Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/3VpJ4iJ1cKd8w23V8P-vZhb3Fko.mft
File: 3VpJ4iJ1cKd8w23V8P-vZhb3Fko.mft (raw, json)
Hash identifier: MmHHycNn3ugWgs++tXzfYfLBiTRqQyw3s5CZQ/DNwC8=
Subject key identifier: ED:B9:A1:6D:0D:52:2E:E6:58:8E:32:9F:70:37:32:21:51:AE:DF:B3
Authority key identifier: DD:5A:49:E2:22:75:70:A7:7C:C3:6D:D5:F0:FF:AF:66:16:F7:16:4A
Certificate issuer: /CN=dd5a49e2227570a77cc36dd5f0ffaf6616f7164a
Certificate serial: 01A0DD980EBA873D5218DE5E0C8B8892B682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VpJ4iJ1cKd8w23V8P-vZhb3Fko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/3VpJ4iJ1cKd8w23V8P-vZhb3Fko.mft
Manifest number: EC
Signing time: Sat 26 Sep 2026 12:02:04 +0000
Manifest this update: Sat 26 Sep 2026 12:02:04 +0000
Manifest next update: Sun 27 Sep 2026 12:02:04 +0000
Files and hashes: 1: 3VpJ4iJ1cKd8w23V8P-vZhb3Fko.crl (hash: AhYk1zc2ETM1CNLdWpaNTD2vSBsrI6i54fscRxxr75w=)
2: ES-glJ6puZyNN1K9KpsFgz5kbPA.roa (hash: I6nTrLD3olbbdtgUu7ymtqxkGuHsVPiyrUht1lASf50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/3VpJ4iJ1cKd8w23V8P-vZhb3Fko.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/3VpJ4iJ1cKd8w23V8P-vZhb3Fko.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VpJ4iJ1cKd8w23V8P-vZhb3Fko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:98:0e:ba:87:3d:52:18:de:5e:0c:8b:88:92:b6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5a49e2227570a77cc36dd5f0ffaf6616f7164a
Validity
Not Before: Sep 26 12:02:04 2026 GMT
Not After : Sep 27 12:02:04 2026 GMT
Subject: CN=edb9a16d0d522ee6588e329f7037322151aedfb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fd:6f:47:c9:22:93:c4:a7:d1:fb:ee:83:16:
1a:7c:60:ec:9e:0a:13:bb:88:95:3b:00:d6:ad:1e:
d3:3b:c3:f2:5d:52:6d:d6:2a:db:98:ac:7e:a3:7b:
ea:60:94:85:c3:f4:6f:6f:bb:a6:cb:93:90:41:92:
02:45:c0:9f:86:0f:df:86:e2:ef:4f:be:38:6c:cc:
09:c9:2e:98:ad:16:02:34:66:31:db:e1:64:2c:ce:
3e:36:3d:3e:fa:0f:82:0a:cf:8a:b0:d1:76:60:1f:
11:66:62:85:36:11:b3:d4:13:5e:92:b2:be:4c:75:
18:78:04:dd:28:e5:5e:fe:65:d5:41:44:bc:60:81:
54:5e:9a:1c:61:5b:0a:d4:53:37:56:00:4e:32:2f:
fa:2f:e8:b4:ce:75:57:58:22:cf:61:0b:81:8f:fe:
d3:98:a0:42:8a:12:58:ef:8f:ec:81:41:a5:c5:82:
8f:e1:d8:f0:0d:5e:46:b3:80:5c:f4:1d:4b:6c:ec:
1f:10:db:cc:16:27:98:5a:6f:0c:1d:44:1c:3a:43:
81:e5:5f:62:98:e8:db:6d:7c:63:5a:13:48:c0:86:
e6:30:af:11:0c:87:9c:2d:08:e2:01:a6:f9:55:67:
52:47:43:b5:a2:5c:2a:b8:8d:1d:12:2a:dc:f2:eb:
db:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B9:A1:6D:0D:52:2E:E6:58:8E:32:9F:70:37:32:21:51:AE:DF:B3
X509v3 Authority Key Identifier:
keyid:DD:5A:49:E2:22:75:70:A7:7C:C3:6D:D5:F0:FF:AF:66:16:F7:16:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VpJ4iJ1cKd8w23V8P-vZhb3Fko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/3VpJ4iJ1cKd8w23V8P-vZhb3Fko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7d20e-33bc-4b23-a198-2244fd6185d3/1/3VpJ4iJ1cKd8w23V8P-vZhb3Fko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f7:9b:8e:52:1f:8d:0c:33:45:bb:c6:f5:c2:6d:33:f8:d0:
12:b3:0c:c1:5b:45:9f:4d:05:20:3b:91:62:06:03:53:d9:69:
a6:4d:94:b9:85:37:10:ad:b7:35:46:b7:33:20:7f:1c:5f:15:
f1:1c:3b:73:e8:9c:f7:8a:a9:50:2d:c4:51:46:c7:56:2f:da:
d1:e5:90:fe:6e:45:10:ad:99:a0:c2:65:0b:0b:9f:47:b0:33:
fd:ce:5c:00:46:34:c9:45:5e:68:e7:31:4d:1f:db:3c:a0:12:
1a:94:54:60:80:dd:48:6e:66:f3:15:7e:2a:89:77:ac:9f:3e:
50:72:b1:3d:42:c9:a7:b3:33:47:04:cc:06:10:21:53:93:ef:
97:67:ac:8c:c2:41:b4:22:be:6b:2f:23:ed:27:b1:89:d5:f4:
11:2d:95:aa:f2:d5:ce:de:92:88:dd:65:10:ed:9d:9f:7e:82:
e8:be:c8:32:00:17:91:e3:90:cd:e1:74:b5:08:a1:b6:03:cb:
61:2b:55:62:a8:eb:90:7c:67:1e:6a:ce:dc:fa:26:e4:0c:86:
22:4c:61:91:b5:3c:ec:68:ce:5e:43:0c:3d:62:03:87:d8:7d:
fe:93:59:84:17:8e:dd:18:17:b6:d8:f8:22:b3:ac:fa:04:51:
c7:2d:8e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:53:37 2026 by rpki-client