Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
File: 3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft (raw, json)
Hash identifier: DR5FX2DGFsWK3o85BO7YaO9zsrqVQny1TCqcbWD0SO4=
Subject key identifier: CC:BA:BD:43:25:30:7C:9A:DB:C7:15:AE:DF:1D:76:75:BC:3A:B5:4F
Authority key identifier: DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89
Certificate issuer: /CN=ded55569177a889d337f03f2e698acabcccbb589
Certificate serial: 01A0D15BCBEC16908AAE6349B0861F808D87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
Manifest number: 16F5
Signing time: Thu 24 Sep 2026 03:00:48 +0000
Manifest this update: Thu 24 Sep 2026 03:00:48 +0000
Manifest next update: Fri 25 Sep 2026 03:00:48 +0000
Files and hashes: 1: 3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl (hash: R47gLuvekfhdda/GiVnlCL0TLsIm9Qw2ZAx92EaiT2E=)
2: PjoIBGbk9FD7bZGLP8eN3ezf2Uo.roa (hash: gwcdk+V9+YDh37eh6agaRz1L3hMZa0x8O24FJTvNrKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:cb:ec:16:90:8a:ae:63:49:b0:86:1f:80:8d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded55569177a889d337f03f2e698acabcccbb589
Validity
Not Before: Sep 24 03:00:48 2026 GMT
Not After : Sep 25 03:00:48 2026 GMT
Subject: CN=ccbabd4325307c9adbc715aedf1d7675bc3ab54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c2:79:e9:26:48:36:66:23:1f:37:5c:2a:0f:
92:30:d1:43:e2:95:d0:2c:66:27:4e:d3:70:d3:13:
e2:33:ef:72:16:bc:46:14:2d:ac:67:71:f0:df:f4:
87:60:6e:44:bb:39:fd:79:ea:db:51:80:67:34:18:
c6:dc:b1:1f:7c:34:d6:b5:2f:f6:56:9f:cf:04:b3:
81:35:8c:e5:7e:c6:ed:07:15:e6:3b:22:b0:ce:ec:
a7:98:36:37:bd:4f:aa:c9:5e:9e:dd:35:64:d8:de:
37:2f:78:72:d7:2f:82:1c:fc:17:01:87:62:92:21:
9b:15:63:49:ab:e4:d6:d3:06:6c:a9:c2:a5:07:f2:
33:01:d1:90:39:1a:32:e7:d2:b9:6d:a5:6f:bf:56:
77:e7:ac:e0:f6:46:ee:26:a8:b7:f7:29:0c:27:35:
f8:48:02:3d:f1:71:de:4e:23:d5:65:49:38:b5:cc:
72:ff:4d:83:6a:88:25:12:7c:cf:78:8e:97:df:1d:
45:f2:20:1b:d4:86:2c:3f:c5:54:98:dd:dd:98:25:
2b:4c:a7:29:a6:fc:1f:23:05:2f:e2:03:89:24:72:
a1:b2:c2:13:79:46:99:7c:58:fd:60:01:c1:ca:74:
05:c9:7d:db:e8:45:a6:a9:ea:bc:9d:36:ab:64:cd:
7b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BA:BD:43:25:30:7C:9A:DB:C7:15:AE:DF:1D:76:75:BC:3A:B5:4F
X509v3 Authority Key Identifier:
keyid:DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:4d:57:95:80:16:b5:ad:84:ab:f1:5f:86:40:8a:aa:eb:da:
a6:49:57:ec:28:5e:ad:52:11:2b:5d:8c:8f:e5:b3:47:01:01:
15:76:39:3a:45:ce:82:8f:22:fb:45:37:6b:75:11:6d:8f:b2:
5b:48:29:42:22:96:5e:40:76:f6:9e:1e:e2:16:99:09:84:34:
1d:6d:b0:27:cd:b1:7f:00:f8:ff:e9:85:de:ee:82:a3:73:b0:
2d:96:0b:67:2a:1f:1e:75:29:8d:f3:6f:3b:24:8e:b4:aa:28:
49:d7:2f:bc:1d:64:b3:3f:2d:9a:06:24:32:5b:39:68:08:00:
3d:44:49:a8:27:90:cd:e0:74:62:68:f5:a3:43:65:ba:2e:fb:
59:dd:77:18:40:ce:2d:53:cf:b1:49:d6:db:0f:97:0c:61:f5:
da:76:38:5b:53:eb:98:aa:01:48:9c:5d:06:85:9f:98:bb:ea:
07:dd:87:56:a7:14:4d:02:dc:a6:0e:6f:60:21:c2:da:01:32:
56:4b:83:76:ac:4f:db:b7:37:4b:90:ce:e0:cc:f5:1c:85:bf:
42:31:0e:ba:10:51:68:00:67:f5:8a:84:fd:69:54:c6:bf:51:
ac:61:59:21:01:45:e9:ad:9c:7b:05:c6:8d:bb:88:a6:5b:b5:
c2:30:fc:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:32:32 2026 by rpki-client