Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
File: 3hL5ZansM-LC6HthYb7vuL4obKM.mft (raw, json)
Hash identifier: AVDRE86NGFlNYnVWZLwLKeMpfVISNdQdgfCXor+2cGc=
Subject key identifier: 3D:FF:5A:BB:A0:72:37:7E:30:14:EF:A0:25:05:67:FC:43:BB:AE:45
Authority key identifier: DE:12:F9:65:A9:EC:33:E2:C2:E8:7B:61:61:BE:EF:B8:BE:28:6C:A3
Certificate issuer: /CN=de12f965a9ec33e2c2e87b6161beefb8be286ca3
Certificate serial: 01A0C7B348F73E72EB438A62690BE86FE726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
Manifest number: 188B
Signing time: Tue 22 Sep 2026 06:00:10 +0000
Manifest this update: Tue 22 Sep 2026 06:00:10 +0000
Manifest next update: Wed 23 Sep 2026 06:00:10 +0000
Files and hashes: 1: 3hL5ZansM-LC6HthYb7vuL4obKM.crl (hash: H/r8hxIOW8blT11pXjyiB3ELJOEqIdWJSp2XJWfSkL8=)
2: dQKWrb4274MA9TnUoPK0iLguRN8.roa (hash: iabYGi8dw6jC4+Zg8izYgwpn552JIuXwr1GRxu62hag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b3:48:f7:3e:72:eb:43:8a:62:69:0b:e8:6f:e7:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de12f965a9ec33e2c2e87b6161beefb8be286ca3
Validity
Not Before: Sep 22 06:00:10 2026 GMT
Not After : Sep 23 06:00:10 2026 GMT
Subject: CN=3dff5abba072377e3014efa0250567fc43bbae45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:98:21:5d:99:28:e2:82:89:3c:94:f6:58:ec:
ab:14:e2:25:9c:f9:d7:f9:ff:85:8d:cb:00:54:ba:
81:db:2d:19:84:4f:6b:e8:00:2b:cb:75:a8:8e:65:
2c:14:21:a3:38:29:0d:bb:aa:95:14:49:01:0c:16:
98:fa:fb:fa:a5:83:c7:a2:2b:1b:34:77:b1:47:9e:
a6:b8:50:64:99:99:2d:59:2b:8f:90:87:cc:e9:4c:
e9:54:28:cf:42:d2:23:cc:f1:d2:2c:cf:24:f7:42:
21:86:bc:9a:a1:9d:79:3e:fe:1e:c8:0e:49:ca:d2:
74:bd:16:14:f7:cd:93:15:a8:b8:73:6e:34:05:a5:
4c:16:00:45:c0:03:9a:8c:f2:9e:dd:8c:3d:c0:0a:
f2:53:8e:42:aa:94:d8:a8:df:6f:3d:33:47:af:3d:
01:b0:d7:c5:58:42:d7:8c:c4:45:ef:2b:a7:7f:3b:
a1:6e:57:d2:69:63:81:3d:86:56:21:44:75:5c:d3:
5c:5e:51:73:3c:1f:a0:ff:18:53:b4:54:79:f4:ef:
08:02:fd:e6:13:5a:b7:ae:0f:7c:6b:a3:e4:69:80:
44:00:af:0a:81:58:24:29:0c:b0:a8:c8:52:5a:a1:
49:d9:94:43:07:ce:bd:d4:8c:08:69:74:9a:15:69:
46:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FF:5A:BB:A0:72:37:7E:30:14:EF:A0:25:05:67:FC:43:BB:AE:45
X509v3 Authority Key Identifier:
keyid:DE:12:F9:65:A9:EC:33:E2:C2:E8:7B:61:61:BE:EF:B8:BE:28:6C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c7:6f:a6:f7:2a:36:90:55:ab:21:f2:b2:9e:0b:53:b3:e4:
04:f0:2b:a6:93:68:19:2d:d3:57:8a:c3:cf:5f:bd:6a:c0:93:
83:f7:e2:dd:c3:3f:22:88:3a:5b:8c:8b:91:32:ea:14:c9:92:
af:f0:77:82:07:84:72:3c:eb:4d:68:0b:9b:d1:0b:2a:30:fc:
ef:8b:0a:45:c2:c5:52:2e:ce:e6:f3:76:97:c8:0f:20:fe:70:
4c:61:8a:ca:f5:7c:93:70:51:79:89:c4:15:18:89:98:ae:64:
ea:4f:38:36:b7:1b:06:71:a6:1c:92:3a:e5:75:36:52:3a:74:
e9:7d:cc:e6:de:d1:f4:99:ab:8b:0b:5e:07:4b:51:51:29:bb:
1f:e5:ec:bc:90:67:0a:95:30:52:c9:08:cf:0a:1e:24:d9:16:
1c:1f:3e:70:9d:de:00:ca:83:14:19:ec:62:08:7e:56:50:16:
a7:25:13:fb:cd:ec:d3:62:66:2c:28:11:58:7c:0b:87:88:2f:
15:7b:73:4a:f2:aa:13:86:28:0c:1d:ee:4d:e7:50:dd:83:16:
cc:b5:1a:b5:ec:1d:fd:11:5b:27:28:b6:59:3c:79:4b:b8:38:
66:e9:4a:fc:c7:af:63:02:8e:e8:1d:44:ce:34:90:05:e9:de:
c0:85:22:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:24:58 2026 by rpki-client