Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
File: 3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft (raw, json)
Hash identifier: 4zI15YmFhQ4aEwTYxx/rUBFAkQEiOBoJ+vtPGmLnhxw=
Subject key identifier: AC:6B:1E:1C:3B:BB:F7:D4:5B:6F:D5:CE:84:6D:12:16:9C:72:BF:9A
Authority key identifier: DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16
Certificate issuer: /CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16
Certificate serial: 01A129564ECC18C58E990F90966663E7A0AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
Manifest number: 15DD
Signing time: Sun 11 Oct 2026 05:01:24 +0000
Manifest this update: Sun 11 Oct 2026 05:01:24 +0000
Manifest next update: Mon 12 Oct 2026 05:01:24 +0000
Files and hashes: 1: 3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl (hash: u/jT68Axr0S7Nml4P/jwKahcQ1a7zBFks1pSTCFrUTE=)
2: 6TUuFWgBkm98OJlIkhqINWWAoI0.roa (hash: GA9PdoKCJE0Uq5wLiSfj1Mw/gZ339oU3m0s7B3MQNRA=)
3: _qA7-iuYEvTbfVREYl9q7tay4Bk.roa (hash: Z/glgCy5dfzogAACVBlWtKvnqFreHrzxfTJl0PSlZgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:56:4e:cc:18:c5:8e:99:0f:90:96:66:63:e7:a0:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16
Validity
Not Before: Oct 11 05:01:24 2026 GMT
Not After : Oct 12 05:01:24 2026 GMT
Subject: CN=ac6b1e1c3bbbf7d45b6fd5ce846d12169c72bf9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:47:f7:ae:e0:a0:de:39:67:81:70:26:9c:69:
7b:f2:41:8b:2a:63:e1:a5:c0:9e:aa:bb:41:42:f4:
07:f2:58:3c:90:8e:09:79:19:ef:30:bc:4c:4c:2a:
74:8c:cd:a0:ba:6b:cc:53:4e:70:9a:40:ab:fc:d9:
2a:3d:63:fc:83:46:13:c1:4d:cf:f8:fa:71:9e:eb:
d7:af:1a:f2:d2:3e:3c:b5:fe:e6:d0:97:fa:13:92:
c8:85:5d:4c:94:e2:38:d0:40:18:45:18:ad:40:40:
b4:5c:1d:67:52:96:fc:9e:cb:a4:5d:c3:f4:81:5b:
0a:e6:ba:8d:a7:ac:4d:49:72:ed:e9:21:df:8f:4c:
da:5d:2a:a5:66:d3:c4:35:27:aa:ce:6b:ea:70:a9:
cd:b0:8d:22:2b:67:28:51:0a:8c:f8:c4:48:8c:5f:
6e:0a:fc:66:9a:19:a0:dd:43:92:8f:36:8a:a7:f1:
e1:7e:92:92:7c:67:87:ac:39:21:c6:88:4c:f5:98:
cc:4e:1c:7d:b1:ad:dd:cf:c4:58:e7:8c:a6:38:1d:
61:08:69:b3:5f:e2:d2:97:92:29:6a:d5:83:7b:30:
48:0c:7b:81:7d:d0:83:ae:82:d3:da:36:17:56:98:
e4:3a:c0:02:1e:1f:85:d1:99:42:57:c2:35:ee:da:
64:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6B:1E:1C:3B:BB:F7:D4:5B:6F:D5:CE:84:6D:12:16:9C:72:BF:9A
X509v3 Authority Key Identifier:
keyid:DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:75:1c:79:e8:a4:49:78:18:8f:7d:e0:b2:3b:48:52:68:c1:
0e:9b:b0:c2:8e:b5:06:ca:2f:e0:15:eb:3d:76:5b:d8:40:75:
10:19:70:4e:9c:00:e8:6c:dd:d0:94:b8:17:13:22:34:aa:5a:
05:ef:d7:b8:2e:fe:ec:86:21:31:13:4b:55:fd:2a:ea:57:c3:
2e:c7:83:a2:d2:07:c2:ca:55:86:fe:d1:1d:ba:5d:df:79:2f:
6a:c6:52:14:ea:db:26:52:6c:57:5a:a5:9f:95:39:d0:fd:d1:
9a:4a:02:dc:af:23:dd:10:4c:02:06:db:a7:0f:87:5e:fd:1b:
d8:e0:d3:10:56:ca:4f:58:17:38:1c:85:d5:64:6c:8d:9b:a7:
d8:1e:20:09:97:e9:c5:86:46:41:c1:53:57:a8:cb:d5:aa:bd:
e8:77:a6:c9:61:fc:2e:86:fd:35:0e:19:12:6d:65:63:44:08:
7c:7f:fb:ee:d0:5a:11:16:f7:9c:79:4f:8e:98:50:0c:a9:0b:
52:54:01:4e:af:2e:89:bc:83:a1:76:6f:34:63:db:8c:81:39:
16:b3:f0:e8:08:8f:fb:0a:3f:5d:7d:20:cb:ab:1c:b4:ce:94:
47:17:4b:5e:83:a9:9f:09:46:9f:bf:e8:f3:c7:d1:83:c2:9f:
68:7f:71:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:51:55 2026 by rpki-client