Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
File: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft (raw, json)
Hash identifier: yX6xBL3vK/hGpFDosHMzdLeA0Sq+X8Hmz4OoR4q3JXE=
Subject key identifier: 12:EB:97:FD:1C:BD:7D:D2:D6:8A:12:6D:F8:C8:BB:EE:C8:16:A7:75
Authority key identifier: DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
Certificate issuer: /CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Certificate serial: 01A0CB5989D614E3DD58B015CB6F76190C25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
Manifest number: 19AA
Signing time: Tue 22 Sep 2026 23:00:37 +0000
Manifest this update: Tue 22 Sep 2026 23:00:37 +0000
Manifest next update: Wed 23 Sep 2026 23:00:37 +0000
Files and hashes: 1: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl (hash: oduTqITd4xEcBZ8ywNlDB4v41CzP47D/3qekxyax1KA=)
2: 6xKBRhcPGOW0-ef_87nk8nPvflA.roa (hash: ljMD+xiZ4YQ7UeRE1RQr2u8g+4zja/CKtgOQ244SoZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:89:d6:14:e3:dd:58:b0:15:cb:6f:76:19:0c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Validity
Not Before: Sep 22 23:00:37 2026 GMT
Not After : Sep 23 23:00:37 2026 GMT
Subject: CN=12eb97fd1cbd7dd2d68a126df8c8bbeec816a775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:da:7d:8f:d7:ec:c5:14:69:bf:d8:6c:9c:01:
0a:a8:7c:7a:dc:98:73:4b:bb:ac:3a:bc:da:51:c1:
82:90:22:59:b8:c3:fb:db:a4:55:a9:da:8b:c3:29:
51:3c:ee:8b:d2:37:46:ec:3d:22:b9:c9:56:1c:58:
7a:09:6d:bb:75:08:f0:81:2b:c0:fc:75:da:03:ce:
c3:7d:37:e9:a6:a1:53:d8:36:ac:28:06:e4:6a:f6:
76:1d:e8:a4:a9:79:02:1f:17:7b:d7:48:62:0d:a9:
02:b8:f2:9c:7e:97:9f:82:0f:84:17:f7:b1:fa:0d:
ac:7a:62:36:f9:e7:4a:b4:68:9a:54:26:75:31:3f:
a2:68:ca:27:db:de:a7:0f:09:aa:a6:4d:1b:c3:b2:
c5:73:ae:97:5c:7c:72:45:f3:6e:3e:dd:cf:a7:b4:
10:82:50:55:69:e0:96:8b:2a:1f:00:6f:89:de:a4:
96:12:04:a0:6a:67:35:45:11:98:5d:78:6e:36:ab:
98:15:25:d0:f8:26:e9:54:f2:0e:9f:82:6d:92:f2:
15:b4:1c:f5:33:4e:b4:10:9a:8e:59:b9:47:d9:9e:
1c:34:6e:91:8f:b3:ee:f9:7c:ab:28:c8:eb:ac:7a:
17:da:f4:d6:3d:4a:5c:92:f0:90:a1:ed:42:be:da:
d3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EB:97:FD:1C:BD:7D:D2:D6:8A:12:6D:F8:C8:BB:EE:C8:16:A7:75
X509v3 Authority Key Identifier:
keyid:DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:5b:9b:b7:3a:05:0f:4a:72:0a:e7:01:23:58:50:5c:6c:34:
14:e8:d0:b4:26:99:51:38:39:4b:99:0d:c9:4c:8b:51:db:1e:
0c:80:ab:54:cc:85:9f:a3:76:9e:7c:d2:9f:3a:36:92:94:fe:
2a:20:71:0f:a2:ee:7e:ea:e6:5f:77:a7:08:00:b0:85:89:26:
0c:1d:b1:7d:33:26:62:a6:bb:a8:7c:3e:78:0f:5c:73:2e:b7:
c6:ea:43:2a:4d:e4:2a:69:c1:62:1e:b0:b4:41:0b:1e:02:75:
24:20:45:bc:cb:27:ae:b9:20:b9:dd:1a:ea:d8:fd:67:b3:fa:
20:f8:14:7b:52:62:ff:ba:5d:9d:b6:ac:a7:82:9b:fe:09:cd:
55:a8:1d:bb:5a:3c:10:1d:56:3f:6b:68:d3:17:f1:36:aa:35:
99:29:16:63:ee:a1:f4:e5:10:7d:cb:dc:36:d0:cc:06:bc:28:
5a:c4:11:fa:b2:f1:8d:75:c5:fa:7d:2b:9c:7f:ea:94:7c:c2:
2d:58:8b:35:fc:ea:7c:7a:e9:cd:c5:f4:52:73:75:a3:38:5e:
ad:cf:23:ab:e1:d9:7e:fb:65:fd:f3:16:d9:a7:64:f3:e1:bc:
79:c7:36:1d:a4:6a:d3:c3:77:e8:26:7b:e4:cc:9f:00:fc:3c:
c7:a1:fc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:45:24 2026 by rpki-client