Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
File: 3MpSIZb9CbrnOba9IyLl65DaT7k.mft (raw, json)
Hash identifier: ez1XyT1fyOwssmg4WIQPfeiFn0bN7x7GwBRJYQol7xw=
Subject key identifier: 1C:2F:7F:B3:8A:96:89:07:67:05:E4:63:C4:AF:18:49:A4:EC:D7:6D
Authority key identifier: DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
Certificate issuer: /CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Certificate serial: 01A10D704F0EC79094132EA2BDE145B50210
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
Manifest number: 1448
Signing time: Mon 05 Oct 2026 19:00:26 +0000
Manifest this update: Mon 05 Oct 2026 19:00:26 +0000
Manifest next update: Tue 06 Oct 2026 19:00:26 +0000
Files and hashes: 1: 3MpSIZb9CbrnOba9IyLl65DaT7k.crl (hash: c8zcGHYAnEy5FH4+cVbn8MrebPOUtYUPB6T39nx+Wqg=)
2: cIxKBh6oU9S_NcB8Ln8qgQPRqMc.roa (hash: qT7a6QcaDtE4QIrrmB5EqTQOJdhXraa8fLtpECGlH+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 19:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0d:70:4f:0e:c7:90:94:13:2e:a2:bd:e1:45:b5:02:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Validity
Not Before: Oct 5 19:00:26 2026 GMT
Not After : Oct 6 19:00:26 2026 GMT
Subject: CN=1c2f7fb38a9689076705e463c4af1849a4ecd76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:52:4a:09:f8:18:aa:a2:5c:7b:1c:64:e6:e1:
33:2e:4e:47:1a:8b:00:d6:05:e6:92:4c:6b:7f:4a:
fd:f2:63:72:0c:3e:f8:52:94:07:d7:ef:3d:00:07:
08:46:b9:31:2e:2e:91:81:52:9f:3c:a3:51:4a:52:
49:7c:b1:5b:ee:d4:e0:5a:dc:a5:57:1b:01:c1:75:
85:45:10:72:6c:fd:08:2c:a3:ca:f3:ed:13:d5:cc:
36:1a:bd:14:82:f4:7a:ae:6f:72:f2:83:ad:ef:66:
92:76:b4:20:48:83:51:3b:94:51:02:52:87:ae:65:
57:cb:86:ce:da:11:ea:55:d8:4f:57:e6:5b:b1:5a:
e6:b8:00:4d:dc:3b:43:fe:ad:2e:4b:4c:32:45:11:
fe:71:db:dd:c0:9d:a3:ec:63:46:62:5d:f1:b1:b9:
88:ce:98:64:01:87:9f:62:30:9f:64:43:15:01:1a:
f2:a2:65:e4:ef:b2:b1:96:78:f3:dc:55:94:63:cd:
b6:75:b1:f2:d6:97:f4:9f:d3:c9:75:41:ac:3d:3e:
a6:11:4a:e1:07:08:20:19:b4:76:5f:00:2b:31:89:
0e:b6:ae:12:9a:49:45:23:c0:ca:28:57:29:f3:15:
bb:b1:d4:f9:db:4e:e5:32:7a:49:a1:e3:cd:e2:16:
af:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2F:7F:B3:8A:96:89:07:67:05:E4:63:C4:AF:18:49:A4:EC:D7:6D
X509v3 Authority Key Identifier:
keyid:DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:9c:a6:08:68:dd:f1:ee:ab:f7:c2:ba:b2:9f:bd:9d:c1:1a:
58:64:40:93:32:fb:e1:0d:3b:80:20:d1:df:58:20:27:63:0f:
76:ad:b5:fc:84:98:50:20:05:59:61:02:51:fb:c0:49:ba:89:
9f:e6:b4:48:4b:7d:f6:a1:b2:f2:1a:80:66:b6:5c:ee:29:13:
f8:3a:e0:da:84:eb:69:80:6f:4f:77:41:af:05:2d:46:21:02:
44:7f:6e:fc:57:7c:0e:36:7c:c1:df:cc:7e:b7:b6:b0:63:4e:
11:f4:67:97:40:54:e2:64:49:42:88:60:eb:9d:04:52:08:d9:
bd:fe:30:02:38:e2:92:ce:e5:e3:7d:bc:8d:02:48:88:4c:71:
44:8b:95:39:5b:fe:3b:5b:07:5c:8a:48:4d:5e:34:d4:02:3a:
96:54:0b:55:df:2b:01:c7:5a:23:5d:cd:13:a5:70:5e:92:1a:
d5:05:bf:ab:a4:14:e0:c7:32:2f:8f:6d:83:de:b0:52:de:1e:
d5:06:99:b5:1a:64:9d:34:d8:82:70:9b:6a:ed:79:be:b4:f5:
79:d5:22:9b:bf:e1:a8:36:8a:56:bc:35:04:56:d4:90:64:61:
2a:91:a2:e0:15:0f:ef:46:7a:c1:ba:ec:4e:31:6c:66:2f:9b:
e8:b8:bb:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 03:33:42 2026 by rpki-client