
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
File: 3thYKwJDhjxXLOJXhsyzb_eVsi4.mft (raw, json)
Hash identifier: 856enaH/F783gyEwyiNg1B+sU1wQrCMW0EYUyut/kYA=
Subject key identifier: 18:B9:F8:7B:AA:4E:96:1F:F5:36:3A:D9:97:39:7B:03:41:41:B4:6C
Authority key identifier: DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
Certificate issuer: /CN=ded8582b0243863c572ce25786ccb36ff795b22e
Certificate serial: 01A0C82174BCA90BA7E925EF6B5B8FBCF9C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
Manifest number: 119E
Signing time: Tue 22 Sep 2026 08:00:30 +0000
Manifest this update: Tue 22 Sep 2026 08:00:30 +0000
Manifest next update: Wed 23 Sep 2026 08:00:30 +0000
Files and hashes: 1: 3thYKwJDhjxXLOJXhsyzb_eVsi4.crl (hash: M7zD8bRD+mX85ci4AwGWWfC2hXdFgnWEwG1C39BAYwQ=)
2: KSH2fRv0teMM2HR_6KPEmIw6HD0.roa (hash: 8pAxut1VxGbv9FEqSSh94jLC+LFareEYNCETeb8cRjQ=)
3: KVPekIBwtTvoWS8IiLuKU8fAiUI.roa (hash: 9+g9Bq8fgBmveWIVh0SbGqbsAm+bPN0oN6NyLxgE/rA=)
4: mU4-NFKo2wAUwnqL-AxsnDYr11w.roa (hash: 4tZtiaBHFlxvkRx3oe+by1E5v3CH2eyZIsgfyBPHBbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:21:74:bc:a9:0b:a7:e9:25:ef:6b:5b:8f:bc:f9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded8582b0243863c572ce25786ccb36ff795b22e
Validity
Not Before: Sep 22 08:00:30 2026 GMT
Not After : Sep 23 08:00:30 2026 GMT
Subject: CN=18b9f87baa4e961ff5363ad997397b034141b46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:48:cf:48:0a:94:1d:4b:84:d8:30:70:7b:36:
23:19:ca:d0:cb:99:8a:81:7c:7a:cb:70:a0:ca:ba:
c3:45:8f:6a:98:94:82:29:fe:3e:c0:7d:ab:32:2a:
8f:b4:55:4c:2c:64:7f:93:d0:1c:fe:63:b1:eb:cc:
da:9f:6d:49:88:6e:1a:04:51:a6:af:74:1e:61:24:
75:dd:9f:0a:59:55:1f:fd:d2:1b:94:9e:d4:d8:a3:
d3:73:10:d6:47:e7:33:27:16:27:a7:82:86:f5:4f:
18:33:6b:61:90:28:66:f7:69:d3:ee:ab:49:7b:cc:
93:83:36:1c:52:f5:f3:39:b2:e2:f5:79:86:95:05:
0b:76:36:d9:9d:70:e8:0e:b1:d0:0c:a0:ae:db:3e:
fd:30:c9:ba:08:ce:b7:78:b8:c7:16:f7:c7:f4:4b:
c4:e2:03:d0:02:61:e4:63:54:72:33:d7:3b:ac:eb:
e9:d3:a0:40:47:df:82:61:e9:5b:4d:22:af:ba:fd:
98:d5:22:ba:96:75:8e:73:b1:78:2d:9d:c2:8d:43:
b4:2c:a3:e4:eb:e3:4f:47:0e:f4:01:79:ef:88:d1:
4b:d0:b2:cd:ba:f8:6e:eb:c6:dc:6b:43:fc:72:11:
f9:61:a1:ac:a4:e3:f2:58:c8:1c:64:67:bb:92:4c:
87:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B9:F8:7B:AA:4E:96:1F:F5:36:3A:D9:97:39:7B:03:41:41:B4:6C
X509v3 Authority Key Identifier:
keyid:DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ec:a6:dd:a8:68:6f:2d:66:de:95:0d:ae:28:27:32:be:1d:
8d:ad:08:54:3d:60:dc:20:49:a8:85:4b:66:66:96:3b:35:23:
67:07:c9:42:a1:d5:13:94:11:25:74:5b:4c:38:1e:5f:cb:af:
05:5d:b6:11:fc:bf:ee:6b:89:d1:8e:6b:c1:9d:30:70:a8:9d:
71:28:f5:d2:60:9c:66:a0:f5:b7:d5:21:08:37:0f:4b:ff:10:
54:ce:ed:14:9a:e0:18:b1:60:b4:81:70:18:66:e5:9f:87:8c:
23:4e:2c:40:62:2d:fe:27:3f:68:59:a7:f9:5b:52:ac:10:55:
14:59:e2:92:58:74:ab:b2:c4:e5:5b:f4:31:5b:6d:72:7b:27:
d5:b4:e5:8d:e0:0f:de:ed:d6:11:2d:67:a1:2b:f5:28:34:84:
51:1e:71:d0:3c:fa:30:73:de:67:06:92:e1:89:78:05:a0:98:
6f:7f:91:06:0b:df:79:87:19:bd:b0:b6:36:4c:5c:ce:2e:76:
d4:e0:48:42:99:01:2a:6d:88:f5:36:53:52:b7:5c:91:af:ca:
b4:69:5d:4c:07:33:dc:ab:13:c0:75:97:d9:ce:ca:ff:d4:f8:
dd:c7:37:70:de:17:0b:d4:6b:d4:9f:05:79:aa:ab:d9:1a:76:
c7:35:0b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:44:59 2026 by rpki-client