Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft
File: 3j4BZ79YLOzkjWxtApqCzeJyqdU.mft (raw, json)
Hash identifier: NNCuSxf86C906WQoTDWjGnOpKOa96i58YyA7JqdLzNw=
Subject key identifier: D6:04:E2:67:D9:6D:6D:5C:B3:92:55:2D:2C:82:68:2A:96:3F:A5:BD
Authority key identifier: DE:3E:01:67:BF:58:2C:EC:E4:8D:6C:6D:02:9A:82:CD:E2:72:A9:D5
Certificate issuer: /CN=de3e0167bf582cece48d6c6d029a82cde272a9d5
Certificate serial: 01A0E5F5FC135F6BFCB188CCB668EC64AAB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3j4BZ79YLOzkjWxtApqCzeJyqdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft
Manifest number: 1A0A
Signing time: Mon 28 Sep 2026 03:01:38 +0000
Manifest this update: Mon 28 Sep 2026 03:01:38 +0000
Manifest next update: Tue 29 Sep 2026 03:01:38 +0000
Files and hashes: 1: 3j4BZ79YLOzkjWxtApqCzeJyqdU.crl (hash: ocRp0vDER3F3IDeyodg5LFNsDrzh97kwNBA5r0zs4aU=)
2: RP5c5AhjbUkmDfubYWaFncEBFeU.roa (hash: tROgfSyZEJSTutfORsxHOvucHqOl4aWfT4NXFn6Duak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3j4BZ79YLOzkjWxtApqCzeJyqdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:f5:fc:13:5f:6b:fc:b1:88:cc:b6:68:ec:64:aa:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de3e0167bf582cece48d6c6d029a82cde272a9d5
Validity
Not Before: Sep 28 03:01:38 2026 GMT
Not After : Sep 29 03:01:38 2026 GMT
Subject: CN=d604e267d96d6d5cb392552d2c82682a963fa5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:49:46:97:36:4a:fc:65:46:33:61:5b:bb:88:
42:dc:c7:89:06:3e:b8:4b:c8:1b:99:c6:0a:4b:ff:
0c:18:b6:45:d9:44:87:e2:1b:5e:f3:e2:80:3d:5c:
68:bd:8a:40:e7:dc:d4:80:b0:a7:fe:d5:c9:35:de:
51:65:f5:89:8c:5c:ef:a7:03:e5:be:87:e4:83:e4:
98:bb:74:01:bc:18:b3:c9:8e:55:f9:ea:0f:f4:58:
42:33:2b:1c:cc:1a:2a:74:ce:5b:6c:ac:ff:85:00:
ae:87:d7:12:11:af:80:a2:82:39:60:33:f9:31:69:
b8:f7:06:e1:3b:f2:63:d7:aa:6e:f4:22:0f:f7:3c:
12:5e:57:c6:19:f4:43:5e:81:80:d5:ba:b2:1c:bb:
5e:60:29:c3:67:14:20:0a:69:ea:1f:38:80:b6:b1:
1d:ac:d5:50:16:87:14:e4:99:02:7e:e8:0b:00:4f:
39:54:7b:17:1d:e9:f8:f7:58:14:06:30:80:b6:61:
48:12:f9:f0:0e:22:49:36:0a:73:46:00:28:d1:1b:
71:1e:d8:10:65:10:c4:6d:ee:f8:c6:37:1f:00:98:
81:a1:2a:13:99:01:ad:17:bd:4a:4b:81:e0:35:37:
27:58:bc:2e:8d:81:32:b9:c4:84:c5:a9:21:87:8c:
98:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:04:E2:67:D9:6D:6D:5C:B3:92:55:2D:2C:82:68:2A:96:3F:A5:BD
X509v3 Authority Key Identifier:
keyid:DE:3E:01:67:BF:58:2C:EC:E4:8D:6C:6D:02:9A:82:CD:E2:72:A9:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j4BZ79YLOzkjWxtApqCzeJyqdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a715ce-410d-4390-8e8c-8b2379eba13e/1/3j4BZ79YLOzkjWxtApqCzeJyqdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d3:98:13:5c:58:74:1c:f3:1c:df:f1:c7:27:76:64:89:36:
5b:9b:ca:71:63:58:da:fa:c8:c3:fc:98:ae:07:72:93:05:ea:
14:b3:ee:0f:c0:20:30:ca:62:d0:dd:dc:22:1f:55:f5:f7:22:
ef:a7:59:31:19:e4:b8:2c:4f:c2:63:07:b0:54:bb:9d:6f:ea:
6a:8c:6d:87:d4:ce:a8:b6:45:64:71:b3:a9:94:34:a9:74:c5:
6b:95:ff:6a:3c:1c:fd:a2:c8:41:85:77:13:bd:30:54:47:75:
94:4e:ee:4e:fc:f8:71:4a:2b:45:26:55:24:4c:26:2a:c0:10:
20:e9:20:a3:c9:15:80:aa:ba:16:9c:6b:d7:ce:46:7a:6a:74:
81:54:c6:56:ae:9a:80:ff:5b:4f:8d:f9:7a:39:ab:d8:13:cd:
6f:2b:db:5f:78:ec:53:89:43:ef:eb:47:a9:94:82:09:4c:eb:
96:50:3e:7e:99:5a:bb:e7:b5:7c:15:cb:fe:23:f9:0e:fd:fa:
3c:3e:81:e3:0e:f9:1e:58:30:5d:aa:97:1e:e0:9a:44:60:a6:
3b:52:19:26:70:35:eb:5e:c1:82:c2:82:fe:55:09:4b:b6:aa:
7a:b1:1a:3f:f3:66:2d:0a:ef:fc:36:6a:e0:be:2a:23:f6:f1:
bc:08:ed:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:36:33 2026 by rpki-client