Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
File: 3YqroPRrqhRP2wk46RwU-UxhZQw.mft (raw, json)
Hash identifier: 0wtGpN8db9WhtaT3M+fNd88+DfqwYIaNePpKR7MjcJ4=
Subject key identifier: 16:A1:37:C7:82:F1:31:F5:CE:5A:4C:28:C8:2F:7F:FF:7F:0B:BE:E0
Authority key identifier: DD:8A:AB:A0:F4:6B:AA:14:4F:DB:09:38:E9:1C:14:F9:4C:61:65:0C
Certificate issuer: /CN=dd8aaba0f46baa144fdb0938e91c14f94c61650c
Certificate serial: 01A111BC385F3970A0E822C3EA20BBBCCCE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
Manifest number: 11EE
Signing time: Tue 06 Oct 2026 15:01:50 +0000
Manifest this update: Tue 06 Oct 2026 15:01:50 +0000
Manifest next update: Wed 07 Oct 2026 15:01:50 +0000
Files and hashes: 1: 3YqroPRrqhRP2wk46RwU-UxhZQw.crl (hash: uHKWoslrOrutxA+FjVARN8kHFMl2lgoXxrzxz0Y/x+Q=)
2: ipwbth9z_kAmFFiQQC69LkO_nQw.roa (hash: NejJVwemsx7RaWRb+qhN37iXZFwIo50zil0wLKpDlFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:bc:38:5f:39:70:a0:e8:22:c3:ea:20:bb:bc:cc:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8aaba0f46baa144fdb0938e91c14f94c61650c
Validity
Not Before: Oct 6 15:01:50 2026 GMT
Not After : Oct 7 15:01:50 2026 GMT
Subject: CN=16a137c782f131f5ce5a4c28c82f7fff7f0bbee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a2:4d:9b:28:ca:84:ab:42:f0:1a:5a:3d:cc:
72:c6:6e:30:a1:53:4b:07:66:d6:07:bc:45:9a:b1:
9f:be:38:cf:ee:98:05:32:cb:5f:22:10:53:38:c9:
d3:86:de:c7:49:ca:0d:3d:d8:91:ac:39:42:9e:e3:
8e:97:73:f3:d6:dc:21:74:88:9c:e2:df:75:eb:3f:
8a:e0:85:5b:0b:e8:7e:f4:47:f4:63:d5:31:fd:22:
b3:e0:db:12:f1:e8:27:4b:7b:44:fb:02:a0:8f:46:
e0:94:24:90:88:30:a8:f8:15:d2:92:41:a9:08:34:
71:bc:d9:0a:7c:ff:b0:70:f9:fc:85:0d:b0:fd:64:
a8:7c:0a:43:7a:65:ae:c7:87:65:02:36:74:1f:05:
12:83:d0:02:86:5d:1e:8c:37:d8:b4:9e:df:ec:7f:
76:b1:bf:4b:bd:b8:33:79:a9:fc:e5:51:98:bb:88:
ff:82:63:fd:d4:92:e9:0f:10:bd:6b:7f:c5:04:37:
39:ad:4e:ec:5f:35:ee:93:21:83:59:7f:af:9c:58:
15:e5:d7:de:e2:d7:6c:e8:49:1c:da:33:59:3a:8a:
5d:f5:70:16:48:96:72:ae:29:f4:d3:31:ca:d0:4c:
f9:77:1c:db:c4:eb:7e:82:49:d1:52:59:98:d1:ff:
57:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A1:37:C7:82:F1:31:F5:CE:5A:4C:28:C8:2F:7F:FF:7F:0B:BE:E0
X509v3 Authority Key Identifier:
keyid:DD:8A:AB:A0:F4:6B:AA:14:4F:DB:09:38:E9:1C:14:F9:4C:61:65:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:30:35:b8:50:b1:2b:e5:43:6d:c1:e5:36:05:5c:29:7a:2d:
83:ad:df:58:bf:1e:14:fd:c4:71:10:3c:e8:7a:b8:30:5a:a0:
2b:58:42:3c:b0:09:7e:5c:5f:10:5e:87:df:80:73:b5:a5:7f:
d0:c9:5f:36:c3:71:61:43:86:ce:36:a0:40:c6:ad:a0:09:52:
86:d2:aa:80:55:be:ad:8b:97:61:42:a9:5c:ff:b4:2a:4b:d2:
03:c5:da:e5:44:62:22:aa:77:7a:85:3a:69:91:79:31:72:36:
81:a5:ec:27:a0:39:4b:0b:cf:a5:f1:22:22:85:3c:f6:9f:50:
e6:4f:f0:2b:e4:cc:86:65:b8:94:1b:77:ea:a8:ee:c0:bd:f5:
ea:9d:ce:d7:35:55:6a:1d:43:5b:59:cb:4a:27:22:3e:2c:63:
a1:9f:97:df:72:ea:ce:21:67:b2:fd:32:31:8b:c7:47:8d:ce:
77:6c:13:0d:4e:01:bb:81:72:13:d3:c1:47:c4:73:83:38:62:
2d:af:77:56:e1:5c:41:93:f6:5d:eb:38:c5:eb:da:5b:bc:e3:
18:8f:c6:7b:a8:af:1b:61:c7:38:82:c6:07:ce:ff:43:77:b6:
63:06:c4:3a:dc:43:f5:36:72:f1:68:41:e2:b0:62:3b:df:04:
1c:c6:c0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 22:24:48 2026 by rpki-client