Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.mft
File: 3GbYudONW7Gc-gxGRLRSk9Hotvo.mft (raw, json)
Hash identifier: FIf5jTFHIMhaa8ZEZfCdM2zZMg5CqYmpdG2EKFLjWyE=
Subject key identifier: B0:1B:B0:D9:24:CB:0B:44:72:E0:96:56:FB:13:8A:7F:28:AA:08:5A
Authority key identifier: DC:66:D8:B9:D3:8D:5B:B1:9C:FA:0C:46:44:B4:52:93:D1:E8:B6:FA
Certificate issuer: /CN=dc66d8b9d38d5bb19cfa0c4644b45293d1e8b6fa
Certificate serial: 01A144CDB241E52ED14310ED77AFA492F0E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GbYudONW7Gc-gxGRLRSk9Hotvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.mft
Manifest number: 1A39
Signing time: Fri 16 Oct 2026 13:01:33 +0000
Manifest this update: Fri 16 Oct 2026 13:01:33 +0000
Manifest next update: Sat 17 Oct 2026 13:01:33 +0000
Files and hashes: 1: 3GbYudONW7Gc-gxGRLRSk9Hotvo.crl (hash: dxzPRJhqHMLE7aYT2B1Y99Mopr4oec3MYaPZ7ChVmpU=)
2: FFrrJg1f7sBn9CMNkWOHWkncPKA.roa (hash: RRbiIEi7LB7ItO/8kZqYNCorz0xLwEEZeK7jHRHtAV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GbYudONW7Gc-gxGRLRSk9Hotvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:cd:b2:41:e5:2e:d1:43:10:ed:77:af:a4:92:f0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc66d8b9d38d5bb19cfa0c4644b45293d1e8b6fa
Validity
Not Before: Oct 16 13:01:33 2026 GMT
Not After : Oct 17 13:01:33 2026 GMT
Subject: CN=b01bb0d924cb0b4472e09656fb138a7f28aa085a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b6:b3:1c:a3:6f:15:01:ac:10:83:ef:2c:3f:
8b:ec:77:fb:35:48:47:dd:ef:25:61:02:e2:28:25:
0d:73:79:85:a5:a6:f7:8f:eb:9b:b1:56:2b:07:82:
e0:3f:fe:88:fa:1b:84:40:1e:4e:0e:95:88:e5:43:
bb:55:be:f3:8b:44:75:f1:b2:ec:fb:64:4d:bb:d6:
22:6a:f9:2b:0c:2b:28:51:a6:c3:44:f7:9f:ea:fd:
ef:e1:82:f7:74:ab:ad:bb:2b:e7:2f:f6:04:88:8d:
be:a0:0a:25:5c:94:a7:05:8a:78:fa:72:e1:4c:77:
20:4d:a3:f5:67:53:e3:1c:4e:3a:5c:e3:c3:8b:9c:
b4:24:c7:03:b5:53:ad:33:f6:a5:2e:7e:91:f0:09:
a7:85:bb:7f:40:a7:a1:29:d6:f7:d5:6b:e1:1c:d6:
5a:6f:1d:7d:ef:03:60:53:e4:f4:0c:72:7c:cb:1b:
0e:19:88:c7:db:a0:f5:a0:76:28:d5:07:24:8b:1c:
bf:02:35:de:53:68:a7:39:a8:7d:63:e1:d4:bb:de:
0d:4c:85:f2:e1:8d:06:0a:8f:eb:6d:51:c2:07:f9:
75:6c:bb:86:cc:b2:92:68:8c:45:db:03:13:2e:a9:
80:cd:71:fa:fb:7a:3c:64:2f:4a:4b:01:08:88:01:
3d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1B:B0:D9:24:CB:0B:44:72:E0:96:56:FB:13:8A:7F:28:AA:08:5A
X509v3 Authority Key Identifier:
keyid:DC:66:D8:B9:D3:8D:5B:B1:9C:FA:0C:46:44:B4:52:93:D1:E8:B6:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GbYudONW7Gc-gxGRLRSk9Hotvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/14f684-0453-4625-966e-4771d1a4ddf0/1/3GbYudONW7Gc-gxGRLRSk9Hotvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:8f:af:11:6c:39:11:ab:5d:10:14:d7:a4:a7:16:61:9b:bc:
b6:92:6e:28:ac:73:d0:49:db:ab:77:45:70:c3:bd:57:e8:93:
ce:34:7c:e5:d8:98:f0:79:14:a2:88:04:af:7c:84:72:fd:8e:
e9:04:ef:a6:fd:44:78:6a:3c:c3:30:99:ac:11:42:45:50:c3:
6c:57:46:5b:3a:54:d3:73:81:b0:32:e0:d8:f1:03:ae:48:70:
bc:f3:24:9c:48:d1:fc:9e:df:10:0a:53:51:a7:dd:a3:1b:26:
fd:5c:bf:7c:7e:18:3f:be:70:1f:57:02:c5:04:d4:0e:9b:01:
82:30:68:29:85:a7:25:75:3e:7d:71:e6:38:4f:41:36:18:d9:
9a:99:31:fb:45:fd:2d:bd:90:f5:60:8a:40:1d:9c:4c:22:bf:
ea:69:10:74:a4:12:b8:34:b5:6e:00:78:5e:04:28:2c:d5:0a:
3c:39:9a:61:77:9e:6b:25:47:61:be:b0:fc:79:f4:30:0d:f4:
d8:55:9b:79:14:a3:f6:49:8b:37:f7:31:e2:14:6b:98:ea:15:
21:d3:ae:46:87:f2:91:2d:6a:26:54:e9:46:0b:1e:36:f5:12:
40:08:33:8c:5a:39:93:d4:d6:3f:34:3a:ab:36:56:1e:16:41:
3d:e8:8d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 23:31:00 2026 by rpki-client