
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
File: 3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft (raw, json)
Hash identifier: VB0jgsuzpdBe+iU6lgP+VWHdtQRq1tnBcLEihrjBDQs=
Subject key identifier: 87:9A:FA:C6:75:5F:56:80:00:E2:A4:EB:83:E8:9A:75:BC:52:17:55
Authority key identifier: DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF
Certificate issuer: /CN=de9ff6195096a098c19281548e4107b867c73aff
Certificate serial: 01A0C6A179495F355917EAAF3F96831A4FB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
Manifest number: 173D
Signing time: Tue 22 Sep 2026 01:01:06 +0000
Manifest this update: Tue 22 Sep 2026 01:01:06 +0000
Manifest next update: Wed 23 Sep 2026 01:01:06 +0000
Files and hashes: 1: 3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl (hash: 7Y5qr0jR77r3xK+/UKBwbdKIa2CtTmz+LJ4DxOEPfsw=)
2: QkgMfGMyuSgoLTqRtj3rvepp9lM.roa (hash: SZyDNV8jKwjMVASMH9KvMwuDodmFVa99uOn85IdE4bQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a1:79:49:5f:35:59:17:ea:af:3f:96:83:1a:4f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9ff6195096a098c19281548e4107b867c73aff
Validity
Not Before: Sep 22 01:01:06 2026 GMT
Not After : Sep 23 01:01:06 2026 GMT
Subject: CN=879afac6755f568000e2a4eb83e89a75bc521755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:26:51:11:26:48:dd:9b:b0:0e:70:c0:2c:54:
63:15:86:c6:ec:9a:e3:d2:bd:62:8d:e5:d7:7b:c3:
55:61:33:40:91:68:ee:85:87:09:d0:73:96:b4:8e:
86:fe:c6:0c:04:4a:44:5d:bd:c4:d3:ba:3a:0e:5a:
34:33:78:60:1a:63:a9:c5:3d:b4:75:a8:2f:78:f2:
79:b7:49:eb:12:76:fc:86:67:cd:1f:cc:e4:14:71:
1c:b6:92:6b:4c:5a:ff:05:71:d0:60:e6:c9:57:89:
f5:b4:3a:7d:3d:63:ca:7c:89:be:40:7a:f0:4d:51:
81:39:ac:e1:6d:23:53:97:64:57:a7:1e:7b:c2:00:
79:b4:93:e8:fd:56:09:78:7e:31:66:6d:c8:95:44:
8d:2a:b7:8a:36:f8:9b:8d:13:1e:0d:22:54:7f:35:
13:61:13:f6:b9:95:74:15:e3:50:57:16:1b:55:91:
b3:16:74:f2:ec:a4:f2:5e:da:67:f8:11:76:48:14:
d7:ae:94:7e:d3:53:ed:f8:62:00:a1:6a:b2:1c:17:
4d:b2:1e:e0:74:da:9d:7f:14:71:d4:2b:a3:41:ff:
83:44:ee:ae:ec:cb:39:74:15:6e:dc:50:2f:d0:c5:
8b:38:60:e4:84:56:89:08:4b:6b:6c:d7:8f:82:e3:
c2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9A:FA:C6:75:5F:56:80:00:E2:A4:EB:83:E8:9A:75:BC:52:17:55
X509v3 Authority Key Identifier:
keyid:DE:9F:F6:19:50:96:A0:98:C1:92:81:54:8E:41:07:B8:67:C7:3A:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p_2GVCWoJjBkoFUjkEHuGfHOv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73679a-cb01-43cd-9245-a29c6dae35c0/1/3p_2GVCWoJjBkoFUjkEHuGfHOv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:04:bf:33:d9:42:23:5a:be:5d:ae:e9:75:64:52:5e:08:3e:
c1:f9:31:db:f9:30:93:2e:39:2f:cd:bf:01:ca:34:52:bf:55:
35:81:81:84:05:07:3c:47:04:5a:98:69:a7:3a:52:cd:f1:0e:
b8:a2:80:f1:b2:38:d4:79:57:d7:17:4e:17:83:bb:bd:14:7b:
61:3c:c2:86:ed:5d:7e:57:e2:df:7a:a3:f1:ba:2d:e0:17:3b:
33:00:6e:9a:05:25:87:d9:fb:32:72:6a:d1:06:de:5f:47:1e:
63:76:33:8b:2d:15:b6:6b:b1:fd:ee:ec:81:be:b2:8b:b7:54:
b2:ef:1f:bf:c8:52:97:86:b6:d5:78:be:48:7e:72:c1:f3:6c:
c9:ae:0a:97:a8:d3:d9:3a:d8:6f:41:4f:51:27:e1:d5:95:9f:
6d:94:28:d5:42:ac:65:6d:76:64:06:4b:87:a0:40:cf:39:67:
53:a8:75:a0:48:c8:01:9b:ef:6e:6c:af:01:48:3a:cd:c0:bd:
ad:88:20:4a:74:e5:6a:7f:b7:ab:5d:53:3d:f9:c6:6b:99:0a:
df:68:e1:30:dc:ee:06:d0:2a:b6:49:5b:57:6b:ae:58:49:72:
65:9b:f4:4e:f6:32:92:78:d0:f1:61:7c:ac:13:c2:4a:00:93:
d7:e3:e8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:47:34 2026 by rpki-client