Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/811110-7fe7-4d34-aec0-f385df6d944a/1/3g1q1z4YioWTcrYTo6JwS5wzD-0.mft
File: 3g1q1z4YioWTcrYTo6JwS5wzD-0.mft (raw, json)
Hash identifier: RzvfKe9OTY4mGtwXQOznOR9uGE2bKSxOmHSTowkHP0g=
Subject key identifier: 38:0B:60:C5:88:5E:90:59:93:DE:9B:50:41:B9:41:E5:A3:9D:61:8E
Authority key identifier: DE:0D:6A:D7:3E:18:8A:85:93:72:B6:13:A3:A2:70:4B:9C:33:0F:ED
Certificate issuer: /CN=de0d6ad73e188a859372b613a3a2704b9c330fed
Certificate serial: 01A0E73EFBFB722E7D777BA3DD9CD4A5C4BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g1q1z4YioWTcrYTo6JwS5wzD-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/811110-7fe7-4d34-aec0-f385df6d944a/1/3g1q1z4YioWTcrYTo6JwS5wzD-0.mft
Manifest number: 0377
Signing time: Mon 28 Sep 2026 09:00:59 +0000
Manifest this update: Mon 28 Sep 2026 09:00:59 +0000
Manifest next update: Tue 29 Sep 2026 09:00:59 +0000
Files and hashes: 1: 3g1q1z4YioWTcrYTo6JwS5wzD-0.crl (hash: pL8kPNouGzigdkjKTQz0P758S6jeAipnhJwkEhLkjmQ=)
2: xlffALi4uBOFmreXz8haweCZNck.roa (hash: 3wXdfGigS71aUdPX9RI8m2mtTK/gKdzEh9NGf1XtL2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/811110-7fe7-4d34-aec0-f385df6d944a/1/3g1q1z4YioWTcrYTo6JwS5wzD-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/811110-7fe7-4d34-aec0-f385df6d944a/1/3g1q1z4YioWTcrYTo6JwS5wzD-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3g1q1z4YioWTcrYTo6JwS5wzD-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:3e:fb:fb:72:2e:7d:77:7b:a3:dd:9c:d4:a5:c4:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0d6ad73e188a859372b613a3a2704b9c330fed
Validity
Not Before: Sep 28 09:00:59 2026 GMT
Not After : Sep 29 09:00:59 2026 GMT
Subject: CN=380b60c5885e905993de9b5041b941e5a39d618e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:29:ae:f5:72:bc:b9:2f:66:31:e6:fe:e7:53:
b7:bb:07:25:9b:60:2c:bd:37:b6:91:73:db:c8:90:
f2:51:c5:64:07:9a:30:d9:68:0a:86:dc:c6:72:09:
11:9f:c8:97:63:09:30:98:49:49:d7:5f:d2:37:23:
8a:86:4b:8e:69:7d:1f:69:42:a2:a1:c1:33:c8:d9:
ea:cd:52:e8:5b:7a:2e:5d:62:01:f3:0d:aa:36:74:
19:48:7c:62:14:58:5a:52:b3:97:87:e8:13:db:21:
61:ce:94:ef:53:9c:2d:ad:22:d6:2a:0b:c1:d7:9a:
2c:f1:8e:3d:1b:eb:c9:5e:f6:69:fe:93:87:68:9e:
09:c0:e5:6f:a0:4a:10:b0:0b:31:08:74:d4:82:c0:
4f:fb:50:d4:01:fa:81:8d:4f:8b:9d:b3:d4:85:e0:
e5:61:12:81:87:81:05:12:36:f6:33:34:23:31:99:
ee:38:2c:10:58:76:3c:e3:39:3a:0d:1d:4b:4a:1d:
b6:04:91:55:64:72:b3:84:8a:d5:2b:3c:84:66:ac:
a7:cd:25:61:2c:d7:85:b6:b2:f5:8e:8c:71:f8:ce:
7f:ff:5d:f2:9f:95:9e:aa:9a:a3:33:c3:c8:99:2d:
4d:aa:93:7a:1c:41:5d:6c:af:f0:96:d6:dc:a8:64:
b9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:0B:60:C5:88:5E:90:59:93:DE:9B:50:41:B9:41:E5:A3:9D:61:8E
X509v3 Authority Key Identifier:
keyid:DE:0D:6A:D7:3E:18:8A:85:93:72:B6:13:A3:A2:70:4B:9C:33:0F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g1q1z4YioWTcrYTo6JwS5wzD-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/811110-7fe7-4d34-aec0-f385df6d944a/1/3g1q1z4YioWTcrYTo6JwS5wzD-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/811110-7fe7-4d34-aec0-f385df6d944a/1/3g1q1z4YioWTcrYTo6JwS5wzD-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b5:1d:0e:ba:89:ee:fd:d8:74:d3:b1:63:a8:46:52:a5:af:
6c:46:f8:c2:d3:13:4c:a4:99:87:7f:60:1e:10:fc:63:56:18:
0e:9a:43:30:64:37:d9:45:10:33:c2:08:c3:49:0c:cc:31:a0:
96:ea:37:8a:42:65:91:ad:dd:b4:d2:27:07:3f:d8:b3:6d:4b:
7e:ed:12:97:dc:29:5e:3b:58:75:fd:75:35:b3:bd:c4:94:55:
7b:45:a8:f3:07:f8:08:c0:aa:64:04:78:e3:54:6b:65:b1:b4:
85:c1:43:b7:ad:e8:b7:a9:b9:4d:83:19:f8:23:c2:9a:76:35:
76:70:b3:1c:2b:81:4b:17:e0:72:e7:89:53:6c:bf:83:8d:1d:
53:a8:8c:21:24:87:b0:92:51:e8:02:3f:8d:d3:ce:c5:42:b0:
8b:de:76:a5:91:aa:57:f8:f5:e1:70:33:ec:c5:54:cb:5f:53:
bd:be:a1:83:79:2c:20:6b:ad:d7:f5:44:b9:c8:b0:af:85:94:
4f:3a:d2:ab:ad:38:4c:10:7d:60:1c:ec:74:a2:6d:2a:00:3a:
0e:e2:cf:74:a1:b9:ef:3e:7f:d6:01:af:26:cc:d5:3f:08:e8:
35:c4:d9:82:f2:bf:6f:ec:5f:6d:5f:f4:98:b2:0e:09:fb:cd:
a5:0b:0a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:18:15 2026 by rpki-client