Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/c3d99b-dc39-45fc-beeb-099e67bc39e7/1/3tgv9VpEt7dIjiDp_yVO4NH0XWY.mft
File: 3tgv9VpEt7dIjiDp_yVO4NH0XWY.mft (raw, json)
Hash identifier: VRwo4nRw1t1o7Hi5jBqigv4DWW+R8nRafN1znKLPnTo=
Subject key identifier: 5C:81:3A:47:AD:1D:EE:E8:0D:97:8B:4D:A1:FC:B0:C5:BF:71:3A:45
Authority key identifier: DE:D8:2F:F5:5A:44:B7:B7:48:8E:20:E9:FF:25:4E:E0:D1:F4:5D:66
Certificate issuer: /CN=ded82ff55a44b7b7488e20e9ff254ee0d1f45d66
Certificate serial: 01A0CC3548CB60BC3CC622CC85D341B1FFA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tgv9VpEt7dIjiDp_yVO4NH0XWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c3d99b-dc39-45fc-beeb-099e67bc39e7/1/3tgv9VpEt7dIjiDp_yVO4NH0XWY.mft
Manifest number: E3
Signing time: Wed 23 Sep 2026 03:00:39 +0000
Manifest this update: Wed 23 Sep 2026 03:00:39 +0000
Manifest next update: Thu 24 Sep 2026 03:00:39 +0000
Files and hashes: 1: 3tgv9VpEt7dIjiDp_yVO4NH0XWY.crl (hash: +aFQJljE5QT6aQ0cJDChKyAudVLyaAohjfJeyknD340=)
2: jMO6VVlm3HsEOrRN6wSSP0bIcbs.roa (hash: CBnpz7gcb9dPLoNgRFhsVVGmsFE7G/hIyF1S73+vDXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/c3d99b-dc39-45fc-beeb-099e67bc39e7/1/3tgv9VpEt7dIjiDp_yVO4NH0XWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/c3d99b-dc39-45fc-beeb-099e67bc39e7/1/3tgv9VpEt7dIjiDp_yVO4NH0XWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tgv9VpEt7dIjiDp_yVO4NH0XWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:35:48:cb:60:bc:3c:c6:22:cc:85:d3:41:b1:ff:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded82ff55a44b7b7488e20e9ff254ee0d1f45d66
Validity
Not Before: Sep 23 03:00:39 2026 GMT
Not After : Sep 24 03:00:39 2026 GMT
Subject: CN=5c813a47ad1deee80d978b4da1fcb0c5bf713a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:81:97:62:a9:ff:72:3b:28:b1:ea:b1:f2:2e:
f2:93:8a:a6:c5:d0:19:b0:5e:bd:39:e3:55:32:d7:
95:c5:0c:d2:96:be:5a:3c:1f:2f:d4:c1:a7:64:b8:
6b:fc:c5:95:c4:6f:4d:18:35:3a:56:20:56:87:25:
26:b2:a9:9e:b7:80:8c:7c:77:cc:08:b8:ef:41:77:
9a:53:89:88:93:22:44:8e:36:8b:60:a9:7b:a7:df:
ce:94:d8:2b:a0:56:42:05:8f:1a:61:2d:02:e7:f8:
b1:38:a1:3a:cc:02:df:a4:3e:90:38:7c:0a:78:36:
2f:d4:80:31:5b:3d:45:d2:d2:dd:10:52:80:d1:68:
18:50:fa:9a:62:55:ce:8d:67:5a:a3:a8:1a:a0:1e:
a5:3d:19:36:dd:67:a8:ba:17:c8:be:54:af:cb:31:
f3:46:a3:de:1a:e5:22:e6:8d:36:f7:5b:f7:6e:d3:
c9:a8:93:34:85:a5:fc:66:95:96:c2:45:a8:41:4a:
13:08:4d:b4:46:93:9d:36:e5:ef:72:31:27:35:97:
4e:7b:5d:06:fe:53:75:86:da:1f:aa:79:ef:3e:94:
7b:f5:7d:1e:77:69:51:7d:1e:6a:8c:d1:16:49:9e:
a7:00:af:d8:78:47:9f:ff:d1:e0:fd:a3:fd:22:6f:
08:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:81:3A:47:AD:1D:EE:E8:0D:97:8B:4D:A1:FC:B0:C5:BF:71:3A:45
X509v3 Authority Key Identifier:
keyid:DE:D8:2F:F5:5A:44:B7:B7:48:8E:20:E9:FF:25:4E:E0:D1:F4:5D:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tgv9VpEt7dIjiDp_yVO4NH0XWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c3d99b-dc39-45fc-beeb-099e67bc39e7/1/3tgv9VpEt7dIjiDp_yVO4NH0XWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c3d99b-dc39-45fc-beeb-099e67bc39e7/1/3tgv9VpEt7dIjiDp_yVO4NH0XWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a1:2a:2d:e0:78:d7:d7:fd:05:01:59:49:e7:2b:df:5d:38:
ce:3e:fc:12:c5:89:45:39:10:6e:79:6a:05:94:e1:8a:c5:00:
3a:b0:30:08:c1:88:d0:5f:58:15:a8:00:fe:dc:63:d2:cf:00:
3c:0f:53:34:e9:66:d0:fd:50:f7:67:e2:c0:21:62:9a:86:74:
71:3c:0c:79:11:ca:ed:3a:8e:4d:93:29:fc:13:62:f6:98:b5:
ea:c3:db:d4:da:f6:b9:fa:ec:d7:3d:9f:b3:51:83:b9:a6:1e:
98:db:31:07:70:dc:3a:45:4a:8f:fb:b6:d4:b0:0d:81:e6:c3:
6a:57:be:34:de:13:7d:5e:2b:45:89:34:fb:0a:92:cf:7c:56:
e4:c5:c6:a3:4f:81:4c:ca:75:9c:e2:5d:94:c5:0a:89:92:2f:
c9:d8:2f:cc:5a:d0:6d:44:6d:8e:bb:d2:d5:1b:e9:da:4b:e4:
28:79:8f:69:0b:dd:47:c6:96:74:00:48:b4:d0:81:6d:98:54:
9d:60:ff:0e:9c:a7:c5:e0:02:8e:72:f8:65:2b:91:5f:30:04:
83:45:33:0c:85:46:f1:46:6b:3f:fa:81:2f:d0:2a:30:5d:57:
65:2a:1d:59:1f:5e:07:0a:30:85:df:22:e2:b1:01:0d:70:1a:
c2:8e:9f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:07:13 2026 by rpki-client