Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
File: 3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft (raw, json)
Hash identifier: ZlV4IdMiT7lPUBouprc4dmC9bSFFmVEOA68z7xBKRyU=
Subject key identifier: FD:5C:2D:62:F7:30:50:A9:76:E4:00:43:99:A4:17:A6:00:A6:F7:35
Authority key identifier: DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
Certificate issuer: /CN=dee623e2aff7b03afeb94260348c1633b54d9056
Certificate serial: 01A11297E25A9E87DBFE9AB1883880EB749B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
Manifest number: 1AA3
Signing time: Tue 06 Oct 2026 19:01:45 +0000
Manifest this update: Tue 06 Oct 2026 19:01:45 +0000
Manifest next update: Wed 07 Oct 2026 19:01:45 +0000
Files and hashes: 1: 2WGl8G8pi8oMegi8RKRiyyTcfBY.roa (hash: eFPA6RWwauuX6BAg0wBN5keK8VZL6vRlLkve+VSJ0ZE=)
2: 3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl (hash: e7QoTfgz9otDjGsEUftY0p0umO+ffm3v45ndgyOtU7k=)
3: WSkrs1ltbglcOvmgNNdKDlpJVJo.roa (hash: EfPSiAnXovgs9qwouEhgN4C060q6TwU5BAOhp7sYuHU=)
4: _fWzLCKSJmnuveEvkqcAAbIsnQU.roa (hash: hfCXoWjDXZMkDBWfgzrI+fe9FDLmJGHVyF9Qx+EgAyg=)
5: _xnVn4Z2mdrwXIaogX13bELVsCM.roa (hash: ApqTNIYHPR2DmL0Vq3O1QjPD2Uk/9+5OvGzlqh5bBUk=)
6: p04FvvBEHzMTXVoNNN3LSmN2jSQ.roa (hash: HB8efpVA3BHYu9Zn4BAQKGXl8PNjjJD4B4das4y3Wnc=)
7: xJ4TSRJyqffQgy_-86pjaJ3lB3I.roa (hash: ewjgg7+zEymo+Ubr8e5xOG/nC4U9si8j1VyBDgd9eok=)
8: ygo3H5OHWrmMxmaU3h9Trr2iclQ.roa (hash: 3KarnZJsM1oC9NHKT7Yavsz5aIphKie2KhT0LQNo1gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 19:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:12:97:e2:5a:9e:87:db:fe:9a:b1:88:38:80:eb:74:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee623e2aff7b03afeb94260348c1633b54d9056
Validity
Not Before: Oct 6 19:01:45 2026 GMT
Not After : Oct 7 19:01:45 2026 GMT
Subject: CN=fd5c2d62f73050a976e4004399a417a600a6f735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:52:42:76:23:3b:f6:03:6a:ec:73:c7:e4:e0:
de:fa:9d:e4:0b:76:7f:3d:d7:68:57:c5:3d:c4:ed:
d0:8e:0e:b8:64:6f:74:37:ff:93:9e:2c:03:d3:4f:
3e:70:30:36:0c:18:66:f8:2e:e2:fa:3f:39:8f:62:
e2:ae:3b:f5:dc:8b:aa:b4:e0:06:a2:3d:63:e1:62:
dc:38:bf:9b:8e:1b:7f:e6:f0:03:1f:05:c7:ee:21:
36:91:c0:bf:96:16:3b:6d:f8:2e:e4:0a:a9:fe:06:
60:1c:1d:ac:01:9e:e1:56:91:87:f1:e6:44:ef:d3:
c2:37:41:e3:0a:a0:34:59:ff:55:0c:25:70:0a:73:
51:25:a9:fb:1b:61:52:2c:59:fd:1e:1a:5f:13:ec:
d7:cf:84:36:dd:23:01:59:4b:37:99:b3:4e:10:b7:
35:e3:cb:08:70:5e:f8:bf:e8:a8:e1:e5:c2:a3:6d:
47:55:73:45:0d:1c:7d:ef:1a:39:83:e0:ae:1f:1d:
4b:71:53:cf:7d:f4:e5:f5:1c:f5:1e:50:58:37:00:
a0:d0:68:4f:8e:23:82:6e:41:02:f5:22:18:31:cc:
05:70:14:dd:d3:b1:77:20:4b:a3:b1:bc:89:a1:bc:
0a:71:a7:20:17:3d:38:d0:9f:c4:ee:4b:20:9d:53:
e8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5C:2D:62:F7:30:50:A9:76:E4:00:43:99:A4:17:A6:00:A6:F7:35
X509v3 Authority Key Identifier:
keyid:DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:27:b8:46:d1:40:ac:18:47:cd:12:55:81:28:21:fd:79:16:
2c:e2:20:ef:f6:a1:75:7c:ca:d6:02:6f:9d:f2:94:67:7a:dd:
ca:29:35:e8:00:9d:71:25:ce:29:15:d3:be:9b:f2:39:83:e2:
7f:4b:e6:59:1b:1f:e8:f7:19:62:8f:d1:e6:e9:e9:6e:c6:9f:
59:63:e5:85:b3:76:b1:86:5c:30:2f:e6:40:90:4e:c8:90:e2:
33:71:59:2e:96:a2:a6:ea:41:0d:83:91:2a:fa:86:26:18:66:
db:76:0d:76:84:52:07:3e:bc:53:68:97:d4:16:5e:a9:8e:5e:
06:bb:20:09:86:e6:93:5e:4e:25:e2:1c:c3:0f:ae:45:c9:bb:
15:06:a3:8b:79:b2:09:e3:0e:6b:2e:b3:dc:7b:fd:fa:00:8f:
1e:28:ca:a2:49:86:4c:ae:a1:a1:e6:38:44:e6:7d:bf:c9:9e:
f1:30:1a:18:3f:42:1f:1e:d1:35:eb:de:b2:55:af:4b:f9:4b:
dc:a1:93:bb:3e:87:16:4f:80:24:e2:62:90:cf:bf:c5:22:32:
6f:3a:6d:f0:e7:8d:a7:25:68:24:8d:2b:d2:37:a5:4d:74:a3:
90:a1:7f:cd:42:0e:58:57:96:2f:15:b4:65:8e:70:3d:15:80:
3f:9c:a4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:21:39 2026 by rpki-client