69:12:ec:65:12:f2:a5:37:f3:b6:fb:
e3:dd:53:de:f3:99:b0:86:aa:cc:a0:3a:a6:89:91:a6:a6:79:
5c:9f:3c:e1:e8:1a:4b:90:01:1b:fd:b8:ce:0b:71:52:92:6d:
5f:fc:b0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:18:31 2026 by rpki-client