Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft
File: 3GIdzcetC-Mx18mkR_KhZOQupP0.mft (raw, json)
Hash identifier: bpQSvkgl0L67Uo7rxSWDupbgQk+s14WbH7AnlN0/8DU=
Subject key identifier: 72:B6:9A:AC:DB:61:60:F2:9C:B5:84:D6:5A:73:67:BB:D4:99:29:30
Authority key identifier: DC:62:1D:CD:C7:AD:0B:E3:31:D7:C9:A4:47:F2:A1:64:E4:2E:A4:FD
Certificate issuer: /CN=dc621dcdc7ad0be331d7c9a447f2a164e42ea4fd
Certificate serial: 01A1249D181B2623D7AD82AE3D5276A443A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft
Manifest number: 0321
Signing time: Sat 10 Oct 2026 07:00:37 +0000
Manifest this update: Sat 10 Oct 2026 07:00:37 +0000
Manifest next update: Sun 11 Oct 2026 07:00:37 +0000
Files and hashes: 1: 3GIdzcetC-Mx18mkR_KhZOQupP0.crl (hash: 40SrhrL/H8YdFKJyq4grzodkmUNl2gEwWw9koW16ihA=)
2: 5AOG4kUiGD70wVs_XxJDRgh1PMY.roa (hash: MRYcI9nU4eBASWsWUt6T36KO1+qAGLyatjU9/qm4WUA=)
3: Z4m8c_khyolcVDO5PV7q2NiXQe0.asa (hash: 1+Jl7vHo2Ld6XyDIDZY+xyRWhlS4TA+0ypKq1kqiGDs=)
4: jaxXvAizdbnOZ260E3D28kqdvDc.roa (hash: DfDxUm/qCB11xHbyJJCLMlzjpAVxvuDgSoZ8iUQR0iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:9d:18:1b:26:23:d7:ad:82:ae:3d:52:76:a4:43:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc621dcdc7ad0be331d7c9a447f2a164e42ea4fd
Validity
Not Before: Oct 10 07:00:37 2026 GMT
Not After : Oct 11 07:00:37 2026 GMT
Subject: CN=72b69aacdb6160f29cb584d65a7367bbd4992930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d4:b0:b1:b6:24:51:43:cc:61:c2:2b:f6:a7:
b4:59:1d:2b:0b:09:ae:64:16:c9:62:6f:81:8a:60:
6c:a1:ce:66:b9:d9:ed:0c:48:aa:ed:39:ef:e6:30:
9f:f8:6a:94:37:d2:ac:ac:55:43:b3:b9:86:b2:85:
90:e5:b1:e2:be:45:a4:15:26:e7:7c:f0:ec:4d:f1:
2b:a9:1a:37:aa:a2:2b:1c:f8:2f:02:b2:4e:25:3b:
ae:bc:8e:49:c6:91:1e:6a:be:6e:e2:28:f0:8c:8d:
8d:e7:f4:d9:98:6d:b2:51:d3:03:b9:c7:4e:e4:40:
cd:a6:bb:9c:d9:71:ff:68:b3:a8:53:b5:6a:23:21:
1a:98:6b:4c:44:17:ac:69:30:9c:48:ce:97:cb:07:
f1:02:ec:ee:90:5e:6d:7f:c0:30:79:a3:18:b7:e7:
e9:ff:2d:05:92:8c:f6:8c:8f:ac:e3:71:73:37:99:
21:a7:1d:90:6c:44:d1:86:82:1a:31:c2:38:6f:46:
70:b6:bd:1f:26:20:40:f9:b3:32:4b:09:82:fe:9c:
e3:21:61:24:93:a5:90:c3:cb:d5:bb:96:97:2c:f0:
48:9e:2c:75:81:64:1c:00:70:b9:8a:9d:a2:62:6f:
a9:92:ac:f5:6b:14:bb:6f:a9:cb:65:0c:12:58:97:
87:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B6:9A:AC:DB:61:60:F2:9C:B5:84:D6:5A:73:67:BB:D4:99:29:30
X509v3 Authority Key Identifier:
keyid:DC:62:1D:CD:C7:AD:0B:E3:31:D7:C9:A4:47:F2:A1:64:E4:2E:A4:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:6b:15:7e:94:58:c5:29:05:57:90:8e:1b:b9:c5:06:4b:2b:
fa:57:55:1c:e9:6c:dd:42:1a:f1:6c:98:8e:46:90:05:bf:f2:
11:67:f1:59:6f:0d:81:55:94:8b:de:8d:7b:ba:8a:4c:ca:88:
53:b3:bd:29:a7:fe:ee:63:04:cd:1e:5d:93:d0:60:67:7b:fc:
3e:2d:95:ce:8d:1c:6e:64:19:fb:6e:86:e5:44:d1:b6:63:5f:
35:2c:aa:9d:a8:4d:51:5b:61:be:98:19:b0:32:99:a7:cb:66:
6c:1e:44:87:45:d9:ba:f6:8a:09:a9:72:c0:60:1e:22:9f:58:
8e:d7:9b:e1:43:18:bf:a4:f2:1f:51:d0:77:cc:81:8f:31:8e:
1e:94:6c:9c:ba:94:db:9a:d4:a7:a1:08:e3:38:f8:55:07:72:
5a:93:71:26:ca:e1:5c:76:66:61:52:e5:ab:a8:35:e5:ef:a5:
e8:07:85:42:22:ad:5e:0f:17:c1:b7:ed:40:31:e1:49:7a:82:
17:66:43:1e:14:57:48:1f:02:61:98:c2:4a:14:7d:ed:af:07:
3c:a8:8b:8a:59:92:5e:1e:91:a4:1d:74:63:03:7a:d5:f9:53:
37:41:1a:d3:0d:73:16:85:96:c3:bf:a7:23:0a:27:da:0a:ad:
63:8e:77:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:56:27 2026 by rpki-client