Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
File: 3eNumAISZPWoBwEGeAvinUihbGc.mft (raw, json)
Hash identifier: B+ing728pr0AYt80KmVG0srwH1fjIgdVre4Kq6iMay4=
Subject key identifier: ED:D7:DD:F4:CF:B9:42:41:03:C3:FA:2F:40:26:FE:02:FB:14:CD:8F
Authority key identifier: DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
Certificate issuer: /CN=dde36e98021264f5a8070106780be29d48a16c67
Certificate serial: 01A0C331FBABBC94AAE9D7C30150D0C9DBB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
Manifest number: 13AA
Signing time: Mon 21 Sep 2026 09:00:27 +0000
Manifest this update: Mon 21 Sep 2026 09:00:27 +0000
Manifest next update: Tue 22 Sep 2026 09:00:27 +0000
Files and hashes: 1: 3eNumAISZPWoBwEGeAvinUihbGc.crl (hash: V4QUC40qiYx6pth6OYlHtmcUqhDpr1ez3nwIGYjMJ1A=)
2: SpTT9-sbWMhVBDjsZYsqJNdl4z4.roa (hash: DetJ0LlDZnlGmwIXOCXqSyycEMtjT8ysire41FdrJY0=)
3: wGffXotQutM5YPxgbpljeS3a9Gg.roa (hash: mICd/WsUOrkWcP68fCHD3+9zyqzcoi13I1Pp/yVs0e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:31:fb:ab:bc:94:aa:e9:d7:c3:01:50:d0:c9:db:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dde36e98021264f5a8070106780be29d48a16c67
Validity
Not Before: Sep 21 09:00:27 2026 GMT
Not After : Sep 22 09:00:27 2026 GMT
Subject: CN=edd7ddf4cfb9424103c3fa2f4026fe02fb14cd8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f4:03:d8:74:23:17:8b:a9:97:5b:04:24:af:
ca:89:70:59:83:ea:61:f1:f8:87:9d:88:fc:1f:14:
62:13:19:db:a3:e2:ae:eb:a5:d2:ac:4a:51:e3:b5:
ec:e1:d8:e1:57:56:40:ac:e4:2d:9a:8d:8e:9a:e6:
8f:10:d6:e8:2b:a3:ab:ee:d3:62:79:32:c5:1e:e6:
95:92:2a:5d:26:03:0f:2d:8c:a7:c6:d3:ce:90:1c:
08:a1:a9:e3:5b:40:7d:95:90:6d:af:13:26:e1:6c:
1f:5f:f8:50:9c:b5:d4:a4:ed:76:06:7a:88:69:34:
08:fc:28:1f:f0:35:fd:e2:f3:9b:00:90:51:75:c6:
4e:8e:e3:09:7c:f1:c9:7a:95:e0:7e:9f:42:db:a0:
8d:4b:ec:ad:2a:ef:df:78:ab:c3:c1:4b:72:a7:3f:
40:a4:eb:ea:c8:42:1c:9a:57:ec:4f:34:7f:b0:a1:
6a:9c:b5:7f:70:9a:46:d1:a3:85:1c:f2:57:89:e4:
7c:22:40:22:e2:d1:30:b1:40:d0:27:ae:48:c1:76:
ca:68:79:7d:d5:2d:f2:2e:c0:f2:c9:cc:6c:a1:31:
34:40:4c:9a:6a:58:15:d8:fe:4e:f5:a8:e4:63:0b:
68:68:83:2b:bd:4c:e8:3b:3f:68:f0:32:b7:2d:0b:
c8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D7:DD:F4:CF:B9:42:41:03:C3:FA:2F:40:26:FE:02:FB:14:CD:8F
X509v3 Authority Key Identifier:
keyid:DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:37:55:35:eb:32:3c:48:21:1c:51:43:6d:fd:5e:57:23:54:
66:56:6a:a1:9b:c0:ee:a3:b5:54:70:2c:1d:1a:7e:3a:03:ef:
05:cd:71:e7:ce:9d:25:53:0d:ab:a8:ca:dc:2b:d8:1c:d3:d5:
d4:37:cc:8f:20:b5:8f:c5:9f:84:5c:b8:87:a1:c8:86:e5:f9:
26:dd:e7:6e:a5:26:59:3a:84:cc:d3:85:da:89:6d:18:2f:be:
33:fd:b4:31:3d:a4:e3:fc:c2:b4:df:e5:43:db:7e:89:bc:dd:
cf:e6:d0:8d:c3:18:89:68:99:e0:60:4e:63:f0:93:30:54:68:
52:a1:c5:60:b7:02:17:bf:3f:34:7f:03:9d:a2:7e:e0:42:9a:
46:aa:b9:37:e8:04:f1:1c:0a:37:f6:40:4d:cb:c5:a3:bf:73:
35:48:db:74:a1:aa:5f:c3:6f:4c:30:bb:90:90:b1:e6:5b:22:
94:39:0a:0b:47:e3:56:98:17:1d:12:0e:33:9e:b4:4c:ee:0d:
5c:bc:e5:c3:2e:af:85:25:06:ba:a9:c9:47:df:35:cf:a3:f7:
e2:14:94:06:31:ad:28:35:a3:37:51:07:e6:5b:29:0b:21:b8:
b6:b8:87:c5:54:d4:82:66:6b:bf:53:da:67:29:f6:d2:ab:ec:
81:29:57:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:50:49 2026 by rpki-client