Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
File: 3p8qknN4vRRV2ovfhbsauGfh9Sg.mft (raw, json)
Hash identifier: 8qNCsHgjynfn/11dPZiuPYfE4EijqoRpjO1TPeLYJUw=
Subject key identifier: 61:27:85:4D:93:F2:B4:0D:00:C6:31:54:F0:3E:C1:67:68:17:A2:9F
Authority key identifier: DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
Certificate issuer: /CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Certificate serial: 01A0C8FCFFD61E28509C0A6E47BD17A7F5DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
Manifest number: 1A66
Signing time: Tue 22 Sep 2026 12:00:18 +0000
Manifest this update: Tue 22 Sep 2026 12:00:18 +0000
Manifest next update: Wed 23 Sep 2026 12:00:18 +0000
Files and hashes: 1: 3p8qknN4vRRV2ovfhbsauGfh9Sg.crl (hash: 3JtDIyAu1hMHRQeQcih1sOIR6Je9q5eOUJZq6iniORE=)
2: KNINNJg3cCwRIkadz_iFDjzCAZo.roa (hash: uyBgZTWuxKjfgaFUXeyVL4F1AHNOmaLe474fWdCTqys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fc:ff:d6:1e:28:50:9c:0a:6e:47:bd:17:a7:f5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Validity
Not Before: Sep 22 12:00:18 2026 GMT
Not After : Sep 23 12:00:18 2026 GMT
Subject: CN=6127854d93f2b40d00c63154f03ec1676817a29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:be:ce:40:79:b3:4d:2f:e2:5a:b9:e1:e8:
b0:49:99:3e:c9:fe:a6:f5:a9:45:91:f5:42:9e:ef:
4d:d9:b7:c7:49:7b:10:a7:5b:cf:33:20:3a:a7:c8:
a7:67:68:4a:72:de:f2:61:fb:e4:77:e1:62:97:1f:
fd:07:08:44:b8:4e:f7:5f:e0:13:40:09:1a:47:ef:
de:e1:f6:6b:ce:5e:5d:d2:7f:7a:b8:75:77:ab:08:
62:6d:d0:5b:2f:fa:1b:00:a5:b6:1a:f2:b1:0c:b1:
ab:e5:57:80:da:5f:96:85:ad:b7:a3:95:c9:89:2d:
32:13:1e:e7:a5:18:14:ec:33:c4:24:86:f3:03:c6:
c5:18:e2:6f:0c:61:d0:6f:90:c2:a2:8a:95:03:fa:
e8:91:b4:19:fd:23:6f:8e:45:05:39:e1:77:8e:5b:
aa:c6:7f:af:47:55:6a:8d:9b:a9:bc:79:fc:56:47:
82:1d:44:01:7e:3f:46:aa:43:ff:90:23:cd:f6:63:
9d:43:89:af:0b:5b:b3:2b:fe:2c:38:d3:c8:0d:1c:
cc:33:ad:61:51:89:7f:52:c5:ae:71:6d:49:79:b1:
29:38:05:20:89:a8:44:66:fa:d8:b6:ec:ae:d5:13:
cd:02:d4:f3:7f:3a:a6:de:49:54:59:73:af:3b:2a:
0d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:27:85:4D:93:F2:B4:0D:00:C6:31:54:F0:3E:C1:67:68:17:A2:9F
X509v3 Authority Key Identifier:
keyid:DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:6a:a9:9b:da:e2:83:ce:9e:e0:32:00:f2:bb:88:d4:63:f0:
65:d0:73:ae:59:c6:d8:6d:18:0f:56:e6:25:26:ae:7d:4b:95:
db:62:dc:72:9d:57:4f:b7:6c:eb:ed:cb:dd:f1:7d:a3:5b:bd:
00:e3:82:a4:03:bb:67:46:50:c4:de:22:f1:ed:47:3b:05:af:
df:34:01:30:92:4f:a4:16:94:8b:c1:a7:67:31:eb:14:c2:eb:
35:95:ae:ce:19:06:fb:44:60:33:ae:dc:a9:92:0f:f0:dc:13:
81:15:d6:49:aa:ed:5a:99:cd:cf:7e:4a:d6:2e:48:cd:ba:56:
1b:1a:5d:2f:51:39:ce:94:df:01:49:50:ed:8f:eb:08:e3:50:
ef:e7:ac:6c:a4:89:b2:51:07:22:90:ab:43:f0:6f:23:46:8b:
fe:de:ba:cc:c5:48:d3:15:b3:75:cf:eb:bc:5d:6a:5f:f8:ac:
44:f1:81:d7:11:d0:8a:13:f7:66:7b:26:77:bb:dd:a6:da:b3:
8f:36:c2:c9:bf:58:51:a2:8e:eb:21:af:e3:4e:02:03:b4:72:
00:b3:7e:74:32:b5:ca:fb:7b:8a:f1:cf:f5:d7:c3:40:d9:e4:
77:30:ec:a7:54:3d:fb:f9:fd:2c:17:d2:15:07:27:df:9a:1b:
22:59:6f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:47:40 2026 by rpki-client