Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.mft
File: 3bGCpdvRvuhx3lGQAtYBj-4hNnA.mft (raw, json)
Hash identifier: WnD/gttIwOqqihiV8XdFuaExbmR3vBDbBE6XdEFkRkE=
Subject key identifier: 97:88:D2:C0:96:A8:BC:7D:C5:9C:9F:03:4A:0A:29:B2:33:B9:9F:F5
Authority key identifier: DD:B1:82:A5:DB:D1:BE:E8:71:DE:51:90:02:D6:01:8F:EE:21:36:70
Certificate issuer: /CN=ddb182a5dbd1bee871de519002d6018fee213670
Certificate serial: 01A1043728C2EE87395E4E97C9B563226878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bGCpdvRvuhx3lGQAtYBj-4hNnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.mft
Manifest number: 0100
Signing time: Sun 04 Oct 2026 00:01:25 +0000
Manifest this update: Sun 04 Oct 2026 00:01:25 +0000
Manifest next update: Mon 05 Oct 2026 00:01:25 +0000
Files and hashes: 1: 3bGCpdvRvuhx3lGQAtYBj-4hNnA.crl (hash: 20Y5np71J/mIGbH1POC+dL3OzbqciiffPthMBsypWS8=)
2: 63JgYqrtG6KoZuuOrK4W3du1Duo.roa (hash: bCSh6KZ5NQdZdMyFJ085Wh626DTWHoPFQnxoetlXdVU=)
3: tmXRQcCYhINr2gZL0cRubH_ch2k.roa (hash: j7OzX8w8hg3VPQ17U1GWH4ZU5mHgI9S7cGktHlSkmlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3bGCpdvRvuhx3lGQAtYBj-4hNnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:37:28:c2:ee:87:39:5e:4e:97:c9:b5:63:22:68:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb182a5dbd1bee871de519002d6018fee213670
Validity
Not Before: Oct 4 00:01:25 2026 GMT
Not After : Oct 5 00:01:25 2026 GMT
Subject: CN=9788d2c096a8bc7dc59c9f034a0a29b233b99ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:be:2a:e1:0a:82:92:41:be:87:9c:a8:74:5e:
10:7c:84:cc:2d:e3:09:4e:42:2d:c8:1b:0c:ee:e5:
69:93:b4:f4:59:a4:7c:43:4f:78:05:f3:5a:6b:f3:
d4:07:27:57:71:c4:ec:37:a5:bc:34:f9:07:2f:2c:
ed:00:15:b1:16:22:57:c1:f7:08:43:e8:95:ad:36:
08:35:29:3d:0f:81:b2:85:d1:13:cb:d7:e1:4d:b4:
85:4c:8f:1d:c4:78:4c:5d:46:8e:ae:a1:6f:08:85:
62:a4:0d:71:dd:e6:3c:15:69:36:e1:6c:90:33:d0:
06:df:b1:fc:76:fa:11:a3:6a:c6:9f:72:4e:61:e1:
63:d7:09:1f:04:05:4b:fd:a6:94:c2:5d:0c:94:57:
30:d6:38:54:9a:b5:8e:e2:31:92:b4:3f:f3:f8:9b:
98:dd:5e:af:8f:c8:56:cf:9e:09:4b:08:49:50:76:
f1:2d:d3:ba:1a:57:ac:c9:99:ef:31:85:e9:ac:fb:
e2:c2:97:37:41:03:3c:a8:56:60:8a:cf:b1:df:c9:
ce:a4:3c:d4:b3:49:00:b1:04:02:2c:76:f9:4d:5b:
72:60:54:9b:3e:3f:05:32:c6:76:b2:53:c0:ac:5d:
b4:28:8e:8f:5b:7e:e8:6a:49:15:b4:0b:cd:f5:5d:
f8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:88:D2:C0:96:A8:BC:7D:C5:9C:9F:03:4A:0A:29:B2:33:B9:9F:F5
X509v3 Authority Key Identifier:
keyid:DD:B1:82:A5:DB:D1:BE:E8:71:DE:51:90:02:D6:01:8F:EE:21:36:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bGCpdvRvuhx3lGQAtYBj-4hNnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:8b:e2:8e:1d:96:70:07:74:e1:23:e6:b6:b6:03:c6:b2:6d:
bd:0f:9b:9a:d0:71:e8:30:bc:c6:85:80:59:0f:50:b7:43:d6:
26:f0:8d:fe:b6:84:d4:68:9d:3d:04:1f:e3:4e:74:ae:b8:bf:
f9:e4:03:50:30:03:d5:d6:7e:06:15:e9:ef:cf:00:6b:a5:86:
59:17:ba:34:ba:06:95:99:2b:ef:8a:73:fb:f9:de:80:8c:f6:
23:33:5d:7e:c7:9f:65:b0:7d:b0:ad:a8:1b:7a:7b:f6:16:b0:
9b:ce:8a:05:f4:02:7a:84:d5:4c:fe:bc:60:35:79:74:da:4a:
15:04:1b:a8:39:2e:f4:5a:41:57:01:2e:99:b3:87:3c:aa:e2:
28:78:86:3f:79:f7:27:9e:77:0f:08:d6:ca:b9:97:67:ac:54:
27:7b:7a:32:f5:a6:3d:1a:04:3a:a8:fd:93:09:f0:7c:f6:f2:
36:f1:44:c0:22:49:11:ce:8c:89:31:3c:94:65:3e:8e:ff:d2:
17:c9:db:27:36:99:55:61:a1:71:40:96:51:77:1b:84:8e:8f:
d7:39:b9:ac:9a:a3:45:80:cb:84:b5:c4:29:fe:78:5d:c9:bd:
05:06:74:96:8b:10:f2:76:cf:e7:97:1e:75:ce:21:c2:b4:a4:
7f:5b:d6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:21:13 2026 by rpki-client