Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/3oBYgxYFqoam1rbjw7KwFtr73KY.mft
File: 3oBYgxYFqoam1rbjw7KwFtr73KY.mft (raw, json)
Hash identifier: 5wAmUcDPCFsTi8fMK8BdF5YNEBRCFYhZEctqi6hC6Bs=
Subject key identifier: 2A:C7:FC:38:5C:D7:DB:7B:9B:F9:1E:84:C6:4D:4D:B5:87:F4:D5:50
Authority key identifier: DE:80:58:83:16:05:AA:86:A6:D6:B6:E3:C3:B2:B0:16:DA:FB:DC:A6
Certificate issuer: /CN=de8058831605aa86a6d6b6e3c3b2b016dafbdca6
Certificate serial: 01A0CC3620D5B731314FFA3288A2563870AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3oBYgxYFqoam1rbjw7KwFtr73KY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/3oBYgxYFqoam1rbjw7KwFtr73KY.mft
Manifest number: E3
Signing time: Wed 23 Sep 2026 03:01:34 +0000
Manifest this update: Wed 23 Sep 2026 03:01:34 +0000
Manifest next update: Thu 24 Sep 2026 03:01:34 +0000
Files and hashes: 1: 3oBYgxYFqoam1rbjw7KwFtr73KY.crl (hash: PX8rUUq+SSD7gteAesto5fTSNtZSABCa3ZVJrAbQPks=)
2: CMby5TZcz8wJssXc79aUUhtBUYI.roa (hash: TvV4JGUUPT6lyV1Vum9UKRCqV75Oi8Ug7Yz/kSOewW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/3oBYgxYFqoam1rbjw7KwFtr73KY.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/3oBYgxYFqoam1rbjw7KwFtr73KY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3oBYgxYFqoam1rbjw7KwFtr73KY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 03:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:36:20:d5:b7:31:31:4f:fa:32:88:a2:56:38:70:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8058831605aa86a6d6b6e3c3b2b016dafbdca6
Validity
Not Before: Sep 23 03:01:34 2026 GMT
Not After : Sep 24 03:01:34 2026 GMT
Subject: CN=2ac7fc385cd7db7b9bf91e84c64d4db587f4d550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:a6:e6:99:e4:87:59:2e:85:72:3c:4c:56:30:
1c:4f:86:6a:dc:d7:7d:ab:ea:ed:8e:da:0c:3e:28:
20:49:fb:e4:59:69:30:8b:da:35:67:cb:0c:d4:63:
4b:82:33:a7:c4:71:b8:07:26:78:5b:5d:95:5d:79:
f5:4e:19:e2:dc:ac:d0:fe:3f:80:ee:a5:7b:65:39:
e8:ae:88:3f:6d:96:b9:c6:83:ae:3c:0d:b7:6f:53:
5f:f5:b4:da:17:c6:54:c4:73:16:8f:ea:9b:c9:ce:
b7:35:07:fd:a1:a4:b9:55:f4:1b:70:6f:f8:18:78:
7a:e0:b3:c8:dd:ed:03:52:59:5a:e0:21:62:58:a7:
e9:13:6b:85:8f:1d:34:10:3c:0a:94:37:99:78:64:
4f:01:37:c8:df:5d:3a:04:ec:f4:db:7c:e5:d8:bb:
e7:af:74:69:a0:df:44:03:53:e3:4e:7b:54:10:94:
5a:6d:6c:9d:dd:9a:68:9e:4b:86:ef:1e:e0:98:fd:
26:6e:07:4e:fb:ea:c4:3d:90:53:7f:2f:e9:e3:40:
a0:81:ab:0a:20:82:65:65:0a:a2:f5:80:79:3d:2e:
db:12:47:3f:32:69:83:13:4d:73:8e:b5:b3:8e:b4:
cb:1b:9d:b8:6a:94:c1:f6:5a:67:11:3f:98:67:9c:
0e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C7:FC:38:5C:D7:DB:7B:9B:F9:1E:84:C6:4D:4D:B5:87:F4:D5:50
X509v3 Authority Key Identifier:
keyid:DE:80:58:83:16:05:AA:86:A6:D6:B6:E3:C3:B2:B0:16:DA:FB:DC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3oBYgxYFqoam1rbjw7KwFtr73KY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/3oBYgxYFqoam1rbjw7KwFtr73KY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a7be5-3cf2-40c5-ba67-854182f09ef5/1/3oBYgxYFqoam1rbjw7KwFtr73KY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:2a:65:1b:1f:ec:d0:5c:4f:06:b2:5a:ea:78:ed:be:22:d7:
50:56:4f:20:27:9a:86:79:62:bd:a4:08:f5:dc:ab:32:20:35:
4b:20:48:c4:b7:b5:f8:44:2d:58:7c:28:79:43:ed:84:d5:9b:
20:42:6d:b6:6b:88:08:62:a3:a5:93:90:7b:48:d2:49:27:a5:
75:27:55:3c:d4:fe:6e:87:91:5f:8c:5f:86:65:85:92:7a:bc:
a6:8f:42:f8:c9:89:73:91:68:14:b4:3d:16:be:14:75:c6:d3:
2e:84:fc:9e:a5:94:6a:65:55:c1:17:43:7c:bb:6b:c2:d7:bb:
88:03:72:32:75:79:d9:34:b7:2e:13:20:1e:a7:36:c7:1d:7e:
45:e8:76:83:6c:f3:36:06:28:57:ab:c3:d7:08:46:52:32:8f:
29:c5:5d:b5:3b:35:8f:72:14:f9:97:57:b5:fc:26:e7:ff:bc:
f0:62:ae:6b:ac:98:ff:ec:25:46:80:a7:8d:30:e0:5e:54:6a:
a7:1b:3d:dd:36:31:d3:94:56:1f:28:d7:f7:df:df:80:5d:f2:
a5:2b:c8:44:19:76:ed:85:e3:2d:3f:cb:3b:06:59:1d:84:4d:
e2:5d:25:29:5f:1b:54:02:17:c1:a8:04:74:80:ef:90:80:4d:
6e:8a:05:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:47:34 2026 by rpki-client