Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
File: 3thYKwJDhjxXLOJXhsyzb_eVsi4.mft (raw, json)
Hash identifier: 8nY/MkpGJsdiuLwqKrsYbMcvTv1DsIAc4/nyZEIB0Xw=
Subject key identifier: DC:39:24:CE:CC:7E:4F:1F:E3:DC:24:6F:93:E6:AE:88:C5:3B:4B:5C
Authority key identifier: DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
Certificate issuer: /CN=ded8582b0243863c572ce25786ccb36ff795b22e
Certificate serial: 01A13DEF5BDD262670C27F9E7C0997D0F145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
Manifest number: 11DB
Signing time: Thu 15 Oct 2026 05:00:59 +0000
Manifest this update: Thu 15 Oct 2026 05:00:59 +0000
Manifest next update: Fri 16 Oct 2026 05:00:59 +0000
Files and hashes: 1: 3thYKwJDhjxXLOJXhsyzb_eVsi4.crl (hash: SVk5uWIpaPa5MjUBF0jgHT6OjHjynWrsIlzBX3aEoe8=)
2: KSH2fRv0teMM2HR_6KPEmIw6HD0.roa (hash: 8pAxut1VxGbv9FEqSSh94jLC+LFareEYNCETeb8cRjQ=)
3: KVPekIBwtTvoWS8IiLuKU8fAiUI.roa (hash: 9+g9Bq8fgBmveWIVh0SbGqbsAm+bPN0oN6NyLxgE/rA=)
4: mU4-NFKo2wAUwnqL-AxsnDYr11w.roa (hash: 4tZtiaBHFlxvkRx3oe+by1E5v3CH2eyZIsgfyBPHBbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ef:5b:dd:26:26:70:c2:7f:9e:7c:09:97:d0:f1:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded8582b0243863c572ce25786ccb36ff795b22e
Validity
Not Before: Oct 15 05:00:59 2026 GMT
Not After : Oct 16 05:00:59 2026 GMT
Subject: CN=dc3924cecc7e4f1fe3dc246f93e6ae88c53b4b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4c:7a:4e:d5:5e:e6:ef:58:66:12:6b:5d:d4:
33:11:5c:7c:3e:b3:90:9a:2d:6f:41:d2:bc:93:85:
d3:a6:7a:21:10:6a:4c:45:eb:ec:fa:bb:cf:8c:45:
6c:b0:38:2a:5d:8e:60:e0:c6:01:4f:a1:03:bb:4d:
28:63:69:8c:78:c8:9e:7a:96:63:bf:d0:7e:64:83:
d4:79:ab:4c:b8:18:8c:a4:25:43:59:23:b1:d8:9c:
4c:aa:1b:cc:ad:36:43:4e:54:8a:92:a1:9f:74:ae:
ee:fa:b2:87:c3:55:ce:b7:a8:e7:61:61:e9:ec:3a:
3f:73:34:ee:c5:9f:45:8f:72:f1:19:54:08:b4:f5:
a4:2f:7a:c6:b6:8b:2c:99:e6:cb:16:84:18:75:f7:
2b:69:41:07:40:ba:34:a0:21:96:0c:98:40:52:f4:
c6:a6:fe:3d:1c:d5:1d:fa:4a:ea:eb:d2:00:1d:a0:
60:85:6d:f3:4d:5c:25:86:79:50:ac:81:22:92:c0:
0b:df:60:09:94:83:15:7e:8b:77:be:1a:42:65:d7:
19:1b:46:5f:92:a0:eb:fb:54:eb:f6:d2:4d:b4:e6:
d9:5e:47:2e:3a:40:b3:06:ce:eb:35:b9:aa:e4:89:
c4:98:fc:bd:0e:c7:b2:2e:97:63:9f:10:05:86:6d:
52:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:39:24:CE:CC:7E:4F:1F:E3:DC:24:6F:93:E6:AE:88:C5:3B:4B:5C
X509v3 Authority Key Identifier:
keyid:DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:30:d8:86:85:09:2c:8d:4b:55:e4:60:66:ab:17:24:de:f7:
98:cd:e9:00:df:1c:40:61:d9:da:87:d2:a4:69:08:36:32:c8:
48:92:87:c8:7d:0c:b9:a8:5a:27:e7:ba:e0:44:1d:3f:50:9a:
13:b4:7c:cb:a8:f0:6a:7e:0a:ef:a3:a5:b7:b5:d9:4e:ef:0d:
7e:67:89:8a:b8:b1:bc:e2:48:b9:8e:33:4e:90:3c:ef:00:56:
cb:7b:85:8c:cd:9d:84:f8:38:66:a7:09:90:5f:40:d7:7d:fa:
9e:29:c3:38:15:9c:b5:0c:d3:80:49:50:b6:a6:86:2e:93:d6:
07:05:a6:40:a5:86:4b:cc:1a:a7:f3:3b:d1:31:c8:ce:9e:de:
fc:79:b1:4c:60:19:ab:90:c9:f7:2b:72:fc:3e:ad:a0:86:75:
bf:17:e8:8f:11:f2:cc:1c:2b:2a:9b:11:e3:70:d9:42:76:18:
e9:ae:e6:29:65:a2:8f:46:41:f5:95:36:6b:cf:ba:8d:2b:08:
b0:58:cc:33:35:e5:0d:7c:2d:9f:88:eb:af:fb:43:5d:54:f1:
7e:1e:dd:40:0f:95:3a:d1:79:d6:91:70:58:eb:62:43:5a:9f:
19:f1:9e:25:4c:ae:7f:ce:28:0b:1a:f2:25:09:67:b5:3c:3e:
fe:ac:0c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:03 2026 by rpki-client