Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/_3VDG3ytn66j5BlWlh4IR1X4LTM.mft
File: _3VDG3ytn66j5BlWlh4IR1X4LTM.mft (raw, json)
Hash identifier: DgZLehW4upbzFdG5Ilx0GnvrW/tQJWb2EDyaPXQVeeA=
Subject key identifier: 0C:5C:D5:B5:3D:90:EA:F2:75:FD:D6:FC:D3:16:E8:97:69:2B:09:47
Authority key identifier: FF:75:43:1B:7C:AD:9F:AE:A3:E4:19:56:96:1E:08:47:55:F8:2D:33
Certificate issuer: /CN=ff75431b7cad9faea3e41956961e084755f82d33
Certificate serial: 01A0DF868EC99C1C2A1383EE0F75A917596B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3VDG3ytn66j5BlWlh4IR1X4LTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/_3VDG3ytn66j5BlWlh4IR1X4LTM.mft
Manifest number: ED
Signing time: Sat 26 Sep 2026 21:02:12 +0000
Manifest this update: Sat 26 Sep 2026 21:02:12 +0000
Manifest next update: Sun 27 Sep 2026 21:02:12 +0000
Files and hashes: 1: TjAvlv1RE5zaPC2dyAwi4crfm6o.roa (hash: j19p19mIszd20BEiCpsiRkK3ohgiQ0R61lURvBqp/zQ=)
2: _3VDG3ytn66j5BlWlh4IR1X4LTM.crl (hash: 3Jga/wzfRWYIgs0KbYyA8CbYatRHxgo8RFNnMsSFsKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/_3VDG3ytn66j5BlWlh4IR1X4LTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/_3VDG3ytn66j5BlWlh4IR1X4LTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3VDG3ytn66j5BlWlh4IR1X4LTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:86:8e:c9:9c:1c:2a:13:83:ee:0f:75:a9:17:59:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff75431b7cad9faea3e41956961e084755f82d33
Validity
Not Before: Sep 26 21:02:12 2026 GMT
Not After : Sep 27 21:02:12 2026 GMT
Subject: CN=0c5cd5b53d90eaf275fdd6fcd316e897692b0947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f5:39:31:db:9d:44:bc:d4:7a:09:6a:28:68:
99:7d:7d:13:76:c5:2d:c3:0f:23:6e:59:fc:99:8a:
4e:21:80:7f:f2:86:38:4e:71:bf:c0:19:92:22:7e:
64:60:f2:cf:f4:e5:a7:6f:bf:67:4a:74:38:a7:4a:
97:7d:70:05:a6:84:3a:fd:fb:e7:96:a0:81:97:83:
57:6a:e2:7b:71:85:ff:0e:68:f6:c3:97:5b:1f:46:
ef:3a:c8:74:d0:cd:74:c8:f9:ce:69:f5:bd:e3:d6:
26:01:fe:ef:cc:bf:e4:40:c0:57:dc:d2:8a:5e:64:
44:9b:6e:3b:10:4b:97:7e:33:ae:b8:30:f8:79:35:
2e:71:d1:d3:da:cb:39:59:31:fc:46:c8:d5:71:c5:
15:e0:18:04:74:c3:16:fa:33:50:43:5d:48:d5:99:
2e:f4:68:60:7c:bf:59:45:c5:19:de:0f:6c:25:da:
50:f2:74:37:b6:56:80:89:9b:79:b9:e1:7b:80:21:
01:fe:0d:e7:63:a5:d5:15:93:16:d9:36:4b:e7:c9:
f1:65:37:82:db:c0:08:59:ba:3f:a7:48:f0:fe:0e:
89:ef:53:86:60:c2:ff:12:a4:c9:45:ac:de:5e:56:
6b:97:1e:a8:40:6e:b7:e8:d7:e4:b1:bc:3c:d9:af:
45:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5C:D5:B5:3D:90:EA:F2:75:FD:D6:FC:D3:16:E8:97:69:2B:09:47
X509v3 Authority Key Identifier:
keyid:FF:75:43:1B:7C:AD:9F:AE:A3:E4:19:56:96:1E:08:47:55:F8:2D:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3VDG3ytn66j5BlWlh4IR1X4LTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/_3VDG3ytn66j5BlWlh4IR1X4LTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/_3VDG3ytn66j5BlWlh4IR1X4LTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b5:74:93:39:a1:2b:23:a6:a2:6c:aa:a7:a1:32:be:2a:bc:
f9:e3:6d:a8:6c:c3:09:bc:16:6a:d0:0d:a9:fc:dd:e6:41:17:
c2:a6:d6:e0:1b:67:74:6b:18:96:25:fc:5c:32:c0:1b:6a:24:
ed:45:4b:ac:57:54:a9:4e:b1:e2:b9:81:c0:1a:32:de:be:32:
bf:35:09:bd:04:ac:fe:c4:bd:68:c0:fc:1d:73:55:81:97:a2:
d0:db:70:d1:17:15:eb:a4:2a:66:3b:6d:cf:b5:5f:29:8f:6f:
58:b7:30:06:26:94:e1:3b:e2:a2:5a:25:6e:3a:15:52:21:42:
40:13:92:3c:3f:47:14:c7:b7:47:19:60:f2:0b:4f:fa:0f:4d:
14:cc:97:e7:55:30:e3:b9:bc:45:f8:c4:74:fe:b5:fa:6e:4d:
b8:ef:11:67:ab:ca:58:93:fc:d6:af:c1:80:84:df:a9:74:f8:
75:cb:ad:ae:7e:07:3a:46:74:e6:9b:ed:ac:e9:97:80:5f:8f:
fe:92:ff:58:fa:cd:b1:f3:73:45:6d:c1:fa:64:d9:2e:bc:9b:
90:1e:59:b8:a5:62:5e:4a:3a:5f:b9:98:ee:70:21:90:8b:ff:
79:48:22:1f:64:e2:78:47:06:83:7f:b6:3d:78:c6:81:69:83:
07:76:11:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:53:40 2026 by rpki-client