Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
File: 3V7mW6NorXTZoD_ygkQMhXeiFZY.mft (raw, json)
Hash identifier: xJLNZz0IlwtTkA4jiDa/+ks3p6vs3XLY9NWOFv6lUEQ=
Subject key identifier: 49:E6:90:F5:DD:04:BB:63:3E:3A:50:4F:1E:D2:02:91:B3:15:C3:91
Authority key identifier: DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96
Certificate issuer: /CN=dd5ee65ba368ad74d9a03ff282440c8577a21596
Certificate serial: 01A0C1E8B918885D72EAD67A29E5AE454D10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
Manifest number: 10BF
Signing time: Mon 21 Sep 2026 03:00:49 +0000
Manifest this update: Mon 21 Sep 2026 03:00:49 +0000
Manifest next update: Tue 22 Sep 2026 03:00:49 +0000
Files and hashes: 1: 3V7mW6NorXTZoD_ygkQMhXeiFZY.crl (hash: FyX3suAB+YPGthTtLF0wd8dg0MGx52xjV3VRnWAL30M=)
2: 6oH-q1WmgKlbF7oPFf0VCjT4cP4.roa (hash: 8fxRfcDqePTH9D6GcvyAsB8XOQ2tsAsMINyYJwfwjDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:e8:b9:18:88:5d:72:ea:d6:7a:29:e5:ae:45:4d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5ee65ba368ad74d9a03ff282440c8577a21596
Validity
Not Before: Sep 21 03:00:49 2026 GMT
Not After : Sep 22 03:00:49 2026 GMT
Subject: CN=49e690f5dd04bb633e3a504f1ed20291b315c391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1f:29:ea:ab:6c:a9:1b:d3:c7:18:b2:73:94:
b8:fe:1c:f1:67:c0:75:41:f6:c6:a6:cb:4e:b8:7e:
8b:c8:b3:97:f7:58:71:d2:21:78:d8:80:5a:40:d0:
5f:25:83:9a:40:47:f9:39:98:c1:05:00:0c:d6:2e:
a3:60:e5:e8:10:fb:b2:fa:6f:34:95:61:5f:e1:b7:
b6:ea:a5:65:05:c5:83:6f:67:bb:93:03:43:1a:18:
c3:6d:5e:13:0a:e4:69:80:2a:aa:38:7d:2f:4b:82:
a0:f7:b8:10:2b:f6:1e:0b:fd:0a:f1:52:6f:f0:5c:
f4:1a:5b:49:19:c7:86:d7:76:89:ee:6b:e0:42:20:
52:6b:f9:ed:49:83:d3:5b:fc:9b:d4:27:cf:41:da:
53:01:6e:9e:68:60:f1:60:ce:04:bb:8b:91:bb:f1:
f4:8b:cc:fc:1d:d6:e6:0f:45:a3:b6:38:3f:a0:68:
55:a9:7e:0d:19:4c:f6:a1:e8:8b:3f:b1:14:bb:de:
8d:02:d5:e2:a7:f2:f1:bd:b9:4b:df:15:0b:bd:db:
4b:0c:6a:be:54:58:db:30:a8:23:f5:8a:c4:1f:8d:
e0:9c:00:61:1a:76:0b:95:62:d9:f6:fa:b4:a8:89:
98:b9:c0:da:b9:69:7c:2d:3c:41:91:b9:0a:07:d5:
82:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E6:90:F5:DD:04:BB:63:3E:3A:50:4F:1E:D2:02:91:B3:15:C3:91
X509v3 Authority Key Identifier:
keyid:DD:5E:E6:5B:A3:68:AD:74:D9:A0:3F:F2:82:44:0C:85:77:A2:15:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V7mW6NorXTZoD_ygkQMhXeiFZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc68dd-1dc8-4888-a3ed-ebd73b19eae4/1/3V7mW6NorXTZoD_ygkQMhXeiFZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:f9:39:4c:e2:a1:63:6b:ad:16:dd:09:d1:ff:df:70:c8:51:
c6:0c:48:4b:d2:43:12:6b:21:3b:90:98:ed:9b:c5:a9:5a:2e:
d5:98:bb:87:a2:ec:1b:a0:0c:53:70:eb:80:7f:93:06:09:b9:
27:19:ab:bb:3c:2f:56:69:66:16:ef:4d:94:95:f6:62:85:cb:
0e:11:66:bb:39:3f:38:f9:41:f2:07:34:28:5f:a1:2d:12:3c:
6f:6f:16:f4:c6:a9:be:19:dc:6b:fa:85:29:c7:84:6b:3f:e3:
c6:aa:fe:f4:71:6b:4d:d2:5e:ee:a3:d7:6e:c1:3b:4c:7b:4f:
79:63:f7:e2:b4:94:3e:37:69:e9:b4:51:46:a4:7d:98:f9:ea:
68:ef:05:29:bb:1a:0a:9b:3a:2b:ad:64:59:e5:d0:b9:62:ac:
b1:9a:47:d3:86:f7:0c:df:78:8f:ba:ca:31:98:04:ee:ab:f4:
f7:c9:12:61:51:f2:21:2d:2b:57:f5:db:6a:00:f8:51:87:ed:
2f:4d:75:4c:d6:f5:21:83:1e:92:82:5a:3d:ca:6a:d1:7e:22:
f1:e7:fd:00:a2:18:a8:bf:ce:16:f9:48:24:6c:00:54:7b:35:
0b:95:6a:89:d1:e0:24:3f:04:e3:84:7b:cb:17:af:56:9b:fb:
fa:73:90:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:28:53 2026 by rpki-client