
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
File: S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft (raw, json)
Hash identifier: xsJk3L1hX7wqpntJ0ssDrfaLQqaW8ob5ovq7oGIX5U4=
Subject key identifier: 8C:F1:C3:35:6B:02:79:B0:8F:7E:4C:41:05:4C:82:F5:7C:4E:30:CA
Authority key identifier: 4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
Certificate issuer: /CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Certificate serial: 01A12C2034260BC3A23D2A67E8C52387A7C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
Manifest number: 03A5
Signing time: Sun 11 Oct 2026 18:01:10 +0000
Manifest this update: Sun 11 Oct 2026 18:01:10 +0000
Manifest next update: Mon 12 Oct 2026 18:01:10 +0000
Files and hashes: 1: 0uqpwshspN_7gFWrYvv8lmOXA9Q.roa (hash: a2JZhYSu2ezMQoqUjQBdO43pPgiEd8O3NrnrVq3fVUs=)
2: DXccqbGebS1oWRZWwtuGkEM6mrE.roa (hash: sAlKBAN/NVbEzYwknbZfL2yJYktB8VaTsi+xqD0lVdY=)
3: HRsaNSH7K7gQIpvBegWGreESM_c.roa (hash: l8HiNYAa3uanY7zDmX7yurzSLByL+f17mBRuyOPffhs=)
4: It-qSuqg1nORN9qz8qJhvVHh0Tc.roa (hash: KxdlqZXgyK58HjjchXGa22KcxK8WWRG2Djtkh0Q+II4=)
5: OTNnq40RHs6-RO1vnyF5GX8jSSo.roa (hash: GEnAb11gm/0k4gAv45gZBRalx642vYu648871Hhzo1c=)
6: S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl (hash: wBrpFAgVhO2mLDSh1/5AbQOc5/d7p0euGCXhsX9xjHY=)
7: qqs6KZc0xdrgigAVIEc4D2WTZ2o.roa (hash: P+9IofTZBAc1XWPoAjdQhkamibGq6Uq0JX0SkWEsNv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 18:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:20:34:26:0b:c3:a2:3d:2a:67:e8:c5:23:87:a7:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8
Validity
Not Before: Oct 11 18:01:10 2026 GMT
Not After : Oct 12 18:01:10 2026 GMT
Subject: CN=8cf1c3356b0279b08f7e4c41054c82f57c4e30ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d2:c1:39:6c:c9:87:b7:9b:fa:8e:82:fe:53:
95:d1:c3:da:e6:ed:c3:b8:4a:33:98:e0:ed:40:f8:
cc:4b:39:cd:53:9b:d4:d2:c5:7f:9e:44:e2:bd:f5:
8c:c7:13:4a:13:18:39:d2:d2:89:21:13:b1:7b:56:
ae:1e:cc:2c:2f:26:26:4e:26:81:c1:40:f5:28:6e:
af:16:e0:1d:15:6c:d9:92:cf:10:e1:1e:40:9c:a4:
fb:7e:53:35:df:25:6a:52:38:d0:09:0f:23:c5:8d:
68:9f:5e:f0:5e:7c:f9:5f:a0:94:3f:15:a5:90:7b:
de:88:4e:89:9b:5e:1c:49:9f:6d:8d:b0:b0:04:7d:
93:20:71:01:15:08:f5:51:06:2d:ae:bb:89:33:67:
3e:cf:a3:6a:94:ab:d6:a2:c6:46:a6:05:1c:5a:ea:
08:99:d2:ff:4e:05:d7:fe:50:87:df:20:19:5e:f4:
0f:90:ef:89:0e:a1:8e:4c:4c:60:5a:8c:ef:d2:7e:
6c:4c:6a:84:c4:5a:32:ee:f0:40:4f:1f:9e:2c:54:
b8:6a:95:5a:83:e4:d1:1e:66:3f:ef:54:6e:f9:33:
c5:8e:30:df:a2:a1:81:e1:70:14:53:f9:76:81:6f:
6d:ae:d4:da:18:3e:b0:0d:83:0b:2f:1e:dc:16:07:
59:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F1:C3:35:6B:02:79:B0:8F:7E:4C:41:05:4C:82:F5:7C:4E:30:CA
X509v3 Authority Key Identifier:
keyid:4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d6:c9:8c:fb:d5:1a:ec:34:9d:37:18:3e:c8:d3:06:56:e9:
dc:9b:72:fb:f4:4a:2a:fa:01:fb:f1:3a:ff:1b:1f:1e:09:2c:
a4:14:7d:ed:77:eb:9f:ba:b6:8c:67:19:79:6f:c7:a4:a0:42:
aa:7a:bd:0b:74:31:ab:53:27:26:67:df:2d:57:c7:f8:4c:28:
db:fc:cb:30:be:fe:44:0e:82:32:05:56:48:8a:23:b5:6f:54:
c1:6b:79:f1:d9:46:5f:ff:56:63:ac:53:f3:66:99:18:d3:42:
d4:ee:eb:19:2c:fa:c0:63:fd:1b:e1:29:cf:2b:45:83:51:4f:
9e:c2:56:17:a1:09:48:cf:a9:81:7d:e2:9e:8e:93:eb:8d:aa:
4f:02:e3:25:67:4e:ce:68:40:f3:70:eb:bf:c2:0b:47:bf:de:
e7:ff:63:06:f3:18:35:60:72:4e:03:1d:4d:04:9a:aa:d8:d4:
1d:df:22:53:e6:6e:a9:3b:4c:a5:e0:1b:65:bb:c1:7f:8d:d4:
1d:d5:a4:7e:97:ba:3e:5a:7b:01:f1:1a:e6:63:e7:ec:ea:5d:
2b:ab:91:63:20:70:19:72:06:c2:af:92:08:98:11:59:05:da:
c2:83:7c:1c:38:4a:d8:6b:53:18:e0:76:27:20:da:fa:4f:3f:
7f:02:2a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:50:43 2026 by rpki-client