Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
File: 3U3LVvefSh3tjZVIIzOWHQJk-qU.mft (raw, json)
Hash identifier: nyafvZvaFV2LjDHxBMrdRXJafOVZ11eOQ4r8meSj1hY=
Subject key identifier: 1B:C6:39:F8:8E:3A:16:D5:23:CF:9D:1B:AA:C4:8D:15:01:EA:21:8C
Authority key identifier: DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
Certificate issuer: /CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Certificate serial: 01A0DFBCF9313CB27FDF9715525A15CBE994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
Manifest number: 10A4
Signing time: Sat 26 Sep 2026 22:01:38 +0000
Manifest this update: Sat 26 Sep 2026 22:01:38 +0000
Manifest next update: Sun 27 Sep 2026 22:01:38 +0000
Files and hashes: 1: 3U3LVvefSh3tjZVIIzOWHQJk-qU.crl (hash: /vyFtG1M8nIw5qg6mdYGFAawethAh5ROqegb7+gTsPY=)
2: H5QErsI5RrGZOHFY6_FrSzEPwsg.roa (hash: BTdVxM8rbJfdiUp2j6fzsOE0ajTe0wntltZ6HVxnZpM=)
3: UtbWjP8TosULXxgOwSpGBsXAj1E.asa (hash: e7BKC4GZaIVKdGVBnnQIPsiQuksngCu2TeIqsWJLAi4=)
4: aAEGzSQAFN3XfOJTKzynLK0MJWQ.roa (hash: HGx+oxdetMBYVjpIjo60Q4M2urPI2bwYBUq579gQfFA=)
5: b7KDZwK5R28lE5M6tD1UYAgLTs0.roa (hash: chq9h/QyXrEES2o8hWXwMO8b44fg7JP3nOh0+1DILZ0=)
6: iTAqvs2G1UdUfx5Fmn2Z7H7-Wuo.roa (hash: L18Wb/sBRdrTPyOX3b7ZSqqO81GWE2YfQWPbOKytco8=)
7: n8wKAbeQwoniSlzobzWQkZPFQ90.roa (hash: gAASzqy3Nb3k3RF3IE7AiqoPFAF8THLrgzOMP+9Awr8=)
8: rxo-kMSJfYbIjml0McyLHchnJKw.roa (hash: 6yBdVD63LgbBLLvhVAYIbiNVvZCYYH7FdQZFXoIkCTo=)
9: wGG9IOCrMHtRziuynra1nkRdUDY.asa (hash: 0SvZ4eV+iL0WsKH5/j8UMkYpXnwrBsqB5DmizyY13m4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:bc:f9:31:3c:b2:7f:df:97:15:52:5a:15:cb:e9:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4dcb56f79f4a1ded8d95482333961d0264faa5
Validity
Not Before: Sep 26 22:01:38 2026 GMT
Not After : Sep 27 22:01:38 2026 GMT
Subject: CN=1bc639f88e3a16d523cf9d1baac48d1501ea218c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:84:75:06:45:d2:32:13:e7:57:22:0f:d7:29:
1b:47:20:24:29:e2:6f:60:3c:36:86:ae:1b:8d:75:
45:10:c1:77:47:66:82:e9:76:75:b2:1b:11:5e:ef:
18:bf:fe:5b:3d:ff:fd:83:c4:3e:94:8b:87:a5:fc:
3d:b2:19:cc:9d:a8:6a:22:66:40:ce:af:0c:57:19:
04:f8:a1:c3:99:b1:34:2f:3a:14:43:36:a6:12:9e:
f7:9d:2b:20:70:70:c4:83:06:a1:a5:dd:47:4b:80:
a0:0a:e3:c7:1b:04:4a:a1:fb:66:8d:22:27:c9:66:
ba:29:32:39:79:63:47:f7:cd:ce:11:45:9c:48:ec:
8b:fd:1b:13:ca:76:cd:7a:40:51:9e:bb:10:0a:22:
77:6e:cd:3a:d1:fb:ff:8a:3b:67:30:e0:74:f4:00:
92:c2:68:60:21:82:18:b6:d8:9c:43:b0:2c:15:e5:
c1:5b:af:c3:84:25:bb:07:d1:ce:2e:84:ef:90:1b:
ff:e8:ff:57:e2:67:d4:89:8a:eb:67:cc:11:76:49:
5f:af:45:86:c1:c9:9a:18:66:45:32:ff:95:d0:ed:
c5:e7:87:3e:a3:95:10:07:33:f7:69:bb:ca:5a:8e:
45:75:1a:20:0f:aa:9e:07:b5:4d:30:99:ca:d0:03:
35:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C6:39:F8:8E:3A:16:D5:23:CF:9D:1B:AA:C4:8D:15:01:EA:21:8C
X509v3 Authority Key Identifier:
keyid:DD:4D:CB:56:F7:9F:4A:1D:ED:8D:95:48:23:33:96:1D:02:64:FA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U3LVvefSh3tjZVIIzOWHQJk-qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ab3e73-d13d-4ec2-bf3f-177b5ba32327/1/3U3LVvefSh3tjZVIIzOWHQJk-qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:1e:ae:45:e6:15:07:0c:35:64:0e:fa:1b:e5:4a:03:ab:3e:
24:f9:67:b1:bd:30:d4:a8:94:f9:87:0a:69:7a:20:18:ac:4e:
e3:b8:aa:ba:67:56:c2:ec:e2:6d:bc:b5:3e:ca:1c:27:4f:36:
23:78:90:d9:98:12:5b:b5:72:74:64:c1:93:8d:62:71:8a:62:
67:21:2c:58:d7:19:a6:f2:3a:7c:8e:1e:3e:34:51:0d:18:25:
a1:8c:80:bd:6c:16:38:72:dd:4d:24:c9:16:22:05:65:2f:dc:
50:c6:c5:da:77:a4:8d:25:5d:a8:9a:89:a4:37:13:bc:7a:69:
d0:e6:8e:10:46:f3:a5:c2:b8:3d:c3:62:9b:cd:74:df:6c:6c:
0b:30:9d:78:00:2c:a2:f4:57:3d:46:09:e5:83:73:92:01:1d:
41:b4:fd:62:72:03:a0:d5:cf:ce:2f:d0:fa:a6:c4:1b:df:b3:
21:3f:45:ad:bf:83:80:35:82:81:fc:70:aa:cf:e3:c8:c2:fd:
fe:52:5a:d2:9d:46:91:bf:79:3f:d5:3c:c5:af:09:bd:8d:e1:
28:65:94:61:67:85:cf:f4:e3:62:cf:fe:a7:06:30:7d:f8:83:
b2:d4:9f:dd:2f:14:f2:27:2f:4e:54:ae:1b:a5:66:5d:75:b0:
03:b8:cf:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:52:08 2026 by rpki-client