Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
File: 3_xJGVpDnVudcRKzNgFe7iyUTYk.mft (raw, json)
Hash identifier: Lf1cAkshINV/loDIbvgEvvv0/et7rwpiJkKQqbFvXt0=
Subject key identifier: 80:B2:D8:C0:E4:79:B4:EC:E8:FE:C1:55:F0:29:12:8C:5C:3C:DB:BF
Authority key identifier: DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
Certificate issuer: /CN=dffc49195a439d5b9d7112b336015eee2c944d89
Certificate serial: 01A0E06126C18AF883D5C17CB618B96FE254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
Manifest number: 1A75
Signing time: Sun 27 Sep 2026 01:00:58 +0000
Manifest this update: Sun 27 Sep 2026 01:00:58 +0000
Manifest next update: Mon 28 Sep 2026 01:00:58 +0000
Files and hashes: 1: 3_xJGVpDnVudcRKzNgFe7iyUTYk.crl (hash: zq7fmAzDzc+PVjO1Kg2TI0ybyWKoun9Mtg42PwkvsQY=)
2: 6rPz8igkyZRlNFZsutLMqabI34I.roa (hash: Z2BW3rAqZoeVlHqBJzAMivNjITmnHOwFnbfJtV0fFqY=)
3: LuIPpCoB4V31cK2p5DsLz4qIQtI.roa (hash: HA29gUkPA7e326XQjVW4UCnX3LAB35fhH3vTvc7GqnM=)
4: iC10497tJji-WYhWTVtTKPnCEBA.roa (hash: 6xbmmivHgxTXa78A2SNCDzZGkpnLAKBTJU2rllnxUng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:61:26:c1:8a:f8:83:d5:c1:7c:b6:18:b9:6f:e2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dffc49195a439d5b9d7112b336015eee2c944d89
Validity
Not Before: Sep 27 01:00:58 2026 GMT
Not After : Sep 28 01:00:58 2026 GMT
Subject: CN=80b2d8c0e479b4ece8fec155f029128c5c3cdbbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:74:f9:9e:88:8c:2b:80:91:09:00:1e:c9:1a:
83:f4:0a:e2:bc:75:2c:29:13:8e:31:b5:3c:47:ee:
7c:88:d5:1c:15:06:76:02:41:79:5e:d4:7a:f5:5e:
68:a7:ba:39:ee:1b:53:73:48:05:60:de:c8:6a:85:
5d:99:84:4c:f1:a7:2b:01:18:c3:0e:e0:9b:f5:72:
7f:5b:78:28:65:84:5a:04:fa:81:d0:66:ab:ef:9d:
fe:b5:0f:72:1a:e4:65:3c:f1:75:6d:ca:ef:b7:31:
b5:20:08:e2:fe:5b:57:61:5d:39:5a:8c:c1:1c:30:
0c:11:52:71:a0:4a:6f:5b:c8:45:6d:0d:9d:76:06:
ee:38:43:68:a3:d6:4d:a5:b6:c8:c9:99:56:1d:b4:
c4:10:42:1a:17:f4:a0:09:2f:0f:57:e3:89:8c:b8:
15:03:15:82:17:0f:fc:dd:46:f0:42:b8:a8:8f:5f:
15:e8:09:35:f1:0e:97:61:ca:f3:94:c1:5e:b2:21:
4e:0d:62:80:e7:a1:8b:c6:eb:46:25:74:6d:92:a5:
f0:0a:bb:c9:e0:75:4d:2a:81:db:2c:57:cd:ad:ba:
ba:4f:5a:f3:c6:b1:df:3f:a7:7e:8d:4f:c3:c9:6d:
66:56:a0:22:b1:6a:5c:a0:7a:a8:e9:2f:1d:39:86:
8e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B2:D8:C0:E4:79:B4:EC:E8:FE:C1:55:F0:29:12:8C:5C:3C:DB:BF
X509v3 Authority Key Identifier:
keyid:DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:7d:82:5b:95:86:82:df:04:48:9f:71:9a:a4:72:5d:c7:cb:
b6:db:42:64:ba:81:fc:e7:e6:2c:38:2c:7f:ad:3b:17:87:e9:
3b:49:40:44:db:4b:21:c0:f7:5b:9e:9f:f7:2b:57:64:a7:21:
95:42:2b:e9:17:7f:9a:b0:5c:5a:76:8e:08:c5:8e:90:e4:63:
4b:40:1e:e3:2e:5c:b9:48:bf:f3:4c:35:2c:0e:69:fe:35:ab:
fa:4e:dd:58:f9:e0:ee:eb:63:03:36:19:e4:dd:67:12:fe:05:
1d:13:a1:66:c6:63:21:ac:42:07:21:1b:8d:88:cd:68:fc:66:
96:1b:f5:32:1e:a0:78:f5:85:ad:4c:c2:25:c0:14:79:bf:29:
50:8d:0f:fe:a1:99:c7:d3:ca:10:c1:03:db:39:da:01:86:ce:
7b:79:5f:e7:ad:97:d0:a8:55:4c:e8:31:81:ee:8a:74:5b:db:
b6:d1:fe:4c:4c:6c:aa:eb:11:80:39:63:af:20:04:4e:1d:3a:
f7:3b:ae:67:9e:de:66:d8:5d:fb:50:df:25:3c:d1:be:bd:42:
72:00:ac:0c:26:0a:8e:ad:00:0c:c9:98:de:f5:0d:4f:92:11:
33:09:20:e7:77:d4:84:99:85:aa:29:7e:b0:e3:e8:77:e7:75:
bb:f2:95:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:40:55 2026 by rpki-client