Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
File: 3hgnB8REwxBksYmcWX6e_XNDj5I.mft (raw, json)
Hash identifier: /aFX7q3uMHzKZUD8jEZ75p7Hb7Dp7LoHf+Xu6LSu46s=
Subject key identifier: 75:55:CB:C5:B1:A5:08:E6:65:E2:7E:95:F1:12:52:23:F2:22:99:0D
Authority key identifier: DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92
Certificate issuer: /CN=de182707c444c31064b1899c597e9efd73438f92
Certificate serial: 01A1415EB53695C29D8E7EC385CC862F519C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
Manifest number: 0A0F
Signing time: Thu 15 Oct 2026 21:01:28 +0000
Manifest this update: Thu 15 Oct 2026 21:01:28 +0000
Manifest next update: Fri 16 Oct 2026 21:01:28 +0000
Files and hashes: 1: 3hgnB8REwxBksYmcWX6e_XNDj5I.crl (hash: LRhwrPuLRvgXrzZxcl/MWAsp8ViLP/ee6nze4s7qtek=)
2: _sKUqr_T2WU5wpJt5pENqGxaGNg.roa (hash: 26WyPtt0JWgZh/PV/eTd/0WIUbfzzYa6z8NjLk7cJ+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:5e:b5:36:95:c2:9d:8e:7e:c3:85:cc:86:2f:51:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de182707c444c31064b1899c597e9efd73438f92
Validity
Not Before: Oct 15 21:01:28 2026 GMT
Not After : Oct 16 21:01:28 2026 GMT
Subject: CN=7555cbc5b1a508e665e27e95f1125223f222990d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:03:6a:44:ab:ad:00:4c:ea:21:8a:1a:2c:f8:
93:77:ce:ea:9a:94:68:0f:8c:7a:19:3b:8b:33:ad:
c7:38:07:f8:4b:2d:a5:4e:48:c6:1b:5f:9e:f9:41:
92:c6:1b:c7:1a:b4:de:16:c0:5a:df:7d:26:25:15:
2a:c4:fc:fc:83:85:6e:90:51:39:93:1d:c6:77:cd:
6d:40:87:d5:e5:a8:d4:ee:8d:75:b0:c3:39:99:e4:
00:d8:58:fb:c0:e8:44:c1:67:66:c4:bb:81:c2:ee:
e6:f7:82:e7:09:77:73:e3:e8:84:b6:a6:ba:ab:17:
95:b9:dd:60:9e:9a:16:c6:58:c7:1d:64:9e:d9:c5:
38:ff:1f:6c:a1:c3:59:2c:a5:1c:51:33:40:88:e8:
b3:37:13:64:b6:3f:05:a3:a1:dd:0a:a8:e5:eb:0f:
ee:b8:d7:f7:0e:04:9b:da:8c:6e:34:08:9b:93:f1:
c9:5d:09:b3:de:99:12:3e:ca:60:0f:67:a8:f9:c5:
14:d0:f8:2e:4d:93:25:ba:72:c9:ef:38:8b:06:1d:
da:81:9b:31:fa:1f:ca:4e:6e:78:5f:2b:fb:68:d3:
dc:d0:11:36:fa:d8:76:5b:fd:17:cf:4f:21:a8:e2:
ec:f5:aa:9b:ca:13:67:28:8b:aa:d7:9a:40:72:89:
1e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:55:CB:C5:B1:A5:08:E6:65:E2:7E:95:F1:12:52:23:F2:22:99:0D
X509v3 Authority Key Identifier:
keyid:DE:18:27:07:C4:44:C3:10:64:B1:89:9C:59:7E:9E:FD:73:43:8F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hgnB8REwxBksYmcWX6e_XNDj5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3bf301-d189-475d-95dc-eaae3de8ab58/1/3hgnB8REwxBksYmcWX6e_XNDj5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:0d:97:6a:0f:e9:41:e3:56:92:b2:f4:ac:09:9b:5f:50:3b:
11:c8:a2:49:78:00:e4:3c:61:d7:50:51:f3:30:e4:40:6b:d5:
05:b0:e0:44:57:42:7b:f8:9f:76:6b:75:ec:2e:81:26:1a:ab:
2d:0b:a1:27:b2:7c:63:f2:10:4c:a1:07:01:bb:f1:7d:4b:7c:
35:65:7a:2e:a4:43:ad:17:58:5c:36:7d:e4:d9:3b:54:f0:37:
f1:84:dd:40:a5:13:e4:27:65:b1:d4:26:78:17:39:fd:1e:01:
42:10:65:6b:c5:65:b4:1e:1c:61:3f:c8:7b:4f:77:39:5a:0e:
37:34:33:6b:3b:39:b1:27:7b:41:0b:16:07:a3:6e:30:4a:a9:
84:dc:f3:e0:6e:bf:ba:4b:0a:ee:0c:0e:34:bf:6c:1b:77:55:
d6:25:77:18:71:32:dd:42:b6:9a:4a:88:0f:e7:44:eb:fb:26:
76:9a:6a:52:c1:b9:24:92:b6:ed:20:8e:73:00:2f:67:8e:c0:
84:9d:3e:a4:0c:45:5d:e5:c5:4c:09:c9:d9:c7:f6:1d:fb:e1:
80:3a:a9:54:66:b3:cb:d6:26:8f:20:72:ec:f6:a8:43:49:9a:
df:7b:18:f2:51:58:e8:c5:9d:34:a6:42:79:61:a8:bd:96:f2:
1e:4c:7d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:06:50 2026 by rpki-client