Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/3oP6K0srlD39oVEaUvz5hQb85DE.mft
File: 3oP6K0srlD39oVEaUvz5hQb85DE.mft (raw, json)
Hash identifier: rZccdW7Y5EOK8wOMBd23ddz8hoPqUofHdqPZIwEdB18=
Subject key identifier: 89:F4:3A:D4:24:29:41:2E:F2:9A:9C:A7:5E:45:26:0B:02:58:4B:E1
Authority key identifier: DE:83:FA:2B:4B:2B:94:3D:FD:A1:51:1A:52:FC:F9:85:06:FC:E4:31
Certificate issuer: /CN=de83fa2b4b2b943dfda1511a52fcf98506fce431
Certificate serial: 01A16A91597DB615EDE4E2387C92485498AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3oP6K0srlD39oVEaUvz5hQb85DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/3oP6K0srlD39oVEaUvz5hQb85DE.mft
Manifest number: 0135
Signing time: Fri 23 Oct 2026 21:01:12 +0000
Manifest this update: Fri 23 Oct 2026 21:01:12 +0000
Manifest next update: Sat 24 Oct 2026 21:01:12 +0000
Files and hashes: 1: 0Ii_2lRksDYCD7Qj_i2q75d4CtM.roa (hash: P9L50eNN14lUjBWYXaCW+6iI/YYEVPyia14M/YoQ9Ec=)
2: 3oP6K0srlD39oVEaUvz5hQb85DE.crl (hash: a1pKe0Z9V4/eEJ8vJZ0L2eQHW96ipVmEm/pJBfNErZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/3oP6K0srlD39oVEaUvz5hQb85DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/3oP6K0srlD39oVEaUvz5hQb85DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3oP6K0srlD39oVEaUvz5hQb85DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:91:59:7d:b6:15:ed:e4:e2:38:7c:92:48:54:98:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de83fa2b4b2b943dfda1511a52fcf98506fce431
Validity
Not Before: Oct 23 21:01:12 2026 GMT
Not After : Oct 24 21:01:12 2026 GMT
Subject: CN=89f43ad42429412ef29a9ca75e45260b02584be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f3:a0:05:dd:72:e0:3a:f4:34:61:2d:a6:d2:
dc:a2:b6:95:fc:d6:93:78:51:f8:9d:9f:fa:db:5b:
7f:f5:8b:0a:8e:83:84:73:ac:a7:35:41:b8:87:7e:
d4:8c:3f:0f:b6:ef:3f:64:34:46:f6:f8:31:36:93:
25:07:5e:7d:89:d5:93:53:41:7f:fc:8c:a1:b7:ea:
9a:1d:6b:0c:9f:a5:a7:a6:b0:8c:0d:e7:8d:49:6a:
1e:74:6b:c0:60:ff:6d:8d:f5:6b:4b:dd:1b:25:82:
41:33:6e:50:6e:24:7c:2b:c4:54:d8:7c:33:7e:59:
15:01:13:50:08:02:a7:83:53:74:e7:86:13:17:b0:
58:6a:ff:5e:ff:a5:69:55:fb:9f:44:c8:66:21:ca:
ee:21:66:b2:e7:f2:fe:2b:f3:32:18:54:69:64:0c:
a8:9d:dc:ad:fb:ac:1d:a7:b9:35:f1:6f:2d:0c:51:
42:df:04:7c:da:93:53:df:1d:1c:d5:bb:8d:86:c4:
6e:13:b4:9b:83:50:54:ce:52:7f:2d:94:42:51:d6:
24:17:3f:b3:27:4f:2e:a3:03:75:5c:f7:74:8a:43:
e8:e2:a4:2e:26:5a:f3:b4:8a:dc:f6:ec:f7:85:b2:
b8:5b:c5:35:3d:a9:c3:3c:4d:0b:fd:f4:3b:cf:0a:
6f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F4:3A:D4:24:29:41:2E:F2:9A:9C:A7:5E:45:26:0B:02:58:4B:E1
X509v3 Authority Key Identifier:
keyid:DE:83:FA:2B:4B:2B:94:3D:FD:A1:51:1A:52:FC:F9:85:06:FC:E4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3oP6K0srlD39oVEaUvz5hQb85DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/3oP6K0srlD39oVEaUvz5hQb85DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/3oP6K0srlD39oVEaUvz5hQb85DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:16:c6:d1:31:72:a1:54:0f:67:93:30:c9:51:cc:3f:02:65:
5c:73:67:84:16:d8:1b:6a:dd:5b:1a:9e:cb:f9:9c:b1:ae:90:
2d:1b:17:d0:92:c2:80:40:e0:13:4d:bb:1e:3e:0f:8e:ca:48:
48:a2:9d:7e:fe:f2:fa:82:63:5d:01:85:b1:43:d8:1d:07:d1:
97:72:58:7e:ba:69:c0:c2:23:be:f1:c5:a4:aa:af:38:a5:a0:
f5:ee:6e:58:16:f2:2d:4f:45:30:27:25:82:c7:06:0b:d6:0d:
bc:2c:2c:50:82:39:13:fe:cd:b0:c2:03:f5:f5:1a:00:71:0c:
d5:b2:4e:78:1a:33:d9:c0:cd:1a:66:9b:c8:e4:fd:c3:3a:55:
4d:92:db:ff:1f:44:ce:51:c5:81:3a:48:38:e5:7e:cf:95:46:
c8:6a:95:63:63:af:d7:36:65:df:7e:57:d9:d9:58:e7:7f:69:
2f:6d:5c:2c:c5:c6:34:ba:43:98:17:0a:07:bd:5e:63:52:e6:
35:94:73:a5:45:3f:11:16:f3:86:6d:1b:1c:bd:c0:07:ac:5f:
bb:07:4d:f6:6e:b3:cb:76:ab:ed:e0:9c:8f:32:84:52:d8:f8:
22:56:bb:10:6c:4c:a0:7c:4f:2c:d1:03:2c:05:90:58:8a:64:
93:a8:b2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 06:58:26 2026 by rpki-client