Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/3K8sW-MHpGphaXvKhwvsojTsKkc.mft
File: 3K8sW-MHpGphaXvKhwvsojTsKkc.mft (raw, json)
Hash identifier: tGw5tGsLKMXTzroHbQfZAIaMH8si8z1f+6NzTsNipP4=
Subject key identifier: 67:FB:AE:BB:6C:97:95:27:53:2A:F5:D0:D0:F2:87:93:6E:A5:51:4A
Authority key identifier: DC:AF:2C:5B:E3:07:A4:6A:61:69:7B:CA:87:0B:EC:A2:34:EC:2A:47
Certificate issuer: /CN=dcaf2c5be307a46a61697bca870beca234ec2a47
Certificate serial: 01A0D3EFC0D89D97C6CA1EC842A73944A16A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K8sW-MHpGphaXvKhwvsojTsKkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/3K8sW-MHpGphaXvKhwvsojTsKkc.mft
Manifest number: E7
Signing time: Thu 24 Sep 2026 15:01:40 +0000
Manifest this update: Thu 24 Sep 2026 15:01:40 +0000
Manifest next update: Fri 25 Sep 2026 15:01:40 +0000
Files and hashes: 1: 3K8sW-MHpGphaXvKhwvsojTsKkc.crl (hash: SUj47HcKQTKFyLWdhI4sStVZF0gqRyE71m7YS7z/AVM=)
2: kOfsiEQyAOFEFp6bNE421gle90w.roa (hash: +TRgEzJtF640HkMV28QrOSBubxXo5DyV0zLHNPpuhXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/3K8sW-MHpGphaXvKhwvsojTsKkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/3K8sW-MHpGphaXvKhwvsojTsKkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K8sW-MHpGphaXvKhwvsojTsKkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:c0:d8:9d:97:c6:ca:1e:c8:42:a7:39:44:a1:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcaf2c5be307a46a61697bca870beca234ec2a47
Validity
Not Before: Sep 24 15:01:40 2026 GMT
Not After : Sep 25 15:01:40 2026 GMT
Subject: CN=67fbaebb6c979527532af5d0d0f287936ea5514a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:63:3f:ec:f3:19:0d:b3:e4:20:e9:cb:4e:8f:
d1:6f:f7:ee:5b:b4:49:d0:fe:a0:4d:4c:a6:0f:75:
ca:ef:57:33:ba:72:82:82:09:37:53:49:d6:91:ab:
d6:3e:8d:19:d3:20:9a:33:92:34:0b:5a:96:09:ab:
b2:44:fd:0b:e5:16:da:9a:53:14:ea:ad:7b:26:1b:
ea:7e:18:3e:47:83:2d:df:27:29:bc:16:77:4e:f0:
d9:ae:41:e2:8c:67:24:d1:15:9b:69:6e:4b:7a:0d:
3c:c3:8a:a2:f3:86:88:e8:8b:0c:49:32:d8:4c:04:
40:ea:f7:28:98:1f:ca:3d:35:3f:99:4b:12:09:e3:
64:99:95:c2:cd:49:ce:09:09:8a:d7:46:5c:6e:ae:
6c:c0:ae:a5:67:e9:05:46:ef:bf:aa:44:d1:c8:10:
10:0c:1b:81:3a:ee:3c:38:6f:3a:c3:a4:dc:75:5d:
a3:cb:ba:23:7f:a5:40:c0:49:e4:e3:40:db:f4:a4:
d9:25:13:31:4a:54:92:40:02:71:50:f4:3c:82:bb:
9b:33:4b:3e:93:ed:84:49:ab:da:fe:62:0a:7c:4a:
ed:5c:b8:ba:75:2c:60:4d:e3:cd:aa:c9:c7:a9:3f:
f7:94:e8:d5:04:18:ed:bd:d1:e1:61:6a:af:8d:b4:
ad:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FB:AE:BB:6C:97:95:27:53:2A:F5:D0:D0:F2:87:93:6E:A5:51:4A
X509v3 Authority Key Identifier:
keyid:DC:AF:2C:5B:E3:07:A4:6A:61:69:7B:CA:87:0B:EC:A2:34:EC:2A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K8sW-MHpGphaXvKhwvsojTsKkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/3K8sW-MHpGphaXvKhwvsojTsKkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/3K8sW-MHpGphaXvKhwvsojTsKkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:3b:ce:ab:ad:a2:ef:ac:9c:6b:61:b1:09:0a:ab:47:77:cb:
e9:8c:8a:db:3d:20:67:76:8d:f6:3e:2c:ac:9f:4b:6f:9b:11:
94:25:45:d0:98:87:7e:d7:29:f4:6f:e9:03:6d:61:cd:24:3e:
82:bf:d8:28:bb:aa:d0:64:08:ea:17:cc:17:7c:75:57:54:39:
3b:19:78:68:86:95:ad:19:33:05:db:f8:ac:66:fe:a5:bd:02:
a5:b7:40:c8:1b:dd:58:7d:c4:04:93:c8:f6:f7:49:47:12:80:
53:3c:a6:5e:67:65:ea:88:6f:2d:b7:6f:ee:38:e9:58:f2:92:
26:d9:52:34:28:7a:59:71:79:2c:6f:65:1b:5a:82:d3:86:47:
45:89:85:ba:a2:92:81:c4:18:3d:25:78:b6:07:75:8e:2d:4d:
19:d1:b2:89:b5:bb:96:6d:5c:3b:46:ca:59:dc:1d:fe:91:a7:
97:f0:94:d6:e1:c5:4c:92:00:fe:56:08:ec:3b:d1:27:d0:71:
d8:b2:78:08:dd:23:a3:0f:ea:3b:ea:aa:26:cc:75:12:65:fb:
8f:d7:81:b1:4e:8f:a0:da:ee:9a:28:92:24:c6:6e:30:8c:9c:
c1:e7:db:ca:9c:ca:bb:69:78:1e:57:df:94:09:d0:7f:26:9a:
70:03:af:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:30:20 2026 by rpki-client