Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
File: 3AOqmk_p1gxc-FOpJIIiafHMdFI.mft (raw, json)
Hash identifier: ya4oul1WDJ+ThxdVdN/Qp0MMmg7D3oqK/qulPGCTVKE=
Subject key identifier: 53:19:DB:77:67:8B:61:20:1B:09:69:46:86:4B:77:BC:19:FB:41:F4
Authority key identifier: DC:03:AA:9A:4F:E9:D6:0C:5C:F8:53:A9:24:82:22:69:F1:CC:74:52
Certificate issuer: /CN=dc03aa9a4fe9d60c5cf853a924822269f1cc7452
Certificate serial: 01A0C067D0CE45F2B1752E9E08F622188CA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
Manifest number: 100F
Signing time: Sun 20 Sep 2026 20:00:24 +0000
Manifest this update: Sun 20 Sep 2026 20:00:24 +0000
Manifest next update: Mon 21 Sep 2026 20:00:24 +0000
Files and hashes: 1: 3AOqmk_p1gxc-FOpJIIiafHMdFI.crl (hash: kNjOvLQ3lHJYfFfKkjbR3rBvJMegYBp2c+DPUS4hZkg=)
2: 7TZLT2P2zuuPjzUmClw3kX64yXM.roa (hash: fnAcb1tn2nnIoVX24Iibq3Ab9gwSJ7WX+AekjhFSNg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:67:d0:ce:45:f2:b1:75:2e:9e:08:f6:22:18:8c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc03aa9a4fe9d60c5cf853a924822269f1cc7452
Validity
Not Before: Sep 20 20:00:24 2026 GMT
Not After : Sep 21 20:00:24 2026 GMT
Subject: CN=5319db77678b61201b096946864b77bc19fb41f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e9:27:15:e9:9c:20:df:70:47:fa:4e:0c:c9:
e4:0a:6d:f6:37:ea:01:d7:85:ac:e8:48:7d:0b:81:
5f:0e:1b:56:0a:e6:52:86:a7:ab:b3:a8:3c:80:ac:
6c:22:1c:97:f9:59:46:74:be:72:07:10:2b:fa:4c:
81:21:f3:a2:25:a6:b2:c7:d5:0e:e4:5a:2f:45:1b:
fc:6f:cd:67:16:ff:8c:8d:e0:01:f0:18:92:11:61:
96:56:6e:a4:60:bc:a8:ec:a2:d4:bd:66:3d:88:a4:
2d:12:72:8a:ab:07:b3:41:48:6a:17:a5:f2:e9:5d:
25:40:a3:91:b1:27:15:c4:78:38:f3:75:54:89:b3:
eb:6f:4b:68:cf:95:e9:f1:df:70:dd:02:cf:be:20:
72:38:f7:ac:fb:38:be:89:c5:7f:5d:c4:c9:1d:d8:
90:04:04:ac:b5:b3:a0:43:28:52:f3:e2:91:f4:59:
00:9c:5f:e5:61:e8:3a:4c:58:07:a1:02:94:70:1f:
4e:52:39:e2:cf:27:6a:c3:04:cf:4a:34:e2:3c:79:
a8:a1:ab:3a:24:74:ae:d3:6f:df:10:bd:07:c7:80:
12:2f:9b:67:46:d8:c6:f6:c1:cd:fe:ca:9f:2a:4c:
17:94:fe:af:c8:be:9f:e5:08:5b:9c:ea:c0:fe:a7:
6a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:19:DB:77:67:8B:61:20:1B:09:69:46:86:4B:77:BC:19:FB:41:F4
X509v3 Authority Key Identifier:
keyid:DC:03:AA:9A:4F:E9:D6:0C:5C:F8:53:A9:24:82:22:69:F1:CC:74:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e7:ac:d1:4c:52:f0:89:22:b7:e0:65:22:49:ba:d1:7c:bc:
8a:22:d5:9a:c7:ab:a4:92:7d:76:84:36:82:a4:22:69:30:32:
c1:f1:6c:20:4a:4e:81:2c:d8:c4:54:97:48:5d:51:48:ba:24:
2a:a3:a3:be:d4:94:be:8e:05:b6:a0:6d:03:24:bc:e0:2e:db:
75:65:c2:ec:15:00:39:ab:b2:7a:16:7f:5e:27:b9:f9:83:a6:
a0:87:84:c8:0c:77:02:11:7a:0b:bd:36:52:07:df:b7:82:fd:
1b:eb:db:7d:41:11:5b:81:ad:12:80:1c:52:c7:6f:29:34:02:
47:a3:be:a3:98:22:98:c2:ed:72:25:3f:8b:1d:10:ca:48:bb:
d3:96:f4:e5:af:0d:68:ff:ca:70:67:27:00:04:69:92:34:b2:
fa:83:47:2d:48:ee:e5:15:cd:45:03:cf:a0:a1:fe:21:65:0b:
a9:a7:5e:ea:37:01:99:86:53:e0:73:72:e3:d3:7e:9b:5b:aa:
fb:81:fb:b2:d9:66:51:90:c9:80:75:75:88:bc:25:4f:69:f5:
99:73:d7:68:b7:fb:13:8a:9f:c0:33:ea:5d:68:a3:a8:91:fa:
f0:62:bd:eb:fc:31:82:2e:5a:41:e5:c0:34:33:2f:65:a9:9d:
29:ab:1e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:40:52 2026 by rpki-client