Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
File: 3-ytVuquEjX6eI5OrTkiwpbig6U.mft (raw, json)
Hash identifier: IaTnbaJJsQ4GQyg2Cr9AMbfAVWghuzlJsYC8zUPYxmc=
Subject key identifier: 9C:1C:0B:BB:D5:DE:BE:A6:50:64:75:AC:5E:CC:14:03:AE:99:76:5B
Authority key identifier: DF:EC:AD:56:EA:AE:12:35:FA:78:8E:4E:AD:39:22:C2:96:E2:83:A5
Certificate issuer: /CN=dfecad56eaae1235fa788e4ead3922c296e283a5
Certificate serial: 01A0E99C2A05639364BF2CD1E1E9A42C31BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
Manifest number: 05B5
Signing time: Mon 28 Sep 2026 20:02:00 +0000
Manifest this update: Mon 28 Sep 2026 20:02:00 +0000
Manifest next update: Tue 29 Sep 2026 20:02:00 +0000
Files and hashes: 1: 3-ytVuquEjX6eI5OrTkiwpbig6U.crl (hash: iaXYFPnZOcsUYGTR5BRxgflZ3oGPvTpAwHLktoxDdbc=)
2: THfbU74ywtQ8sKspPoGoe7QN1LQ.roa (hash: cZXszgxvNHrOfZXBgPIvxUmNlIbSPNniYOHYtr5et54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:9c:2a:05:63:93:64:bf:2c:d1:e1:e9:a4:2c:31:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfecad56eaae1235fa788e4ead3922c296e283a5
Validity
Not Before: Sep 28 20:02:00 2026 GMT
Not After : Sep 29 20:02:00 2026 GMT
Subject: CN=9c1c0bbbd5debea6506475ac5ecc1403ae99765b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5c:78:44:e4:fc:fe:35:0e:b6:da:14:48:ab:
c8:98:6f:ae:76:fd:04:c1:47:ef:ab:41:a3:e3:46:
76:1f:e9:71:2f:ba:f6:2d:66:e1:db:77:3e:5d:98:
0f:0f:11:d4:cc:0f:60:91:7f:25:a8:a8:77:16:ff:
c8:da:92:fd:09:b6:2f:c3:fa:e4:ee:b0:ba:4c:15:
47:ca:69:ea:db:4c:93:48:84:9e:43:a7:8f:b0:78:
6e:38:8a:76:0a:27:e9:df:e1:fd:43:60:d9:72:39:
f2:66:b5:9a:38:53:cd:c0:aa:55:61:70:08:28:e2:
b9:af:ca:bf:cb:b6:83:ca:8d:8d:bd:8d:b4:67:5d:
0e:d4:ee:9d:b3:a2:52:54:6d:8c:cc:28:80:4a:5a:
01:85:69:f8:3a:78:d9:7e:8c:27:84:d2:70:aa:24:
70:30:e4:c6:75:ca:8d:5e:46:5e:f9:ff:85:1b:d0:
1a:f5:c6:a4:f3:9b:e9:32:9a:59:cb:d6:a7:96:37:
e7:ee:e0:50:05:8d:a1:d5:48:db:7d:74:da:06:a1:
0d:dd:09:28:d5:d2:64:c1:32:11:0d:b4:b7:02:5f:
d1:a7:95:6e:8d:35:30:bf:51:dd:56:c5:88:dd:4f:
a9:29:a6:c8:82:22:d1:50:6f:1b:a2:fd:da:09:28:
d1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1C:0B:BB:D5:DE:BE:A6:50:64:75:AC:5E:CC:14:03:AE:99:76:5B
X509v3 Authority Key Identifier:
keyid:DF:EC:AD:56:EA:AE:12:35:FA:78:8E:4E:AD:39:22:C2:96:E2:83:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-ytVuquEjX6eI5OrTkiwpbig6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d67087-765b-46eb-808c-677bab613aff/1/3-ytVuquEjX6eI5OrTkiwpbig6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:50:29:9d:b7:ee:df:fc:46:c8:22:17:7b:cc:01:36:17:ef:
2a:11:26:91:f8:24:ab:df:ce:3c:8f:94:66:c9:f9:80:31:15:
e8:ae:4c:5b:16:96:43:78:21:3f:4e:59:77:43:7e:f9:a6:80:
16:14:63:bb:d3:95:59:bd:cb:0c:49:fc:71:27:1b:31:35:53:
86:a0:8d:08:b1:dd:30:38:8f:4c:a8:0b:36:bc:33:62:5c:66:
ab:ec:f8:c6:d7:52:e2:39:d1:d4:a0:ca:04:c1:02:4f:75:0e:
eb:c9:ee:e0:fd:fe:1b:62:36:4f:52:e4:98:5c:d4:ea:46:46:
48:61:be:3b:a4:b5:79:68:92:7b:2e:89:a1:fa:bc:be:c7:91:
fa:76:71:d7:f4:5e:57:dd:eb:80:85:76:0a:5f:ab:32:a1:b5:
4f:7f:d8:96:73:f8:d5:5b:07:d1:54:5c:10:8a:50:f4:81:e8:
58:f3:53:d7:8d:81:8d:2b:95:25:82:a9:bc:82:66:28:ed:95:
6c:8b:8c:d4:4d:49:c4:08:e3:bf:c6:7d:14:8d:4a:08:88:85:
ac:b1:f0:78:73:cc:d4:02:46:15:8c:77:2e:68:1a:96:ca:66:
9b:f4:1f:6a:e1:3d:f9:e9:1d:1e:0a:3b:9e:2c:c2:03:9e:db:
f0:d3:f3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:20:11 2026 by rpki-client