Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
File: 3ucsj67LcFLIQSAbJfagGOR3scI.mft (raw, json)
Hash identifier: xr8HiKfC6lLXPCxRYtSbvoHBLmYahe6NHUKay44f1zs=
Subject key identifier: 12:E7:17:F8:52:81:E2:47:AB:FC:8F:43:C8:AF:83:8E:77:21:F9:61
Authority key identifier: DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
Certificate issuer: /CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Certificate serial: 01A0C17AF82C8CAF1F8E2F6CF5224C9F200D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
Manifest number: 10F2
Signing time: Mon 21 Sep 2026 01:00:56 +0000
Manifest this update: Mon 21 Sep 2026 01:00:56 +0000
Manifest next update: Tue 22 Sep 2026 01:00:56 +0000
Files and hashes: 1: 3ucsj67LcFLIQSAbJfagGOR3scI.crl (hash: 8uXHegFM6QWESydQslTSZ6GLbF4N4sJFLR881l4U3LU=)
2: ApGR2Q6UiBOTln3YEs6ePXPQ8lQ.roa (hash: lyxkrW/UqVG023E4rkiQmolfszYoshoVE4T/qdnjtKM=)
3: Fsb5HdL7NcO_faI7SYpSwT3IZj0.roa (hash: Dq+bYU+W7cSYjUMeWCs5QEHpiuPHvRD8GOeB0Afw45M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:7a:f8:2c:8c:af:1f:8e:2f:6c:f5:22:4c:9f:20:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Validity
Not Before: Sep 21 01:00:56 2026 GMT
Not After : Sep 22 01:00:56 2026 GMT
Subject: CN=12e717f85281e247abfc8f43c8af838e7721f961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f4:24:1c:25:ad:f8:f3:19:cb:11:4d:eb:89:
e9:22:29:86:2a:66:53:cd:4b:4f:de:0b:1c:4e:c3:
89:04:e7:0c:b2:36:2e:83:bf:55:c6:70:42:6d:98:
d1:ca:4f:da:10:3e:a9:da:ec:30:8c:0d:42:e8:ef:
07:e1:9d:6e:04:46:cd:43:3d:a4:c7:cd:2f:10:08:
a1:35:60:f6:e7:1e:d9:f9:47:4e:27:b0:6a:f3:1a:
fc:5d:37:f9:b6:2c:50:a5:b2:80:9a:73:98:9e:e2:
32:ef:6a:24:bc:be:3b:bf:51:be:9c:51:e4:a8:8b:
ed:b9:40:6d:84:aa:d4:ca:96:ba:3c:4e:63:c3:a2:
fe:41:e2:f8:70:7b:1a:92:70:08:67:52:03:f3:a8:
56:eb:ee:fb:5c:e3:47:72:10:f0:60:65:57:f6:ed:
50:3f:e4:96:42:9f:f0:cd:ad:65:3a:eb:6b:0f:48:
54:10:3e:2a:4f:70:76:dd:76:bc:76:73:a2:53:ce:
54:eb:e2:7d:cc:95:22:2e:75:48:e7:b7:d9:d4:04:
0a:cf:ca:22:e4:51:85:99:50:50:e6:1c:fc:af:07:
d9:6a:52:5d:a4:98:d9:d1:9f:22:31:17:39:cb:cd:
83:63:38:40:70:fd:72:6d:41:92:b5:94:c5:8c:5b:
a0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E7:17:F8:52:81:E2:47:AB:FC:8F:43:C8:AF:83:8E:77:21:F9:61
X509v3 Authority Key Identifier:
keyid:DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:53:43:28:08:99:fd:3d:19:05:7a:c5:77:8c:13:72:b5:b2:
e1:68:9d:f2:21:85:f2:8f:eb:55:0d:4a:cd:2c:1e:e9:a2:a9:
18:4c:5c:de:ab:06:86:ea:14:69:30:7a:21:70:f6:c2:b5:e6:
76:26:31:0f:b7:e8:6e:95:1c:ac:bd:cd:1c:13:83:4b:86:65:
c4:6c:80:c8:cb:93:d3:d0:cd:98:94:2f:e9:90:75:9c:50:5e:
8b:67:ff:07:3b:ae:51:10:a4:0b:f0:32:03:16:02:5a:ff:76:
1b:82:70:af:93:75:e5:b2:60:c6:42:75:c2:5d:97:71:33:e6:
29:8d:59:2b:b2:ed:cf:2b:c5:71:c6:95:d7:b6:2e:f8:cc:7c:
d7:54:6d:5a:db:ca:5d:9a:c7:f8:95:f2:52:8c:26:38:46:b0:
02:71:1d:eb:d9:23:f4:d7:eb:55:28:ed:25:a1:cc:b1:c7:dc:
ca:8f:a8:16:9b:28:0d:2e:d8:8e:e9:ab:b1:88:61:fb:f5:45:
bf:13:75:ba:e6:97:a1:4a:60:91:e3:7c:b9:ee:5b:e2:6e:8c:
e6:84:14:e0:9b:52:96:50:6a:1f:4b:be:49:1f:42:01:0f:79:
a9:c8:2b:51:54:8a:dd:4d:bb:66:57:37:47:11:8b:3a:cd:35:
a4:12:5b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:18:38 2026 by rpki-client