Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
File: 3ucsj67LcFLIQSAbJfagGOR3scI.mft (raw, json)
Hash identifier: LdTusiP7uZrKdYOdDGArppgkuCEO4buWV9F9QM0gWqQ=
Subject key identifier: E1:3A:86:62:0E:7B:3D:F2:30:C1:5C:B5:54:F3:DF:9B:E0:14:C5:02
Authority key identifier: DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
Certificate issuer: /CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Certificate serial: 01A0CB22C8101E4685AEF4DCF09F6B883F83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
Manifest number: 10F7
Signing time: Tue 22 Sep 2026 22:00:49 +0000
Manifest this update: Tue 22 Sep 2026 22:00:49 +0000
Manifest next update: Wed 23 Sep 2026 22:00:49 +0000
Files and hashes: 1: 3ucsj67LcFLIQSAbJfagGOR3scI.crl (hash: Q7Y2RQQH4IxCr037aVpHyfrawt1i9q+CWnY/8Fp6Q9k=)
2: ApGR2Q6UiBOTln3YEs6ePXPQ8lQ.roa (hash: lyxkrW/UqVG023E4rkiQmolfszYoshoVE4T/qdnjtKM=)
3: Fsb5HdL7NcO_faI7SYpSwT3IZj0.roa (hash: Dq+bYU+W7cSYjUMeWCs5QEHpiuPHvRD8GOeB0Afw45M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:c8:10:1e:46:85:ae:f4:dc:f0:9f:6b:88:3f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Validity
Not Before: Sep 22 22:00:49 2026 GMT
Not After : Sep 23 22:00:49 2026 GMT
Subject: CN=e13a86620e7b3df230c15cb554f3df9be014c502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:25:44:1e:2b:8d:87:9a:4e:8e:c3:09:72:74:
1f:60:24:17:0d:0e:d0:ea:c0:00:ce:0c:29:1b:60:
40:2d:3c:07:a8:20:52:03:de:e8:9f:ff:66:c4:9f:
0b:04:6d:72:16:87:28:48:70:b1:cb:0e:f4:a7:60:
0e:8a:75:eb:cf:bb:87:8d:b7:41:ec:25:4b:7f:47:
fe:ea:33:cd:ef:0a:96:d2:ea:1d:ae:52:45:bf:21:
35:ef:e0:66:00:bf:10:79:bb:00:c6:cd:8f:0b:b7:
43:c3:0c:39:6d:4e:01:5c:ea:02:6c:77:1e:af:6a:
39:81:6c:81:8b:ff:2c:c8:01:b4:5f:de:75:98:8f:
09:d5:9d:e2:64:fe:c1:33:9a:71:2c:98:0b:82:ff:
58:d5:27:8c:f4:ad:27:98:da:41:47:72:db:c6:f8:
30:2a:a6:d1:da:eb:fe:e8:50:07:1c:b8:78:e8:84:
69:1c:95:8e:79:ce:32:33:f2:2f:0b:3e:44:47:33:
04:d0:84:74:96:bd:41:63:2f:b2:da:f6:9d:bc:82:
c9:90:a9:77:7d:18:5e:dd:ee:68:d7:d3:55:9e:94:
be:dc:1a:90:2b:52:d3:11:d5:46:71:72:74:e8:05:
cf:12:19:65:04:dd:5f:3e:0e:dd:ac:c1:6b:cf:45:
53:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3A:86:62:0E:7B:3D:F2:30:C1:5C:B5:54:F3:DF:9B:E0:14:C5:02
X509v3 Authority Key Identifier:
keyid:DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:04:b3:f5:02:46:37:7a:c5:05:6a:d0:af:7b:c3:8a:10:76:
d4:29:ed:4b:a1:0f:4c:99:26:22:00:c5:4f:bf:1f:22:69:a2:
2d:12:d1:8f:0b:e3:ae:40:a2:ee:3d:31:ae:f9:7d:45:b6:f0:
9f:6c:e6:3d:66:9e:10:1a:fb:a6:79:c9:0e:7a:6e:41:d6:ad:
fe:a0:b6:e5:6d:7e:e1:0f:8b:da:29:c2:2c:ca:e4:0e:a3:26:
ce:88:9e:c8:33:02:76:79:99:1a:a8:89:45:3a:83:06:0b:0a:
f4:32:72:97:ec:b8:30:d5:4d:95:1b:5e:53:96:29:c3:c1:97:
c3:00:42:95:dd:d3:3d:25:49:65:c0:1e:3b:84:1f:b2:1b:e5:
94:79:08:d7:76:6a:b2:18:51:da:e2:d2:a2:84:3e:39:5e:5b:
05:3b:60:d6:32:d8:a0:80:1b:78:1d:bb:60:a4:ee:26:ef:7a:
2c:ef:04:7f:08:31:21:56:14:72:60:da:d9:d1:40:92:99:1e:
e8:27:0f:66:1f:85:d2:16:ee:35:e6:b0:8d:64:bd:2c:b0:05:
cb:81:bb:c3:ef:6b:e0:4e:11:5d:6d:33:b1:62:e5:5c:8f:22:
67:e7:83:4e:a9:18:6c:af:ce:b5:05:7c:4d:c4:3f:00:14:1d:
83:c4:75:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:36:32 2026 by rpki-client