Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
File: 3eNumAISZPWoBwEGeAvinUihbGc.mft (raw, json)
Hash identifier: rErgR4AbGX+acA/hmtPDltZyuDlPi88yAAwwdfjTeOQ=
Subject key identifier: 26:BB:9A:C7:43:96:B9:F9:AD:28:9E:C1:A2:25:D4:C6:4E:CD:0F:92
Authority key identifier: DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
Certificate issuer: /CN=dde36e98021264f5a8070106780be29d48a16c67
Certificate serial: 019A4DE1B99D696AB66BFDC36E06187E03D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
Manifest number: 104F
Signing time: Tue 04 Nov 2025 08:00:29 +0000
Manifest this update: Tue 04 Nov 2025 08:00:29 +0000
Manifest next update: Wed 05 Nov 2025 08:00:29 +0000
Files and hashes: 1: 3eNumAISZPWoBwEGeAvinUihbGc.crl (hash: rq5fZVl4RTQeqbfIY84FIi8mlAHhJbkMfHuGeXCs+so=)
2: GJgS7xgFqg_T1Brv5T3Z3VSHSQs.roa (hash: qcKfQ/V3fbXzE7gbTkc10cKeggN9uhLupcmee0zeuj8=)
3: gDn1RHCMxQyNW_pGfUDeAoFsteY.roa (hash: aOveJJ3ah1WLjPcvfI87OOrTavXERjpgS9XWi0GEgq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:b9:9d:69:6a:b6:6b:fd:c3:6e:06:18:7e:03:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dde36e98021264f5a8070106780be29d48a16c67
Validity
Not Before: Nov 4 08:00:29 2025 GMT
Not After : Nov 5 08:00:29 2025 GMT
Subject: CN=26bb9ac74396b9f9ad289ec1a225d4c64ecd0f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d6:9b:2e:d0:91:dc:b2:50:63:09:c8:20:0d:
43:6c:54:1a:a9:ad:54:da:d7:61:c8:a2:c4:b5:f2:
1c:a9:1a:d3:23:df:df:d1:e6:1b:5f:f2:51:65:ba:
31:40:2b:d4:26:3b:01:e9:71:d9:9a:ea:f5:9f:a5:
ac:b4:2b:f9:22:c1:ac:de:10:bf:e5:55:9d:1b:f1:
5e:55:e3:87:fe:cb:55:d8:14:a2:31:6a:bb:1f:6b:
80:90:62:87:bc:e3:93:a3:90:a1:ca:b8:95:ee:7e:
3b:cd:30:50:41:6c:b4:d5:ef:d3:7a:b2:ec:f6:1b:
ac:36:24:6d:e4:0c:8f:96:44:01:30:41:ca:8c:c9:
09:f3:bf:8f:b2:5d:58:06:16:49:a6:43:6a:fd:d4:
4b:65:b6:4a:82:a5:df:f1:7e:47:83:17:c6:91:20:
66:e8:19:2d:be:e8:b1:aa:33:96:d1:f4:a5:d4:bf:
2d:a3:a2:20:31:10:90:d7:db:83:dd:95:92:c0:f8:
94:c6:8c:4c:a2:78:bf:11:8a:d6:c4:fb:29:52:3b:
61:04:ee:c0:1b:8b:e5:af:f6:fc:95:28:41:0b:4c:
c3:e0:ec:0c:43:f3:66:d6:ab:4e:14:13:58:d9:24:
6c:02:0a:53:f9:00:78:16:3a:6d:80:d8:3d:ec:44:
b4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:BB:9A:C7:43:96:B9:F9:AD:28:9E:C1:A2:25:D4:C6:4E:CD:0F:92
X509v3 Authority Key Identifier:
keyid:DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:91:bf:35:e4:04:46:ec:19:ee:9e:3d:68:a2:20:87:ee:87:
6e:15:c3:91:7b:0a:81:a5:be:08:e0:9f:16:96:a3:b5:52:bd:
7f:b8:3f:9b:70:10:92:b4:d6:02:5b:c4:26:f1:77:9e:52:66:
de:60:c9:d3:69:36:b6:44:5a:fd:aa:0d:e7:4f:61:40:a4:a0:
70:46:b5:6d:75:db:75:e2:57:81:d4:05:b9:2a:f2:55:66:53:
d1:5e:7c:4d:2f:53:24:4b:ae:3b:61:67:3e:6c:f2:c5:5d:dd:
f6:6a:7e:cb:08:c3:dc:8e:91:b4:d4:a2:a4:46:9b:44:09:30:
cd:cf:ec:c5:10:c3:13:0d:c5:a4:d7:14:e9:84:19:63:7e:bf:
94:12:e2:d6:2d:f7:35:c9:6c:d8:72:5b:aa:4f:c2:88:fa:9c:
49:06:1f:6d:7c:1a:a6:e8:9a:b2:97:99:2b:49:6e:3d:7e:62:
e0:c2:7a:de:1b:3e:bc:01:c3:c4:1d:7d:dc:7f:2c:49:7b:58:
1a:2b:48:d6:c0:d7:41:8a:52:82:a4:aa:b0:43:14:4e:ee:0a:
ee:65:de:cb:95:77:76:3a:fc:a2:eb:8a:39:9a:dd:38:87:fa:
42:68:89:a7:c7:c7:cf:31:8e:c8:aa:4d:66:3e:41:64:6a:3e:
46:d9:9e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:57:15 2025 by rpki-client