Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/_3VDG3ytn66j5BlWlh4IR1X4LTM.mft
File: _3VDG3ytn66j5BlWlh4IR1X4LTM.mft (raw, json)
Hash identifier: 8uB9fXWYTY2Wu2aIpABySv9vjIxj1r7uF7Jr8NsY7q0=
Subject key identifier: E7:81:EF:D0:D8:94:CF:02:45:84:18:8E:32:38:DC:1F:3B:F9:1D:BF
Authority key identifier: FF:75:43:1B:7C:AD:9F:AE:A3:E4:19:56:96:1E:08:47:55:F8:2D:33
Certificate issuer: /CN=ff75431b7cad9faea3e41956961e084755f82d33
Certificate serial: 01A17815CA50F2C65AAA8D43464FCEC719F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3VDG3ytn66j5BlWlh4IR1X4LTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/_3VDG3ytn66j5BlWlh4IR1X4LTM.mft
Manifest number: 013C
Signing time: Mon 26 Oct 2026 12:00:56 +0000
Manifest this update: Mon 26 Oct 2026 12:00:56 +0000
Manifest next update: Tue 27 Oct 2026 12:00:56 +0000
Files and hashes: 1: TjAvlv1RE5zaPC2dyAwi4crfm6o.roa (hash: j19p19mIszd20BEiCpsiRkK3ohgiQ0R61lURvBqp/zQ=)
2: _3VDG3ytn66j5BlWlh4IR1X4LTM.crl (hash: snPiNlkdhyWS+/x19h0C/uR8+ZFXQuaeRAgW6hmi6/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/_3VDG3ytn66j5BlWlh4IR1X4LTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/_3VDG3ytn66j5BlWlh4IR1X4LTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3VDG3ytn66j5BlWlh4IR1X4LTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:15:ca:50:f2:c6:5a:aa:8d:43:46:4f:ce:c7:19:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff75431b7cad9faea3e41956961e084755f82d33
Validity
Not Before: Oct 26 12:00:56 2026 GMT
Not After : Oct 27 12:00:56 2026 GMT
Subject: CN=e781efd0d894cf024584188e3238dc1f3bf91dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:43:b2:1f:98:9c:26:03:7b:bd:97:89:5e:05:
71:a0:f6:94:60:f7:8e:78:21:fe:0d:3e:52:09:59:
a6:6c:81:24:d2:6f:b8:99:36:90:0b:81:d2:ac:66:
1d:93:fb:8c:c1:f6:0f:44:7b:4f:11:30:41:9c:78:
9c:7e:83:fd:a8:a3:6d:b1:06:b3:7a:b8:a8:c2:b7:
75:6d:7b:b7:da:95:7f:60:a1:13:f6:9e:ca:37:b4:
61:07:e5:4d:e5:3c:fa:3f:7a:68:0b:a8:49:0e:8f:
ac:9b:cb:7a:97:2e:2c:8f:68:ba:03:80:a7:4e:5a:
16:dd:e3:3c:dc:59:2c:72:42:b1:f0:ef:64:c0:c2:
60:a1:ee:fa:44:e7:83:4e:fb:c7:da:38:d1:92:be:
64:a0:de:bc:1d:f4:60:d9:10:6a:10:29:d7:b4:31:
7a:7a:6a:9f:d6:3f:d4:02:5f:f2:22:dd:a5:1c:2b:
24:0e:d1:05:e5:d7:05:70:5a:b5:36:b4:be:ae:d9:
f1:2a:ab:9d:e6:ae:69:82:fe:ae:05:6e:e1:e2:a1:
3c:77:25:ec:ce:b4:ab:66:e6:22:d5:04:66:64:42:
ba:33:8d:4f:d7:b0:73:ac:bc:e0:dc:ed:d9:8b:b8:
96:ba:eb:df:c7:8d:13:32:25:42:b5:97:92:25:37:
e9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:81:EF:D0:D8:94:CF:02:45:84:18:8E:32:38:DC:1F:3B:F9:1D:BF
X509v3 Authority Key Identifier:
keyid:FF:75:43:1B:7C:AD:9F:AE:A3:E4:19:56:96:1E:08:47:55:F8:2D:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3VDG3ytn66j5BlWlh4IR1X4LTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/_3VDG3ytn66j5BlWlh4IR1X4LTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/_3VDG3ytn66j5BlWlh4IR1X4LTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:0a:e1:8b:92:ff:a2:d8:c1:e0:fe:4b:cb:42:82:ce:01:8b:
a3:97:00:06:93:1f:68:e3:58:bd:83:f1:a9:52:28:51:92:76:
33:32:c1:89:70:a5:a0:21:d5:8c:16:2c:e1:31:c5:fa:24:d4:
51:fe:4c:a7:f6:a4:b2:28:fc:28:40:ac:b1:e8:0d:87:c3:b7:
08:6c:c7:b7:ab:16:68:17:0e:3c:00:5d:42:2e:e4:5c:8d:2a:
33:72:93:92:5a:fa:6e:ee:bb:49:c0:7f:0e:36:3d:68:7c:cc:
8b:7e:f8:94:27:9d:d4:ab:56:41:c5:be:a6:97:0c:86:98:bb:
c4:0c:c7:7c:db:4f:55:9e:86:3f:0b:1e:9e:08:47:7b:44:26:
0f:93:a2:80:e0:95:d8:1f:dc:60:8f:f5:8c:bd:a8:0a:4a:4e:
03:c1:d9:7e:78:7f:43:e8:4f:80:e0:20:93:d3:d5:b9:bc:0f:
25:b3:18:a2:99:7e:69:bc:34:a3:69:ec:c0:84:09:85:b3:1b:
d1:99:4c:bc:d9:8f:77:29:47:26:a9:11:68:66:39:18:af:fe:
2a:3f:97:48:54:f3:d0:db:8d:fa:90:99:e5:7c:50:16:6b:31:
12:75:e1:b8:c9:3d:e1:19:95:f3:8a:1a:91:f2:0d:90:4c:ca:
e9:94:2d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 18:29:11 2026 by rpki-client