Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
File: 3ciCMsB94s3Llur551FVC6pmxYg.mft (raw, json)
Hash identifier: DLu3mO0AmXceiugTncCcBjyrhisZn2Ise5n6JaX3iy0=
Subject key identifier: 14:88:37:18:DF:2E:C1:5B:60:7F:7F:3D:1A:A3:C6:32:31:7D:C2:AA
Authority key identifier: DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88
Certificate issuer: /CN=ddc88232c07de2cdcb96eaf9e751550baa66c588
Certificate serial: 01A13ECB8B198EA19087C1C0C85203BA1608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
Manifest number: 1207
Signing time: Thu 15 Oct 2026 09:01:29 +0000
Manifest this update: Thu 15 Oct 2026 09:01:29 +0000
Manifest next update: Fri 16 Oct 2026 09:01:29 +0000
Files and hashes: 1: 3ciCMsB94s3Llur551FVC6pmxYg.crl (hash: UAlTAN0dC922/O7+IimYMx7n69z8Aq2Z94+i7ZSxqJs=)
2: Hfq2hHkukqsFqywTjHsioREmNS4.roa (hash: paBdvdH/DYPPTu1rMzb8b23iJRlSlCeY0XMWLizu13w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:8b:19:8e:a1:90:87:c1:c0:c8:52:03:ba:16:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc88232c07de2cdcb96eaf9e751550baa66c588
Validity
Not Before: Oct 15 09:01:29 2026 GMT
Not After : Oct 16 09:01:29 2026 GMT
Subject: CN=14883718df2ec15b607f7f3d1aa3c632317dc2aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4e:ab:c0:9c:5c:fb:5c:af:93:6a:36:a0:ef:
ba:16:7b:80:0d:32:c3:43:7e:93:90:d6:fe:1f:bc:
09:f9:65:10:1a:a4:08:b2:88:ab:e9:fa:b6:13:88:
de:aa:27:b9:67:96:01:7a:ff:b9:cd:41:01:c4:c1:
84:82:5a:41:d5:a5:52:2b:a1:03:82:50:f1:19:5b:
af:af:f2:3b:99:76:7e:e2:3c:31:6c:ad:1b:09:fd:
8a:6b:b2:36:f7:68:95:fb:9a:4b:25:8a:5d:d3:39:
2c:db:89:15:1f:22:41:f3:72:51:84:98:67:c2:ca:
1f:6b:38:7a:9a:97:c3:a5:6c:cd:1d:9b:d2:fe:c1:
4a:89:3a:74:fa:ce:3b:0d:ea:e0:42:42:65:f7:2c:
90:dd:91:da:a7:e2:1e:30:21:31:d2:47:06:48:d8:
7a:5d:17:f7:52:b2:e3:e5:23:54:d0:6b:a7:80:14:
19:da:4c:f3:1e:63:9b:36:d4:2d:ce:64:62:2c:61:
28:05:ee:96:11:4b:28:7c:5c:b3:b5:3f:c9:4a:f0:
6b:af:dc:1d:8e:ff:93:c7:e5:2b:dc:1c:d1:c3:d7:
c3:1f:c2:ad:50:7a:92:24:f7:17:22:3f:e4:30:68:
27:c9:f5:a1:a1:6f:70:e3:db:66:e2:dd:24:c8:30:
97:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:88:37:18:DF:2E:C1:5B:60:7F:7F:3D:1A:A3:C6:32:31:7D:C2:AA
X509v3 Authority Key Identifier:
keyid:DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:98:2f:89:a6:57:da:d1:dc:39:7b:c1:af:33:93:97:22:57:
e7:7f:ce:8d:19:a8:02:c1:67:d3:1b:92:ac:eb:0c:31:c6:bc:
45:3a:02:12:a9:28:04:a5:08:8f:9a:3b:f7:df:3b:eb:72:17:
40:47:2c:42:0e:a9:12:ab:9a:83:3c:c8:41:25:c6:d2:84:14:
da:45:eb:44:15:ef:c0:25:5f:23:27:51:12:4b:e2:1c:f8:17:
f9:79:63:a7:19:b6:ef:64:31:77:4c:d5:9a:e2:f1:8f:e2:3d:
5b:c1:7e:ee:b1:03:e9:b2:d0:5a:9a:d6:18:96:51:48:8b:24:
3b:66:15:21:47:f6:92:d0:24:96:94:39:94:2b:bf:88:00:4a:
36:4f:45:fa:c3:b3:09:37:86:68:11:cc:d6:63:ad:56:2a:55:
1a:04:91:86:f7:14:10:5c:e4:39:e7:e6:1e:e1:f1:bc:d8:a4:
41:30:91:6f:fa:b7:fe:92:bf:19:e1:37:a9:71:62:4a:b7:35:
20:da:a8:5b:25:2c:39:5c:e7:54:bf:d1:67:67:e6:d3:3e:d8:
75:5a:e3:44:09:84:0e:7f:09:58:e4:08:f5:70:07:4e:2a:11:
ff:b9:43:8d:f1:b1:1c:d5:c8:e6:0b:a6:1d:a7:3b:5c:c1:36:
6c:39:e0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:44 2026 by rpki-client