Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/3oP6K0srlD39oVEaUvz5hQb85DE.mft
File: 3oP6K0srlD39oVEaUvz5hQb85DE.mft (raw, json)
Hash identifier: +dvkxFLX7MSoFatZhcEth3zfGGXcp8kjiIGwIW/XW1k=
Subject key identifier: 65:E9:A3:91:5F:BB:92:4A:B6:59:8C:BA:02:00:60:23:FC:DC:D7:01
Authority key identifier: DE:83:FA:2B:4B:2B:94:3D:FD:A1:51:1A:52:FC:F9:85:06:FC:E4:31
Certificate issuer: /CN=de83fa2b4b2b943dfda1511a52fcf98506fce431
Certificate serial: 01A16C80148AB938C51FF97A422DB87E3367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3oP6K0srlD39oVEaUvz5hQb85DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/3oP6K0srlD39oVEaUvz5hQb85DE.mft
Manifest number: 0136
Signing time: Sat 24 Oct 2026 06:01:35 +0000
Manifest this update: Sat 24 Oct 2026 06:01:35 +0000
Manifest next update: Sun 25 Oct 2026 06:01:35 +0000
Files and hashes: 1: 0Ii_2lRksDYCD7Qj_i2q75d4CtM.roa (hash: P9L50eNN14lUjBWYXaCW+6iI/YYEVPyia14M/YoQ9Ec=)
2: 3oP6K0srlD39oVEaUvz5hQb85DE.crl (hash: eBKauGRqk4ENY51o9CB1TVh85L67nujchBWCdMo1Q0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/3oP6K0srlD39oVEaUvz5hQb85DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/3oP6K0srlD39oVEaUvz5hQb85DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3oP6K0srlD39oVEaUvz5hQb85DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6c:80:14:8a:b9:38:c5:1f:f9:7a:42:2d:b8:7e:33:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de83fa2b4b2b943dfda1511a52fcf98506fce431
Validity
Not Before: Oct 24 06:01:35 2026 GMT
Not After : Oct 25 06:01:35 2026 GMT
Subject: CN=65e9a3915fbb924ab6598cba02006023fcdcd701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:58:7d:00:6e:51:78:fa:3c:8f:99:f5:06:a3:
4d:24:8f:29:d1:90:6f:4e:24:1c:05:14:e8:9b:eb:
1a:76:5f:47:68:57:e8:09:5a:d6:73:3c:45:6b:69:
7d:2b:84:5a:12:80:5b:e6:cc:c5:51:a9:e2:87:af:
62:a3:a6:4d:65:a9:8a:b4:23:90:d7:15:ac:53:69:
17:92:f2:e4:b0:e3:07:9f:a7:72:f3:6a:76:56:d0:
9c:b9:5e:22:e5:47:25:88:d9:c6:0c:99:50:0d:6f:
54:d9:16:09:c0:6e:0d:ea:32:25:0f:42:ca:23:1e:
12:80:f6:33:c8:34:3a:e2:3a:f5:c4:a4:5b:ab:ca:
da:7c:db:67:81:60:69:d6:d1:87:27:82:87:12:88:
0f:a9:ac:6c:fd:22:99:c3:28:b4:b7:46:f1:22:db:
07:58:c8:52:63:29:7c:d6:17:89:20:f3:ac:4b:16:
29:7e:fc:f6:e0:53:a8:3e:35:ea:ea:96:40:87:41:
6d:41:c6:51:ee:5c:ab:96:6a:39:3e:66:17:87:11:
f7:e9:6e:8c:1c:2e:a2:d5:da:fd:c3:ef:7a:6f:78:
1d:3e:1b:8d:c5:9f:59:e3:f1:4a:91:dd:29:a6:49:
66:76:7c:83:a3:20:55:ed:4c:e6:c7:5a:60:a6:2a:
1b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E9:A3:91:5F:BB:92:4A:B6:59:8C:BA:02:00:60:23:FC:DC:D7:01
X509v3 Authority Key Identifier:
keyid:DE:83:FA:2B:4B:2B:94:3D:FD:A1:51:1A:52:FC:F9:85:06:FC:E4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3oP6K0srlD39oVEaUvz5hQb85DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/3oP6K0srlD39oVEaUvz5hQb85DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/3oP6K0srlD39oVEaUvz5hQb85DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ca:9d:6d:26:3c:b5:f1:c1:72:44:ff:ad:6a:2e:32:55:4a:
69:4b:47:c7:73:96:a8:bc:2d:cd:20:49:fe:d9:f4:fe:69:6c:
e7:a0:83:8f:76:e2:2b:e6:01:04:47:e1:fe:be:cc:a6:71:d0:
87:68:bd:d5:79:7e:8e:6e:54:eb:22:a2:8a:fc:c3:dc:70:2a:
e0:40:7b:05:2d:6c:aa:43:4a:ec:18:e6:ab:e1:9f:4d:0e:37:
7b:4f:86:b9:04:ab:a2:f3:9f:98:0a:85:07:9f:48:93:c5:87:
93:e1:32:7b:0b:83:d9:bb:2f:82:b7:8f:1f:04:62:1b:1c:f8:
d8:df:dd:1e:8c:92:a4:c5:b0:16:f4:f2:92:59:41:ce:e1:9c:
87:29:c2:74:12:45:04:3e:90:80:da:f2:19:aa:88:45:e3:08:
dc:1e:71:77:17:26:c6:75:67:f0:3a:17:d2:30:1a:d9:f7:bb:
29:ab:7e:16:51:fe:3b:9e:1e:ad:84:c1:b0:bd:6e:a2:17:9b:
e1:8a:bc:0c:7a:aa:da:f6:70:20:00:c1:c7:ea:4f:f4:23:e3:
ce:77:b7:f5:0b:07:ca:88:ad:71:7d:39:c0:f6:66:95:df:c8:
a8:16:06:79:7c:c7:ff:a0:e3:b2:31:7d:c8:74:3f:ad:27:f6:
40:4b:b0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:38:28 2026 by rpki-client