Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
File: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft (raw, json)
Hash identifier: SOgIfAOJVlTy2xZv4vc6+m9MgwYGfFuaa0LtJRw4eM4=
Subject key identifier: 97:03:1C:BC:0D:C1:3F:31:99:67:4E:79:2D:A7:21:2D:5B:15:42:4B
Authority key identifier: DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB
Certificate issuer: /CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
Certificate serial: 01A0DFBCB6FE80DB0F61231745AF4C9C2FA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
Manifest number: 1718
Signing time: Sat 26 Sep 2026 22:01:21 +0000
Manifest this update: Sat 26 Sep 2026 22:01:21 +0000
Manifest next update: Sun 27 Sep 2026 22:01:21 +0000
Files and hashes: 1: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl (hash: Bxp8CHSZ6pZzCV4tRJdmDlhWPiyKMOZk8232OajA0wc=)
2: INE61DSnT0byRQAlBRacyXpwM4M.roa (hash: ZjFf2bVbEAR4MMNRtk1mizzAeZIxKBJHJE2Ioiflxw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:bc:b6:fe:80:db:0f:61:23:17:45:af:4c:9c:2f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
Validity
Not Before: Sep 26 22:01:21 2026 GMT
Not After : Sep 27 22:01:21 2026 GMT
Subject: CN=97031cbc0dc13f3199674e792da7212d5b15424b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:89:8e:c1:16:ca:8e:ee:27:1f:73:2e:a3:45:
6a:4a:a5:6b:4c:47:97:f6:ab:1f:e2:16:a0:6b:ee:
47:96:8b:55:dc:7c:b4:f3:5e:a2:f6:dc:54:d1:56:
0c:e3:78:fb:57:27:75:73:2b:92:09:ed:88:88:78:
f5:4a:4e:8c:92:4c:e6:76:72:4f:9f:ab:59:50:9c:
dd:a7:88:d9:b4:af:b0:c9:8b:4e:ea:24:b6:af:32:
91:80:ff:2d:d0:29:33:b3:f3:4f:6f:4b:1d:57:d5:
fb:b0:96:52:72:26:b6:ca:22:07:bf:bd:80:62:55:
69:1e:5d:ea:de:c5:fc:83:eb:e9:d2:10:5f:06:96:
65:70:6c:d2:8c:c8:ee:4b:e8:0e:6f:9d:c5:03:9c:
bf:ef:8e:e7:78:86:b6:f9:15:c5:3d:f7:f0:b5:dd:
8f:1c:ad:ec:5c:79:b8:60:9d:4d:c5:7d:cf:64:78:
a4:31:a2:49:12:5c:69:d7:98:38:06:a6:b5:53:59:
1f:a4:2d:7e:a2:c3:66:9b:df:79:c6:5d:de:95:66:
64:3e:14:8b:d8:49:53:e5:d8:6e:66:c9:02:56:cc:
d7:71:e1:85:37:bb:0f:71:93:cb:a7:c3:89:1a:67:
5e:2e:5e:1c:9d:ef:91:de:91:cb:3c:e6:14:1d:2e:
d4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:03:1C:BC:0D:C1:3F:31:99:67:4E:79:2D:A7:21:2D:5B:15:42:4B
X509v3 Authority Key Identifier:
keyid:DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:3b:3f:72:41:b1:d9:5d:1a:49:0d:12:ee:90:74:27:32:ed:
e4:52:52:b1:ed:c4:5d:c4:d6:5f:db:06:39:b1:ef:57:f1:93:
d8:ba:5c:cc:fa:25:02:f6:ae:98:28:9f:3c:52:f2:e8:5f:a0:
b3:41:a3:5c:ed:2f:04:b2:b8:70:be:61:d9:b0:ca:87:3c:3d:
cf:af:04:21:fc:78:8d:28:72:7e:e6:6e:5f:aa:a3:cc:27:5a:
74:21:c0:38:d7:fe:54:d5:cf:31:a2:c5:56:66:63:34:33:88:
8f:cd:93:bd:00:b1:a5:fe:96:cc:20:3a:09:90:da:e7:16:55:
30:f8:2c:81:56:d3:56:5d:f7:66:13:1b:a2:15:2e:f0:78:17:
7d:89:bd:31:a9:54:d4:3e:34:79:c2:30:81:6d:ec:80:6d:2d:
a1:db:a7:6d:10:74:ce:93:94:c3:a2:1f:e7:8a:d3:6f:e3:a8:
c4:f5:e4:bb:e3:4f:e9:51:42:91:cf:9a:cb:f4:97:70:1e:f5:
ea:4c:fa:c4:82:f2:17:80:75:66:36:d0:4b:e0:9d:f0:66:05:
50:23:96:50:ec:90:8d:f6:58:96:1e:ad:5d:5e:25:b3:80:02:
14:e9:db:8c:fe:06:80:46:8d:3d:6d:3c:35:17:d4:f8:47:2e:
8f:4e:1a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:17:42 2026 by rpki-client