Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
File: 3HALlumnoPnbib9eGBFbEqPvFpI.mft (raw, json)
Hash identifier: GJpb1vf7/6AtrKOKIk9TUek/iajMkU+OPf6LBHLPOw0=
Subject key identifier: BC:A7:AB:94:59:3B:61:6E:3A:16:93:B4:FB:4B:7E:C7:BA:5C:45:F1
Authority key identifier: DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
Certificate issuer: /CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Certificate serial: 01A0C5C54D392A97E6106871D09A4AB81FFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
Manifest number: 1A68
Signing time: Mon 21 Sep 2026 21:00:36 +0000
Manifest this update: Mon 21 Sep 2026 21:00:36 +0000
Manifest next update: Tue 22 Sep 2026 21:00:36 +0000
Files and hashes: 1: 3HALlumnoPnbib9eGBFbEqPvFpI.crl (hash: oVz2KICambd3qz5RYoBBybxc0qhwvN2oIdZE2AvJmgo=)
2: 9yUNTQu4D8dEJY0vZu2yaAiRefU.roa (hash: lrso5MYVylYk+QUiDaPruFaOoSE7UzGRAVXufFOfA74=)
3: jnbS6eM3y8l2eIAi24P02_6sYnE.roa (hash: oehLYvqq0N9O64TqK28Nu+Air9RUEnLzPzRmB5KAv7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:4d:39:2a:97:e6:10:68:71:d0:9a:4a:b8:1f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Validity
Not Before: Sep 21 21:00:36 2026 GMT
Not After : Sep 22 21:00:36 2026 GMT
Subject: CN=bca7ab94593b616e3a1693b4fb4b7ec7ba5c45f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bd:46:d7:f3:03:cd:a8:f0:c9:fb:c8:49:d7:
c1:4c:c2:15:bf:84:24:95:28:8f:bb:64:13:76:53:
01:9e:be:a9:87:e9:53:42:ee:0e:58:fa:e3:5c:41:
b3:0c:00:0e:97:fa:09:da:af:14:55:42:86:a4:5d:
6b:cf:e1:79:1a:cd:09:b9:0c:2e:a1:8e:7f:09:54:
e4:b4:25:ba:59:df:0b:8d:6b:3b:c4:37:ea:c2:3c:
99:90:25:b9:2d:58:27:84:4f:7d:dc:b1:05:7f:44:
17:d9:11:b8:85:8e:cf:60:8e:d7:49:de:51:f7:1f:
86:9c:aa:e9:4e:2c:0f:50:f0:6c:b5:b9:d5:e5:ec:
0f:2f:22:14:30:2f:37:40:d4:e6:7d:6a:0b:e7:47:
fe:0e:a4:77:05:ca:85:d7:ae:3a:c1:81:29:fc:c2:
8b:ac:23:15:b9:51:24:bb:eb:3f:93:33:b3:ee:d1:
4b:44:f0:f9:bd:03:6f:01:c2:e0:a6:5a:c9:db:4e:
21:95:74:ea:22:14:81:78:84:04:e3:e4:7f:c3:b5:
c4:34:e6:4e:2e:bf:4a:fc:6e:c0:ae:6e:0a:0b:be:
81:40:43:e9:94:71:f5:e4:73:c3:8f:2e:c1:5f:5d:
70:18:21:7a:b1:a7:8a:a0:3e:fc:d2:ee:25:26:ab:
a3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A7:AB:94:59:3B:61:6E:3A:16:93:B4:FB:4B:7E:C7:BA:5C:45:F1
X509v3 Authority Key Identifier:
keyid:DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:8b:ff:5a:a3:3e:21:02:ac:46:d5:24:eb:54:f3:67:e4:41:
42:2f:a1:02:67:ba:75:77:cb:38:74:d0:d1:46:ff:58:53:98:
5e:9f:58:2d:a8:1c:9d:45:50:9e:78:ec:a7:90:77:57:ec:90:
c6:6d:5b:a4:92:ea:86:51:c5:05:68:be:d1:0b:3b:ec:78:0b:
3c:bd:b7:66:fb:8b:e0:fc:7c:94:0c:ce:74:5a:0d:2e:c3:8d:
af:8f:7a:80:86:ff:48:9f:d5:98:a9:a7:c4:ca:91:24:f4:e1:
0d:14:6a:e3:17:b1:e1:92:fd:9c:3d:84:68:df:fc:31:b0:64:
a7:95:b9:6c:71:fb:e5:9d:0b:88:3d:3a:23:34:78:e2:17:a2:
55:68:a5:46:65:47:29:33:7f:50:29:92:b9:8b:4f:53:9e:1b:
6c:c8:2c:71:fb:7e:ea:7e:54:5b:a8:87:58:5c:56:cf:e5:b6:
f0:f4:68:07:94:3f:71:e1:a7:55:98:9e:c1:53:72:d6:27:0b:
37:93:2b:c4:c3:35:ad:22:c0:e5:69:e6:73:2c:4e:0e:3a:fd:
0b:2e:97:f8:cb:6f:36:c5:9e:4d:c2:2d:0e:91:62:24:6d:0b:
48:46:be:90:1c:b5:05:6d:b5:cc:a4:7f:2c:ff:7e:04:41:e8:
d2:de:99:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:52:40 2026 by rpki-client