Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
File: 3O8ZrfppRVibwtEAFU5aWMRJihQ.mft (raw, json)
Hash identifier: +E9czei5+RWPLsdt0KfS9yHft1hmZCOpa7nrOMNZQIE=
Subject key identifier: 14:C4:29:95:E8:96:23:92:B7:4B:DB:DD:F6:32:AD:85:C0:60:6A:0A
Authority key identifier: DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
Certificate issuer: /CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Certificate serial: 01A13F027B286204D37F13E1428428D626C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
Manifest number: 18B2
Signing time: Thu 15 Oct 2026 10:01:29 +0000
Manifest this update: Thu 15 Oct 2026 10:01:29 +0000
Manifest next update: Fri 16 Oct 2026 10:01:29 +0000
Files and hashes: 1: 3O8ZrfppRVibwtEAFU5aWMRJihQ.crl (hash: QXaZVZlN03B90qLfIfJK5g/QaIqCWwZZp3lM7Zuk7wo=)
2: itoTic7G_-G7jco2XW4Z1NEcbCw.roa (hash: +uznw2maAhBkp9yoIBUiVjV+pSA2CpeiVnSVCi83O3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:7b:28:62:04:d3:7f:13:e1:42:84:28:d6:26:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Validity
Not Before: Oct 15 10:01:29 2026 GMT
Not After : Oct 16 10:01:29 2026 GMT
Subject: CN=14c42995e8962392b74bdbddf632ad85c0606a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4d:75:9b:d2:34:9c:9c:4e:51:88:92:d2:f2:
59:dc:15:01:d7:2a:a3:34:c5:c9:a9:7e:bc:77:e7:
26:c4:41:b8:69:7e:5a:f3:9f:89:00:d4:fc:e9:94:
8b:ec:45:12:74:33:b8:df:df:d7:36:52:fb:aa:96:
8b:da:f7:f5:a8:a8:b6:05:af:63:a9:c9:53:19:56:
b5:bf:d7:f7:43:b1:ec:1f:81:ca:89:13:58:14:18:
d8:a0:7f:12:6b:0b:d1:fb:b7:a3:48:56:19:58:d6:
e3:25:0b:19:1c:e8:6e:d7:00:4b:d4:d6:bd:83:d6:
08:5a:16:03:3f:41:df:76:8e:5c:3d:cb:9c:af:fa:
57:7c:72:74:82:a2:b6:58:7a:d7:d2:b5:52:9e:50:
ca:3d:85:3b:c8:8b:ae:0f:fb:75:2a:c1:d4:ce:48:
7c:7d:b3:51:8d:ba:15:49:65:b7:9f:9d:81:a4:e3:
99:25:99:06:9c:dd:4a:af:5e:5e:6d:95:91:ea:b6:
2d:06:1e:e7:11:a0:c9:a6:48:fd:b5:6b:29:23:62:
a6:c0:48:93:0e:8c:9d:56:79:cb:df:f2:db:80:00:
8c:90:94:2a:bd:a5:11:e2:bf:3b:e0:d3:08:3a:cf:
a1:66:ef:54:5e:ee:14:cc:4e:60:46:34:3a:78:c7:
84:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C4:29:95:E8:96:23:92:B7:4B:DB:DD:F6:32:AD:85:C0:60:6A:0A
X509v3 Authority Key Identifier:
keyid:DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:b2:03:13:09:0a:95:3b:fd:93:88:5f:cf:e4:09:8a:bf:7f:
54:c2:a1:cd:1f:60:fa:8c:46:bd:07:e0:12:95:bd:78:96:e0:
98:51:c6:d0:7b:dd:9a:bd:33:97:e9:e3:99:12:61:d3:b9:c9:
7c:37:f3:f8:0c:8b:2a:4a:c6:cc:9d:3f:8c:ec:05:22:4e:3b:
e3:d9:19:65:f6:50:f5:8e:10:ce:d4:e5:3d:31:90:5c:1d:d1:
53:fa:82:d5:b0:1a:b2:4b:b1:e2:af:bc:7b:c9:ea:91:10:40:
ab:a0:62:24:d5:50:7f:27:24:1d:e7:b9:43:ad:f9:dc:76:d5:
77:2f:d5:5d:a4:bb:b8:b2:82:67:09:b5:4e:f3:df:46:f3:83:
45:4d:33:9f:a3:67:f9:ca:82:0c:9b:78:78:ef:69:ff:73:9b:
1d:04:e4:bb:af:cc:0f:e6:20:db:c1:56:b1:f6:7e:46:65:a8:
00:df:d0:33:ea:5f:d2:12:b3:74:d6:9e:89:77:4f:db:01:65:
c6:c6:9d:74:50:75:35:6c:5e:f6:31:2a:23:17:00:78:8f:69:
e0:3e:4c:01:21:39:8a:9a:11:b6:72:f6:64:ba:2c:a8:ad:b4:
44:e6:c9:09:71:45:4c:35:8e:68:ae:a2:da:58:e0:50:cc:bd:
2f:fa:19:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:19 2026 by rpki-client