Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
File: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft (raw, json)
Hash identifier: WPxz2tM+PmjwLdiqdswOjqEShvD5KOWnxfoqCFP2mAk=
Subject key identifier: 2D:E0:E0:C1:E6:72:4B:0B:CC:8A:A8:80:6C:C2:96:B6:41:9F:1F:D4
Authority key identifier: DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1
Certificate issuer: /CN=dc422c24147ec79fa906464ab143fd47e3beb3a1
Certificate serial: 01A1822C3BBEA3FB0D1175A3A0AC3807875A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
Manifest number: 1A22
Signing time: Wed 28 Oct 2026 11:01:39 +0000
Manifest this update: Wed 28 Oct 2026 11:01:39 +0000
Manifest next update: Thu 29 Oct 2026 11:01:39 +0000
Files and hashes: 1: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl (hash: 2UmGhqnc8oCSlsCuFfX0WHW5la+uKKYpsxUP7VrGyRU=)
2: lEBvXs4u3OpbEZMx5XwLH2hQlKs.roa (hash: 9m0BkgzH4gSyZI57npmc+BY5iSf+kkTcUVRRsTUd1zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:2c:3b:be:a3:fb:0d:11:75:a3:a0:ac:38:07:87:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc422c24147ec79fa906464ab143fd47e3beb3a1
Validity
Not Before: Oct 28 11:01:39 2026 GMT
Not After : Oct 29 11:01:39 2026 GMT
Subject: CN=2de0e0c1e6724b0bcc8aa8806cc296b6419f1fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b6:05:e8:19:81:c5:f8:df:91:eb:e7:c6:af:
70:ff:d4:b3:33:b6:24:ac:93:bb:b3:19:0e:52:e0:
ce:3c:ad:50:44:66:d6:93:67:6d:84:7f:1c:92:2f:
66:d3:69:02:41:a2:7f:ab:bb:2e:ec:a5:fc:9e:d0:
45:18:6d:8e:b3:19:96:95:3f:d0:4f:15:1a:07:bc:
a0:ad:21:95:18:0a:39:06:69:db:c8:88:44:fa:30:
76:d8:1e:9a:42:1b:f7:62:1e:e9:46:7a:52:62:b9:
aa:bb:70:e3:b0:ff:b7:2d:81:77:70:32:28:66:05:
cd:bf:83:ee:18:ce:cf:90:a5:01:74:e4:d4:ea:c8:
59:c4:0d:f2:07:c0:e0:f5:f0:f0:42:66:78:62:df:
6f:8e:b2:e1:23:6e:25:41:f8:68:c1:2c:fd:1a:ec:
20:3f:11:55:ed:f1:41:2d:ca:b6:dc:ac:10:c3:24:
da:1a:8b:58:f1:ac:98:23:2d:14:81:9c:3f:55:c7:
8c:3e:6a:23:5b:4d:d3:3c:77:cf:aa:62:db:56:b5:
c9:38:e6:a2:e0:be:11:4f:7f:d8:29:76:cb:ca:ba:
4d:48:12:8a:66:b0:67:87:02:e0:67:35:4b:9f:0e:
66:de:42:be:db:aa:69:8b:43:df:e3:91:65:3e:7b:
87:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E0:E0:C1:E6:72:4B:0B:CC:8A:A8:80:6C:C2:96:B6:41:9F:1F:D4
X509v3 Authority Key Identifier:
keyid:DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:fa:26:ce:bf:34:2c:8b:1d:ad:a5:df:38:11:6b:30:8e:04:
6e:e8:a9:9e:62:3d:98:57:65:80:07:e5:f9:09:27:6a:89:f1:
81:a7:e9:35:50:d1:ff:94:57:72:ab:42:fe:28:50:23:8c:4b:
c0:89:7f:92:85:80:6d:17:47:69:9e:bc:2f:ba:b4:e9:98:c6:
76:c3:10:66:ce:86:02:b8:46:b7:88:a4:70:d3:b1:3d:ab:e0:
1a:09:d9:49:a7:03:59:0f:09:d2:55:42:61:4a:b1:a8:32:3f:
67:1d:3e:f6:b3:ed:ac:ef:2e:3f:ea:ee:43:43:04:b4:b5:e6:
2e:a6:0e:06:89:8d:1a:03:25:b8:5d:25:41:1a:f1:06:17:82:
84:fc:13:85:f4:26:e2:24:73:bc:5b:79:ab:5f:44:ad:7a:61:
da:db:12:50:b0:0b:08:83:a9:9c:7e:3e:ad:f7:b0:ad:ec:d0:
11:cf:b3:ff:eb:da:f9:d5:bf:c3:33:da:bc:19:04:db:af:07:
af:56:76:cc:38:98:79:94:cb:ab:e6:2a:96:55:fc:dc:54:f3:
28:e2:25:c2:a9:35:b0:73:fe:85:30:bc:ef:17:ef:43:3d:11:
a6:5b:47:89:10:03:e3:3e:b1:8b:47:cb:c5:d9:a7:de:44:7c:
61:af:9b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:36:25 2026 by rpki-client