Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
File: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft (raw, json)
Hash identifier: DXABhqX3BiQyfX6sC9nTHgCu0Ha7g3ugHGkfE0eIIK8=
Subject key identifier: 27:0F:17:8C:7E:63:2D:EB:EC:CE:F5:20:DA:09:EC:82:26:71:DB:3A
Authority key identifier: DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
Certificate issuer: /CN=df0198a7b3afdcdd7003562a0871878e238760ad
Certificate serial: 01A0C47C8E20CDB0C0FB2CA75F9F4085A930
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
Manifest number: 1519
Signing time: Mon 21 Sep 2026 15:01:32 +0000
Manifest this update: Mon 21 Sep 2026 15:01:32 +0000
Manifest next update: Tue 22 Sep 2026 15:01:32 +0000
Files and hashes: 1: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl (hash: BFkuYE5RXhiMRwx5/HadrrBdAcWPRbh3iW2+mROce60=)
2: SO6QjR1hksAlM1LEwjsSfqyQA6I.roa (hash: ywShTaMxtKmWmIhHqGYn82a6dMwPRqUZ2JHI/iurJ+w=)
3: Y89C32NzpkA3PQGSAOSpiB1CVZA.roa (hash: A3b0H1rBdmLPnm3DdKs/p6L4k7I984tyefEWdXhVLr0=)
4: csf31rqb-Vtp8DxAcvND5Xzia2g.roa (hash: tIcC2hzx8VFbqFhPv8CNA+NzwFonxl1ILY4nFDsUkqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:8e:20:cd:b0:c0:fb:2c:a7:5f:9f:40:85:a9:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0198a7b3afdcdd7003562a0871878e238760ad
Validity
Not Before: Sep 21 15:01:32 2026 GMT
Not After : Sep 22 15:01:32 2026 GMT
Subject: CN=270f178c7e632debeccef520da09ec822671db3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:10:51:cc:4c:68:bb:4b:aa:3c:70:02:10:52:
a8:1c:b6:e9:86:ad:47:06:95:ad:48:3e:26:c8:97:
65:e8:f3:a2:80:74:1b:62:32:25:1d:5c:66:36:03:
6f:4c:34:ae:83:89:51:a6:19:ae:ff:1f:91:bb:93:
52:f4:ed:f1:c6:69:10:fa:aa:d5:c1:a0:1e:22:af:
60:e2:a3:25:e7:67:4d:5c:10:25:4c:47:b9:f0:c2:
76:99:93:53:40:e0:34:af:d8:e6:b2:91:ba:e1:31:
45:ea:94:d6:64:ef:59:68:cc:98:ab:31:2d:27:08:
39:5b:39:99:a7:66:2c:dd:b7:35:bc:5f:ad:9e:c3:
db:24:78:b1:51:9b:80:bf:f4:2f:d4:2b:31:72:2a:
96:a5:40:97:22:3b:2a:f9:7a:fb:83:46:3a:06:76:
21:43:42:ac:cf:d1:60:ee:f7:01:0c:c1:e5:2d:10:
61:0d:cc:e9:5e:4c:5f:30:65:9b:db:74:90:57:ca:
80:ae:76:d0:ad:b0:66:da:a8:e0:e5:5c:1f:fa:e2:
bd:79:96:05:cb:f1:dd:c1:9e:d3:3f:bb:df:4a:4a:
3e:5c:2f:15:0d:7d:77:a5:05:3c:5c:6b:6d:d4:ed:
64:62:83:f4:4a:fb:6f:ec:0d:6c:9a:5e:52:2b:1a:
bf:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0F:17:8C:7E:63:2D:EB:EC:CE:F5:20:DA:09:EC:82:26:71:DB:3A
X509v3 Authority Key Identifier:
keyid:DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:20:92:da:ef:50:ba:d3:fc:d3:6e:b0:4e:5e:84:c7:29:85:
8a:88:08:ce:09:27:2e:5d:50:53:4f:cc:b3:1c:d3:bb:e3:23:
7a:92:f6:c6:b5:5a:e6:3e:e9:a7:61:da:56:00:2f:2f:64:65:
d8:08:90:a6:65:d4:ea:71:45:14:96:61:ef:ad:ec:61:9c:18:
e6:8e:e3:ce:e3:60:f7:d3:07:bf:2e:5e:5c:cf:bf:50:e5:47:
dd:a7:f9:34:1b:b5:29:14:85:1b:d6:90:e8:42:1d:ce:a8:dc:
d9:87:87:6c:11:c6:ef:ca:3c:28:ac:21:19:9d:69:54:36:2b:
b2:b8:9e:ec:d0:3d:41:11:a9:dc:1d:c1:fd:34:42:16:6e:59:
a6:26:aa:56:07:b0:85:ac:0a:da:74:c2:f9:37:db:94:8c:32:
63:ea:d6:f9:7d:94:6e:79:11:97:89:42:38:bf:1f:19:06:f3:
9f:7e:27:04:33:20:b1:38:88:37:87:0a:25:a3:8f:f6:34:fa:
9f:5e:db:27:20:33:0d:67:d2:ae:e5:b7:fe:76:7e:c5:13:fa:
67:10:90:e3:d8:00:69:15:d1:6f:ef:6e:c2:63:bc:d4:80:be:
ff:51:b1:ce:4d:5c:79:00:1c:f9:3f:3b:da:e6:3f:22:a7:ad:
99:c4:e4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:33:42 2026 by rpki-client