Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
File: 3Go3QvDw-xIJIrM57wHOz4f00e4.mft (raw, json)
Hash identifier: sX7VqIKkjyY6Cwy2xHBaYlOyf6MQjlqahBPSBMf72gE=
Subject key identifier: 76:48:31:88:52:37:CF:DB:10:E6:48:E7:DA:BA:04:62:E8:0A:AE:36
Authority key identifier: DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
Certificate issuer: /CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Certificate serial: 01A0F9B3D01C01C3088F102A44C1A7B7AEB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
Manifest number: 1A83
Signing time: Thu 01 Oct 2026 23:01:45 +0000
Manifest this update: Thu 01 Oct 2026 23:01:45 +0000
Manifest next update: Fri 02 Oct 2026 23:01:45 +0000
Files and hashes: 1: 1YkIJofGDPbAKhB5ldovfVVJQaQ.roa (hash: ft15usCMKxpuecv7eKItu1OCSt1aYNUn7zhbarfUJ4o=)
2: 3Go3QvDw-xIJIrM57wHOz4f00e4.crl (hash: jP3W/wQBxwlAG6VTzvnRhyNUKLbqBYXXv0FFDvOPIwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:b3:d0:1c:01:c3:08:8f:10:2a:44:c1:a7:b7:ae:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Validity
Not Before: Oct 1 23:01:45 2026 GMT
Not After : Oct 2 23:01:45 2026 GMT
Subject: CN=764831885237cfdb10e648e7daba0462e80aae36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cc:cc:fb:d3:22:bf:f4:65:2a:65:e0:59:7d:
c3:47:96:89:10:0b:3f:f9:98:73:35:f2:15:59:05:
e8:f9:c8:50:a6:12:de:5d:a3:fe:55:52:81:ae:21:
fd:19:fb:d0:59:c5:bb:d7:d1:42:30:4e:74:66:0b:
28:25:ce:3f:1b:b4:55:fc:ee:3d:1c:f6:98:79:86:
47:ec:03:e9:20:f6:b9:d0:42:af:3d:5f:79:bc:92:
09:44:3a:1c:e0:dc:b7:0d:0b:3b:e6:32:d2:24:07:
ac:46:4b:1f:cb:94:26:70:d1:55:4c:53:fc:a9:cf:
33:62:4a:5d:df:46:b0:35:8a:fe:04:01:54:c8:b1:
1a:9a:6c:a8:e6:5c:26:26:62:10:fa:75:55:c0:e0:
3c:a5:93:f3:0d:80:22:70:c6:b2:9f:a9:62:c8:a6:
09:ae:62:5f:30:75:67:29:a3:86:26:f0:d2:a9:83:
44:40:94:01:bc:82:84:1d:86:22:82:12:cc:d6:75:
ac:7c:6c:cc:41:e1:a9:2a:19:76:28:56:b3:e8:18:
98:b6:77:7f:8f:34:c4:95:a4:79:f3:6d:a5:74:13:
63:79:6f:0c:0d:cc:82:09:6a:79:9d:4d:67:cc:99:
a6:9c:c8:09:94:2b:8b:f4:95:c3:98:53:39:fe:88:
44:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:48:31:88:52:37:CF:DB:10:E6:48:E7:DA:BA:04:62:E8:0A:AE:36
X509v3 Authority Key Identifier:
keyid:DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:87:10:61:fe:f5:39:cd:e3:32:f9:74:a6:9d:bb:f8:9b:41:
95:5e:72:e7:99:68:16:fc:5c:45:5f:e1:1e:18:76:ed:62:26:
d8:7c:cc:77:79:c6:d5:8c:9b:69:df:ec:ee:50:04:89:ab:4c:
96:a6:4d:cb:33:9a:8a:c9:a8:86:d4:24:b7:19:c9:5f:5f:6d:
80:00:d2:b7:71:4c:77:42:f6:a3:ad:77:23:ef:0a:fd:c2:0a:
5a:26:d0:b3:ac:a7:17:c8:bf:fe:11:7e:8f:91:5d:c8:ca:99:
6c:10:23:e9:fa:21:fa:cc:16:39:14:04:ef:e2:ff:aa:d4:e8:
3b:5f:c2:e5:69:d3:81:4f:75:bd:4b:a4:d0:9c:f3:30:39:f9:
08:30:2b:5d:54:3d:c7:30:e5:f3:01:f1:23:eb:8e:53:38:1e:
59:56:f5:3c:60:5e:f5:f3:62:5c:80:96:2a:8f:0b:8e:13:b7:
94:b9:8c:51:9a:00:c6:09:e4:96:f5:9c:80:6a:23:fe:76:6c:
26:18:fe:e1:c9:8e:19:ec:7b:97:0f:a4:8f:33:7d:13:39:c4:
3f:45:cf:38:11:4b:ae:79:67:d0:68:fe:78:ad:37:ac:c8:7b:
f8:44:46:43:b9:58:b1:84:d4:83:c7:ef:e7:b9:59:7e:19:c4:
3b:e6:dc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 03:19:53 2026 by rpki-client