Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
File: 3tcjnbgdYfmNWGODzMEl1mEGyzA.mft (raw, json)
Hash identifier: mNy11FcTRLx7fhPCpRE0HYXCpIDESXaOiaieF9BEFEE=
Subject key identifier: B2:7E:DD:1A:60:D6:8B:10:40:6E:3B:B8:37:49:2C:AE:CB:2C:16:65
Authority key identifier: DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30
Certificate issuer: /CN=ded7239db81d61f98d586383ccc125d66106cb30
Certificate serial: 01A0D8DF2ECBC88A52B5AD1937334AE107E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 14:01:40 +0000
Manifest this update: Fri 25 Sep 2026 14:01:40 +0000
Manifest next update: Sat 26 Sep 2026 14:01:40 +0000
Files and hashes: 1: 3tcjnbgdYfmNWGODzMEl1mEGyzA.crl (hash: /m6fTYvd7c0s4HxG0S04FLCbS175yJEbS1arc4z9rCo=)
2: G1YzAyoTqBUhk978zdE01evKfXA.roa (hash: FUm9Ag5yprn8A12AZl7Cxr6X93qzvWsGdd9NMsdM1no=)
3: Nf3EsHLwWqodxJ1QM1KI7OGVqOk.roa (hash: S6vfOvH5sVJE28SQyXolc/taEC8cUDhQ4fTQO3bdy+0=)
4: fmp7hO-27waiWiX41nn06vkmebs.roa (hash: 7KG1oGecoEOfjNrGnz8LESldQIXGIpPrLgtXE2XlsMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 14:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:df:2e:cb:c8:8a:52:b5:ad:19:37:33:4a:e1:07:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded7239db81d61f98d586383ccc125d66106cb30
Validity
Not Before: Sep 25 14:01:40 2026 GMT
Not After : Sep 26 14:01:40 2026 GMT
Subject: CN=b27edd1a60d68b10406e3bb837492caecb2c1665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fb:c0:0d:21:c3:d9:96:43:21:05:b6:9e:3c:
49:3d:0e:09:21:f0:c2:60:58:5e:cc:27:2f:35:c3:
85:32:00:cf:67:ec:75:a3:19:62:ac:13:4f:f7:2b:
23:c2:5a:c0:5a:13:4f:f9:12:c6:a6:d2:82:5a:ef:
28:ec:ed:11:d2:e0:e0:4d:bb:f1:0f:de:3f:7b:3d:
54:1e:c6:a1:8a:5c:2f:98:e4:74:f5:98:60:c9:30:
b7:0e:fe:c5:92:30:65:b1:eb:9f:45:45:da:e3:06:
1f:75:b8:ce:d9:94:69:0b:7a:1f:3f:76:98:ab:db:
42:f9:e5:0f:10:3b:b5:17:63:d7:4e:e3:59:b5:44:
0c:72:12:48:d1:2c:b7:b9:b0:76:ea:2c:87:79:0d:
25:88:51:78:91:59:87:38:04:dc:a8:24:00:61:25:
6e:9d:28:ff:c3:08:b1:30:76:64:8d:37:a8:1c:43:
7d:29:98:d8:68:f2:21:f1:52:b2:de:04:92:b5:15:
47:46:5b:a8:87:c6:97:f7:df:bd:df:92:46:90:7f:
3e:0d:a0:fc:a6:e3:3b:a5:6d:4e:cc:36:3c:6c:25:
6d:44:91:23:04:eb:f6:63:92:3c:3b:ed:70:e2:fa:
84:4a:0d:4f:6a:25:ef:6b:bb:cb:f5:72:47:98:4c:
59:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7E:DD:1A:60:D6:8B:10:40:6E:3B:B8:37:49:2C:AE:CB:2C:16:65
X509v3 Authority Key Identifier:
keyid:DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:37:1f:66:ba:15:14:d8:a7:26:47:ae:75:79:69:b5:66:53:
bf:61:f0:04:ac:74:77:7b:99:19:74:81:46:19:07:c8:f5:54:
77:c8:f7:a2:97:91:58:21:03:07:62:6c:23:b3:2e:12:f9:cc:
79:ae:a1:63:29:3c:ee:28:e5:6d:d2:db:15:ac:85:67:24:21:
c9:d1:bf:48:01:9f:f0:84:23:b9:12:86:4b:c9:2d:7d:3e:27:
db:6e:c5:2d:fd:88:5c:70:69:5d:6a:2f:cd:93:07:7f:cd:0f:
bd:74:f3:4a:c4:35:08:ea:d7:68:7b:67:2b:95:28:4c:0e:3b:
b5:58:15:14:49:5c:f0:48:06:9a:b9:df:e2:1e:30:39:dc:3b:
29:47:95:f6:24:62:eb:e6:a2:7b:f7:fb:55:25:b7:32:b6:99:
59:6f:6c:3e:16:22:9e:bc:16:c4:d7:91:93:7c:db:09:e0:b1:
32:92:69:97:55:74:bb:e3:16:1b:2e:35:4d:23:e6:76:15:1a:
ac:f9:1a:be:fe:34:04:01:01:b9:82:0d:e6:ea:61:70:5c:c0:
78:67:3b:3c:10:03:dd:63:d0:c7:db:d1:38:91:1d:16:34:29:
82:3b:71:f9:3b:4e:5b:66:c0:c5:cb:78:4c:b8:e4:b6:5a:f3:
a1:e4:76:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:40:23 2026 by rpki-client