Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
File: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft (raw, json)
Hash identifier: 0ENLUmglDnXJe5oSZoRdmmVNua21ENrPn/8mh9aLWxQ=
Subject key identifier: 7E:50:5A:C2:C6:4B:0C:72:4F:5E:10:D9:B7:F2:4B:8A:2E:A3:65:75
Authority key identifier: DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
Certificate issuer: /CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Certificate serial: 01A0D0B69055B0B116190C6F257134DEB739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
Manifest number: 0B65
Signing time: Thu 24 Sep 2026 00:00:20 +0000
Manifest this update: Thu 24 Sep 2026 00:00:20 +0000
Manifest next update: Fri 25 Sep 2026 00:00:20 +0000
Files and hashes: 1: 3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl (hash: 6D4hZkkTbgwPnO+pq4mzfA3u4l6i6ZwlxFa8gJ0OwI0=)
2: d1jP90vciiSKp3aodWDKGnu38Bk.roa (hash: nxrJlRcagS8YYk40MdJDJveIMr4yj0rHLHg2nPrUsoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:90:55:b0:b1:16:19:0c:6f:25:71:34:de:b7:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8a3a43301cd2c8047eb8544f80ab4ffcfe9acf
Validity
Not Before: Sep 24 00:00:20 2026 GMT
Not After : Sep 25 00:00:20 2026 GMT
Subject: CN=7e505ac2c64b0c724f5e10d9b7f24b8a2ea36575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:dc:27:e8:c6:f4:5c:82:c4:40:d4:25:4e:e1:
60:10:1a:45:1c:1c:88:e0:c2:76:95:7e:9e:d7:34:
2f:6b:f1:12:b3:36:62:5b:43:ac:a0:ed:36:db:ab:
1d:be:08:a1:33:e3:11:84:db:d4:2b:69:b6:1a:66:
d0:e0:46:b7:64:98:ec:43:59:aa:e6:4b:bd:6e:3e:
44:30:0c:c7:d3:da:2d:40:4a:6f:d4:b7:46:06:cc:
0a:81:3b:bb:6e:6e:fa:8f:50:ec:da:e7:39:53:97:
85:b0:bb:f9:c8:ed:65:b9:1e:d1:d3:4b:d3:5b:3d:
fa:87:01:2e:7b:cc:a7:b2:f5:ec:75:72:39:70:c3:
cc:28:e1:0c:e8:34:71:7e:66:5d:46:8d:56:fb:7e:
a3:42:be:73:59:4c:27:35:25:a5:51:c6:9c:f9:bf:
11:19:55:de:62:b1:63:10:74:eb:ac:7b:da:a4:05:
a2:36:53:b7:17:64:22:7b:48:00:34:71:c8:ab:6c:
62:10:23:6c:f2:6c:93:d8:12:41:66:b6:a3:36:01:
2b:b2:cf:ae:5f:d5:80:e4:3e:d3:7d:fb:b6:6c:4f:
cf:f8:1e:63:08:71:c1:a0:53:17:81:18:b7:2f:ee:
83:80:9a:1f:83:8f:38:0b:b9:c7:d9:ee:c0:e3:49:
c4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:50:5A:C2:C6:4B:0C:72:4F:5E:10:D9:B7:F2:4B:8A:2E:A3:65:75
X509v3 Authority Key Identifier:
keyid:DC:8A:3A:43:30:1C:D2:C8:04:7E:B8:54:4F:80:AB:4F:FC:FE:9A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Io6QzAc0sgEfrhUT4CrT_z-ms8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/df0ff3-561e-4f77-a7dd-fe844060a46d/1/3Io6QzAc0sgEfrhUT4CrT_z-ms8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:de:60:a8:bc:d7:f6:21:98:a9:77:bd:18:b0:95:44:0f:52:
ae:fb:ef:7a:78:2d:5f:c3:7f:c5:73:dd:ed:5b:9c:3b:ac:ab:
51:45:49:3e:bf:63:5f:1d:a9:ba:32:0f:f0:c1:5c:30:96:c4:
db:33:69:83:4d:f5:ea:c9:81:aa:6a:7d:1f:6f:fd:8a:3f:e2:
c0:7e:7e:5e:4f:51:03:cd:2d:0e:dd:45:31:28:4f:02:be:f1:
51:51:84:d4:ca:4c:76:20:79:29:fe:87:b7:f7:31:7c:1b:c8:
3b:f2:ef:02:12:10:e2:0e:f0:bd:a3:48:03:78:0b:97:a6:1a:
4d:38:19:b0:4f:22:12:79:71:f2:e5:28:32:14:8f:0e:1c:88:
5f:1d:37:31:f4:38:98:59:c2:fc:81:f6:54:44:95:62:d3:db:
cc:c8:4b:a8:40:4b:f2:c6:76:1f:90:5d:c4:6e:61:c7:a8:88:
f6:21:18:69:0f:81:dd:f3:18:a2:f7:bf:cf:12:c9:5a:f2:60:
0a:2a:45:a9:aa:9c:1c:e0:8b:b9:8e:c8:84:24:ee:8f:48:ba:
ed:27:47:38:0f:b2:50:37:b8:84:5b:86:90:ae:f6:d8:2a:7f:
89:90:16:1a:c7:7f:08:4b:28:3c:b6:be:92:1d:06:0b:8b:c3:
7a:24:29:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:22:38 2026 by rpki-client