Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
File: 3SoSF2c-sRypijUTlSBAfJdo38M.mft (raw, json)
Hash identifier: L/Nooj1oPOnqocm0/Qdpg42gVSYbdc6rGCXtdvjoZHA=
Subject key identifier: DA:BC:12:50:91:69:FE:9E:3C:E1:3A:AD:E0:95:57:F7:22:EA:61:6D
Authority key identifier: DD:2A:12:17:67:3E:B1:1C:A9:8A:35:13:95:20:40:7C:97:68:DF:C3
Certificate issuer: /CN=dd2a1217673eb11ca98a35139520407c9768dfc3
Certificate serial: 01A11BD06C85B132B586E80C73F4D4FFCA68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
Manifest number: 0396
Signing time: Thu 08 Oct 2026 14:00:06 +0000
Manifest this update: Thu 08 Oct 2026 14:00:06 +0000
Manifest next update: Fri 09 Oct 2026 14:00:06 +0000
Files and hashes: 1: 3SoSF2c-sRypijUTlSBAfJdo38M.crl (hash: sBjDA5jljOl8qU+vAjAJtbNTub+RMrHKya3+ST32MWI=)
2: WQR-Dyl5ml38JzgsrWjiLr-jTjE.roa (hash: 8pC1xGdRfwbbzKrCgP0LBKBZ1huDVz6z9MO3fLjaue8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:d0:6c:85:b1:32:b5:86:e8:0c:73:f4:d4:ff:ca:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a1217673eb11ca98a35139520407c9768dfc3
Validity
Not Before: Oct 8 14:00:06 2026 GMT
Not After : Oct 9 14:00:06 2026 GMT
Subject: CN=dabc12509169fe9e3ce13aade09557f722ea616d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bb:1b:93:13:aa:a8:f7:d8:97:af:ba:93:d5:
0d:48:7c:96:49:c2:fe:ce:d3:06:85:29:be:6e:2c:
37:aa:49:85:7a:ff:8a:ed:6c:d0:95:00:77:1a:e7:
0e:a4:89:97:82:7d:17:d7:14:37:ae:e6:7e:d7:99:
12:d4:d9:a6:e0:ee:db:e4:af:e5:57:52:03:82:4b:
f6:e5:91:1c:c7:b5:d9:c1:18:0e:87:53:8d:d7:49:
a0:c0:a1:a3:87:92:a1:54:12:68:57:ce:c1:41:e0:
97:92:00:75:bf:a2:d7:f5:92:d1:82:46:93:5e:a1:
a9:9a:d5:77:79:6d:26:27:85:80:f3:07:8f:ab:c2:
eb:d2:f2:0a:67:7d:bf:1f:c7:60:c8:d6:34:14:51:
d9:1e:b0:a8:f9:fc:45:bf:78:91:37:ee:a9:ed:62:
58:0b:b3:95:65:b7:15:7d:35:da:de:26:d9:65:af:
53:26:6b:18:4a:ba:75:5f:a0:cd:e5:7c:bf:06:1c:
2c:98:42:d4:13:25:d4:8e:34:80:ef:87:8b:d8:9c:
63:22:62:33:c4:ba:02:56:e2:ce:ad:b8:a2:bd:69:
f1:d0:05:4a:d7:3b:b4:98:3d:36:53:d4:df:bd:e3:
bb:14:92:a9:5b:69:cd:5f:ce:1d:a6:5a:c4:e7:e4:
2d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BC:12:50:91:69:FE:9E:3C:E1:3A:AD:E0:95:57:F7:22:EA:61:6D
X509v3 Authority Key Identifier:
keyid:DD:2A:12:17:67:3E:B1:1C:A9:8A:35:13:95:20:40:7C:97:68:DF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c8:d4:a7:0d:08:b3:29:78:c4:98:54:3c:67:e0:02:fd:bd:
c1:f6:ad:3f:e1:f8:76:f0:05:42:78:27:08:61:e7:6b:31:b0:
1a:9e:e8:00:d2:d7:a5:d5:89:c1:94:c8:0b:6a:84:85:5d:1f:
d8:48:bf:8a:2e:01:63:a7:43:ef:fa:53:95:22:11:e0:b6:95:
53:8f:7a:55:af:f8:aa:42:02:a0:52:b2:b5:61:2e:92:69:77:
58:ac:9f:b4:86:bc:bf:e9:24:69:79:f0:14:99:69:ae:a7:49:
cb:90:df:8c:42:83:e7:d3:2b:e8:da:02:a1:47:c4:26:dd:ec:
0c:8d:14:23:06:b5:f3:ac:d8:8f:88:84:b1:98:ef:9f:89:6a:
49:96:b5:45:5d:c3:b7:9d:f2:78:5d:0a:3c:1c:2f:b7:5d:b7:
1c:e4:3b:7b:20:61:68:d1:19:ab:1a:1d:96:a7:bb:2d:51:c4:
d3:ca:09:2f:2a:a9:a2:9b:3c:9d:42:ad:9f:b6:47:ef:4d:c8:
89:ab:f1:18:d4:aa:87:c1:36:cb:07:5b:f4:4c:b4:85:d2:d8:
25:60:a4:8c:89:d6:5a:6a:84:09:6f:7e:f3:6b:53:b0:6c:74:
4b:23:ad:ad:a7:bc:82:e7:11:23:52:0d:0a:f1:b4:6d:a3:f1:
37:e7:bd:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 22:26:00 2026 by rpki-client