Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/a2532b-1a60-418b-a6a8-ad89c8cf0059/1/3r0M4EwQIKaT5tp915ZJeLS_dcE.mft
File: 3r0M4EwQIKaT5tp915ZJeLS_dcE.mft (raw, json)
Hash identifier: MfmRIr+LvVJUDbWQDJysA0vsE6qtnhWX9LoeKbiNC0Q=
Subject key identifier: 1F:D7:96:B1:F6:FD:43:7A:B1:88:F9:CA:82:02:EE:41:09:E1:34:E7
Authority key identifier: DE:BD:0C:E0:4C:10:20:A6:93:E6:DA:7D:D7:96:49:78:B4:BF:75:C1
Certificate issuer: /CN=debd0ce04c1020a693e6da7dd7964978b4bf75c1
Certificate serial: 01A03F72DB5B4AC30F96D68DC2DD94A38B85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3r0M4EwQIKaT5tp915ZJeLS_dcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a2532b-1a60-418b-a6a8-ad89c8cf0059/1/3r0M4EwQIKaT5tp915ZJeLS_dcE.mft
Manifest number: 48
Signing time: Wed 26 Aug 2026 19:01:26 +0000
Manifest this update: Wed 26 Aug 2026 19:01:26 +0000
Manifest next update: Thu 27 Aug 2026 19:01:26 +0000
Files and hashes: 1: 3r0M4EwQIKaT5tp915ZJeLS_dcE.crl (hash: PUoiUAcLn5+d656O3b/TD2ZTkCc0JDVFy0r0rNlwdVw=)
2: xdX0VrTVG7c4ScLml_1qkCmtiiE.roa (hash: M7mCvRr7szZ+UQTBMebMCqcIwEnnqv3tYiKhcgcsC6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a2532b-1a60-418b-a6a8-ad89c8cf0059/1/3r0M4EwQIKaT5tp915ZJeLS_dcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/a2532b-1a60-418b-a6a8-ad89c8cf0059/1/3r0M4EwQIKaT5tp915ZJeLS_dcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3r0M4EwQIKaT5tp915ZJeLS_dcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 19:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:72:db:5b:4a:c3:0f:96:d6:8d:c2:dd:94:a3:8b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=debd0ce04c1020a693e6da7dd7964978b4bf75c1
Validity
Not Before: Aug 26 19:01:26 2026 GMT
Not After : Aug 27 19:01:26 2026 GMT
Subject: CN=1fd796b1f6fd437ab188f9ca8202ee4109e134e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4d:3c:36:d1:71:4a:20:12:dc:d8:53:0a:0b:
f1:58:dd:65:43:f8:3e:79:bd:56:e6:17:bc:19:3c:
a5:f5:0e:e3:c2:15:91:ee:f1:e5:e2:54:fd:5f:e2:
ef:4f:4b:1c:3d:d0:05:b7:bc:f5:71:8c:26:be:cc:
1b:12:ea:84:e7:20:80:f9:92:26:3c:14:55:ae:d4:
bf:8a:78:17:b6:54:b5:d4:f1:97:e7:0d:72:98:58:
92:57:a8:67:03:e7:9a:5b:50:ab:41:35:22:0c:b0:
0b:53:08:5e:bf:48:10:c1:d6:57:58:0e:61:c3:80:
68:36:4f:a6:4c:f2:c5:49:64:ed:89:a6:97:b7:25:
c3:a1:ab:af:11:cd:83:34:78:8c:22:af:f8:62:4f:
9d:7e:92:51:ed:f5:8d:97:d9:ef:4e:73:dc:5c:96:
ba:4f:cd:8b:fa:70:14:bf:fd:62:9f:c6:c4:29:dd:
af:69:fb:c5:aa:c8:89:23:63:27:78:2f:26:65:33:
31:4e:fd:40:3f:3d:56:25:fd:fb:16:3e:34:3b:1c:
71:53:89:17:31:56:48:c6:46:2a:8b:80:98:d1:5f:
59:c3:23:13:39:f6:0f:7a:5d:0c:7d:d4:7f:60:ef:
26:db:1e:5d:72:c0:3b:77:33:f7:bf:c0:eb:52:f8:
22:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D7:96:B1:F6:FD:43:7A:B1:88:F9:CA:82:02:EE:41:09:E1:34:E7
X509v3 Authority Key Identifier:
keyid:DE:BD:0C:E0:4C:10:20:A6:93:E6:DA:7D:D7:96:49:78:B4:BF:75:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3r0M4EwQIKaT5tp915ZJeLS_dcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a2532b-1a60-418b-a6a8-ad89c8cf0059/1/3r0M4EwQIKaT5tp915ZJeLS_dcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a2532b-1a60-418b-a6a8-ad89c8cf0059/1/3r0M4EwQIKaT5tp915ZJeLS_dcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c2:4d:88:c6:af:f9:49:3a:0b:92:bd:f0:c9:8f:b7:f4:1d:
62:86:33:b6:f7:4e:0a:15:02:0e:52:4f:32:26:cb:2a:f5:04:
e5:0f:31:71:08:1a:47:7e:55:0a:44:27:ca:e4:56:85:b8:81:
4b:a3:c6:87:fb:a9:62:d5:65:2e:4a:3b:3e:a0:7e:b7:b8:78:
3b:13:8a:4a:33:28:3b:30:56:bb:bd:53:08:1a:ec:09:67:be:
19:2c:61:73:a4:d4:d7:48:30:33:b3:7a:89:d5:d4:4b:b5:13:
30:dd:59:5e:e9:94:a4:d2:d7:67:4c:bb:9a:2c:f6:2f:9d:81:
a6:6c:29:31:71:dd:18:4c:be:65:3f:20:06:55:a0:b5:7c:56:
03:a7:d3:06:d8:59:a0:6d:50:6a:20:15:7c:90:3e:19:15:7c:
8e:28:d3:41:65:b0:e3:55:b2:ee:e0:e1:0b:b4:a7:2c:bd:6b:
29:1b:ac:72:8a:11:56:98:02:ca:00:e6:2c:5c:a2:52:21:4c:
bc:3b:2a:e2:d0:e3:f2:6e:e8:5a:3f:14:30:84:38:48:19:73:
49:23:d7:71:05:a0:76:b9:f1:26:11:3c:25:bf:65:58:f1:b9:
21:96:01:bc:26:98:c5:ce:d8:d8:dc:86:66:09:36:a6:43:3f:
f6:bc:3f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:25:14 2026 by rpki-client