Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
File: 3A3qTqJUbXoBmk74JDtetjVlyEc.mft (raw, json)
Hash identifier: kCTk5zW936I0UjhPLF14IgT5dBCvyQZshOd9zeVjNbc=
Subject key identifier: E7:93:BC:EE:B2:E3:D3:BB:F3:48:8B:EE:82:AA:4F:BA:79:06:B0:20
Authority key identifier: DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
Certificate issuer: /CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Certificate serial: 01A0D5704DD30026C9E7C0DEBB7DCF066D5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
Manifest number: 1A02
Signing time: Thu 24 Sep 2026 22:01:41 +0000
Manifest this update: Thu 24 Sep 2026 22:01:41 +0000
Manifest next update: Fri 25 Sep 2026 22:01:41 +0000
Files and hashes: 1: 3A3qTqJUbXoBmk74JDtetjVlyEc.crl (hash: Qh1WDckxVpvPh3fT5oHGeA8ox0VfjxKBJ3BoE8lPE0M=)
2: gmn2k3f32tfDXu2zwYzVyGe8JSs.roa (hash: W9sjDbpYZWeZAU/ChNMb2ZUNyZYk9yxty8Xm+AfcIh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:70:4d:d3:00:26:c9:e7:c0:de:bb:7d:cf:06:6d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Validity
Not Before: Sep 24 22:01:41 2026 GMT
Not After : Sep 25 22:01:41 2026 GMT
Subject: CN=e793bceeb2e3d3bbf3488bee82aa4fba7906b020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:12:c7:3e:5e:4f:88:1a:5d:ba:09:79:39:2a:
03:c9:fe:c7:e9:d1:f0:f3:39:3f:bf:fa:77:32:22:
3a:ea:0f:dc:c9:cc:23:9b:35:cc:22:5b:aa:86:00:
33:ad:35:15:a8:90:d1:f2:1c:1c:11:90:ce:b2:ac:
4b:71:cb:67:93:f9:25:d2:30:bf:d7:66:32:6c:41:
b0:39:bb:8d:df:17:ad:1b:ad:db:4b:15:40:a3:1d:
75:12:e2:1d:35:11:60:47:72:a1:aa:c0:af:69:6b:
63:a6:f4:97:fc:04:5f:ed:01:f0:8d:08:26:a2:38:
2b:71:b6:f1:1e:43:a9:5a:67:81:09:a2:46:a9:7d:
22:2b:af:21:71:a1:3e:fd:59:7c:d3:41:a4:37:32:
cb:80:bb:0e:98:5c:fb:3b:de:d0:ab:74:57:e4:1c:
c7:1e:d0:ae:ef:34:56:ad:65:e6:84:a7:e1:3f:f8:
25:15:7c:71:f5:b1:ae:73:95:34:29:cb:fb:42:0a:
53:ed:57:41:34:ad:5a:68:35:3f:b4:2e:f6:9b:72:
1e:c1:06:3a:6a:a0:74:ae:18:cd:8b:b1:ca:32:61:
45:3c:d0:71:97:da:ed:68:1c:f5:1d:b7:86:c4:36:
1d:4d:e1:b7:d5:4c:b7:fc:6b:32:bd:02:39:38:81:
de:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:93:BC:EE:B2:E3:D3:BB:F3:48:8B:EE:82:AA:4F:BA:79:06:B0:20
X509v3 Authority Key Identifier:
keyid:DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:25:ac:f1:9b:16:1d:5f:e5:6b:b5:5c:ba:07:18:13:46:2e:
9d:6c:5b:7a:4d:bb:5f:ce:4e:ae:d7:fd:f8:ac:1a:47:5e:4b:
2e:9c:7d:01:55:0b:2e:1c:51:0a:a2:18:11:a4:91:be:77:e0:
8b:f7:42:ae:34:63:17:9c:e7:0f:98:f4:13:84:62:55:e1:39:
a5:5b:35:b6:99:dd:60:7c:a6:11:23:f7:4d:fe:b9:71:ca:23:
e9:16:7d:19:0d:49:e7:14:fc:2f:41:ec:ec:6b:8a:96:cc:1e:
ba:a6:2b:b8:64:c0:d5:f9:0c:e8:d3:bb:b0:26:23:ad:97:59:
ab:9e:65:3f:cd:31:51:87:e5:1b:f6:5c:16:f3:8e:4e:4c:62:
06:c5:1e:52:0d:a9:44:e3:4a:89:ea:7f:2c:3e:e6:0a:47:8d:
ce:a9:1a:b6:ec:c8:38:9b:f1:f0:51:16:85:71:71:19:6e:da:
a4:37:c6:ea:b9:aa:15:be:19:f3:85:cc:85:09:df:c2:dc:4f:
35:a1:4a:ba:0c:af:ab:b5:c3:0d:13:e5:3d:9b:d1:64:88:1a:
9b:be:95:28:51:2e:ff:3a:11:dc:83:37:5e:9f:c9:72:ae:96:
82:bf:a9:bd:f7:4f:b7:7e:ce:79:00:0e:8f:6b:d7:32:23:73:
96:25:81:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:07:57 2026 by rpki-client