Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
File: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft (raw, json)
Hash identifier: Wl0v8G8Pih/oWli/s1Ke90gF2Id5CdqwznLtOL4fvCo=
Subject key identifier: 01:3B:B2:B6:37:13:F6:49:43:21:01:C6:AB:3F:38:64:CC:75:EF:B2
Authority key identifier: DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
Certificate issuer: /CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Certificate serial: 01A0D0EDF1BD819E9E91AE59BADEE0D5118F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
Manifest number: 0F79
Signing time: Thu 24 Sep 2026 01:00:49 +0000
Manifest this update: Thu 24 Sep 2026 01:00:49 +0000
Manifest next update: Fri 25 Sep 2026 01:00:49 +0000
Files and hashes: 1: 3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl (hash: WBAqTypvr1CkaUW5b1sYbgBv7PzSASbK11PXPXyXWp8=)
2: 7oc8a8fS3DJKvtS40qTcpFXQvEM.roa (hash: 8aVVJ9t5PeC1jL7SS/bu2hleqTmY1JsdKhA8bRBNWso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:f1:bd:81:9e:9e:91:ae:59:ba:de:e0:d5:11:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4748cd4714a5cc87cafb8430fb81248b094079
Validity
Not Before: Sep 24 01:00:49 2026 GMT
Not After : Sep 25 01:00:49 2026 GMT
Subject: CN=013bb2b63713f649432101c6ab3f3864cc75efb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a0:88:ee:24:5f:7a:4b:45:f1:09:53:dd:e0:
7c:e5:1d:f6:55:a3:fa:ad:e8:dd:c2:21:42:f7:4b:
d1:8a:76:63:63:45:44:b0:b1:07:0c:2d:73:e8:34:
d3:0b:5a:dc:39:a3:a0:01:5d:88:53:0c:97:5f:d4:
18:61:f5:e7:13:60:10:49:99:25:a5:f6:a0:a5:dc:
cc:57:a7:a0:5d:fe:42:52:50:3c:ca:9c:d3:6d:13:
db:db:5e:f8:83:5d:89:f8:11:4d:72:d8:7f:76:89:
32:52:54:9b:7b:f8:1e:78:75:5f:05:87:1d:bb:8c:
5a:28:19:e6:fa:32:4e:06:dc:3c:8b:6d:2e:96:f8:
a8:8d:60:e3:7a:69:49:4a:2b:e7:0a:76:a5:cc:bd:
37:e0:d1:f6:ad:2a:84:45:2e:6f:18:f5:63:ae:1a:
e6:d8:1c:df:85:71:d5:f5:bb:f6:98:91:fa:02:c7:
45:91:eb:2d:64:3e:67:07:97:f7:d1:72:6f:0b:93:
78:32:6e:90:d0:44:d8:28:56:b5:6c:72:c5:3e:40:
95:d4:f2:4d:4e:14:14:d9:cf:16:da:30:4d:fd:9e:
35:a8:8a:d2:bc:d9:ae:ab:49:5b:41:e2:a0:02:73:
bb:d5:7e:aa:16:8c:85:f1:72:a2:bc:89:96:83:bd:
44:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3B:B2:B6:37:13:F6:49:43:21:01:C6:AB:3F:38:64:CC:75:EF:B2
X509v3 Authority Key Identifier:
keyid:DD:47:48:CD:47:14:A5:CC:87:CA:FB:84:30:FB:81:24:8B:09:40:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UdIzUcUpcyHyvuEMPuBJIsJQHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4c55af-5e9b-4197-86fb-37545da056bd/1/3UdIzUcUpcyHyvuEMPuBJIsJQHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:4c:dc:2f:e3:b6:01:87:7d:4a:e4:eb:d8:47:5e:ed:8d:bc:
62:ed:8b:04:8a:a4:a4:17:e4:6f:f2:64:c4:46:83:c7:01:b9:
71:04:f8:6b:0c:1d:5e:aa:74:81:c9:ba:6d:bc:0b:4f:26:66:
86:23:43:7c:61:67:d5:1e:19:1f:02:65:10:5e:a6:d7:78:15:
77:43:eb:28:b4:72:3c:e5:fc:65:49:a4:f7:cb:92:aa:fb:e5:
35:2c:b9:fd:d2:e8:4a:7a:a9:91:08:8c:4a:c4:ab:e9:93:8f:
32:3d:73:d8:44:da:58:ac:70:9f:05:bf:01:36:93:80:c9:03:
02:37:ae:9b:f7:26:94:ed:4f:b4:20:fe:44:3f:10:4f:77:49:
12:b6:9d:b8:f3:d2:da:c4:89:69:81:24:b4:fd:4c:9c:ba:4b:
1c:0a:ed:50:c3:4f:0e:ea:db:99:71:b7:1a:2d:47:c6:4e:31:
0c:e9:7e:52:f6:d8:a1:aa:13:21:48:4d:f7:52:9e:12:03:93:
f7:38:0d:0b:e9:6d:8d:c2:8f:8c:ef:97:59:b1:56:bb:42:f1:
b3:ab:4d:7a:9f:6a:d4:b4:62:a4:09:e0:c7:ad:56:65:49:24:
21:1d:0c:0d:f0:56:49:1f:26:c1:7b:03:c5:5c:f1:ed:4e:4a:
4d:00:87:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:56:03 2026 by rpki-client