Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
File: 3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft (raw, json)
Hash identifier: 1zXRq9dOSeGtJZVTZRQpkYOBWPf6H80kBCZLEllGKDE=
Subject key identifier: 53:E1:D9:12:5F:FE:09:EE:AA:50:C4:09:EE:7E:DA:7E:03:C0:D3:83
Authority key identifier: DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96
Certificate issuer: /CN=dc6baa601236ab9bea29f807a66920ed5656a196
Certificate serial: 01A1043752D4A015B8826C3B9CC251E10185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
Manifest number: 1A85
Signing time: Sun 04 Oct 2026 00:01:36 +0000
Manifest this update: Sun 04 Oct 2026 00:01:36 +0000
Manifest next update: Mon 05 Oct 2026 00:01:36 +0000
Files and hashes: 1: 3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl (hash: P26Ud2E1NjldkFjhyPbkmo/Wr6ICW65X08y6K9z0jew=)
2: LmwyPllgT27iDmcYfX7agNvw4rA.roa (hash: kpm3XdXtMEMrfdjcWSVw0huoNKfPlGFqAs8H1ASM9Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:37:52:d4:a0:15:b8:82:6c:3b:9c:c2:51:e1:01:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6baa601236ab9bea29f807a66920ed5656a196
Validity
Not Before: Oct 4 00:01:36 2026 GMT
Not After : Oct 5 00:01:36 2026 GMT
Subject: CN=53e1d9125ffe09eeaa50c409ee7eda7e03c0d383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:62:91:fd:27:88:5b:96:07:7d:ba:85:21:40:
0a:33:da:bd:b1:ed:0e:c4:6e:56:10:f9:84:25:89:
04:b8:57:73:df:c7:91:56:67:12:38:ec:90:90:4e:
64:b3:30:b2:3b:c1:cf:5f:e0:6c:9a:07:d0:44:fe:
42:ba:04:21:b7:1a:12:f4:b8:d8:6a:8f:cc:bc:49:
a1:a0:02:9e:d5:a1:64:dc:bd:e3:03:dd:37:59:78:
83:a2:02:a2:76:eb:e6:d4:94:a1:88:10:a8:0e:65:
ec:b1:24:ab:82:64:05:38:a8:0d:d8:01:f2:af:29:
c0:9b:77:fe:fd:6d:70:4d:32:96:65:27:9f:07:a8:
e7:bf:d9:db:f0:81:3a:68:c9:4e:4e:94:68:c3:50:
b5:6e:ee:f0:d7:9f:8d:88:f3:99:bd:c0:d4:51:7d:
6e:83:38:43:a7:6a:a7:45:9d:77:12:9e:c3:36:87:
37:5f:98:22:c2:bf:8f:b4:36:12:11:79:83:46:a1:
2c:fb:71:df:3e:b3:9a:43:2b:0b:35:48:cc:0c:48:
56:ac:55:f0:3c:3e:a4:f7:da:26:47:29:e3:d2:03:
c7:63:9d:10:df:98:0f:41:3b:e3:cc:9a:6a:43:3e:
7d:3e:6c:f1:4e:02:c9:c4:7a:97:88:3a:0c:83:1c:
74:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E1:D9:12:5F:FE:09:EE:AA:50:C4:09:EE:7E:DA:7E:03:C0:D3:83
X509v3 Authority Key Identifier:
keyid:DC:6B:AA:60:12:36:AB:9B:EA:29:F8:07:A6:69:20:ED:56:56:A1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GuqYBI2q5vqKfgHpmkg7VZWoZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7bd2e3-f3c5-4955-b9a1-34a1237f1670/1/3GuqYBI2q5vqKfgHpmkg7VZWoZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:cc:25:25:79:b5:2e:d2:c5:99:92:70:7d:29:6c:4e:8b:6e:
11:da:c1:0c:ce:a2:e2:8e:29:ad:90:55:c2:7f:20:21:f0:e5:
b2:e8:14:98:09:3f:47:dc:ae:db:4a:c6:b3:22:51:23:fd:ea:
97:9b:f4:36:4f:62:4f:9f:3d:bf:f6:f6:a0:d1:f2:06:da:01:
9b:4c:7b:51:2e:33:0a:c9:5a:8f:64:59:cc:41:6c:2a:52:12:
14:ec:05:49:08:5e:2d:13:c1:ea:1f:80:22:7d:63:13:d2:7b:
3f:67:22:a2:08:c8:b8:b7:10:89:9f:78:9e:89:3f:cb:a7:2b:
8c:d5:bb:4f:43:d4:c1:f0:4e:3f:49:f2:e8:01:f2:2d:b4:3f:
20:b1:a2:dc:86:7f:90:ac:94:88:12:d6:e9:19:c0:c7:24:bb:
5c:f9:47:64:50:a5:45:ff:c9:1e:3c:f3:1f:dd:bb:aa:19:ad:
4a:aa:58:d8:98:d9:fd:c6:d5:01:14:a9:93:c6:4e:3a:6d:a0:
6f:d4:19:90:21:3d:a6:92:7c:97:8f:3e:b8:60:e2:4d:eb:0d:
e0:64:95:ac:06:da:48:e3:77:fc:21:4e:13:a6:61:57:2a:21:
e5:46:14:4a:7f:98:30:45:f3:e4:8b:f0:6f:0c:2a:81:1d:cc:
2b:c2:1b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:08:52 2026 by rpki-client