Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
File: k3hbOp4zxStYueyVo3cj8ACL-UY.mft (raw, json)
Hash identifier: FfyXc9dh4LAnIG0W8mHvZgzz6IwyAmHV/BG8eMoh6tQ=
Subject key identifier: AC:A6:B4:5B:1D:C7:28:BB:B7:99:13:D4:32:23:BE:CA:A3:49:21:F3
Authority key identifier: 93:78:5B:3A:9E:33:C5:2B:58:B9:EC:95:A3:77:23:F0:00:8B:F9:46
Certificate issuer: /CN=93785b3a9e33c52b58b9ec95a37723f0008bf946
Certificate serial: 01A105808A2B5C8FDA4FC0B7F01F315FD0D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
Manifest number: 1A88
Signing time: Sun 04 Oct 2026 06:01:12 +0000
Manifest this update: Sun 04 Oct 2026 06:01:12 +0000
Manifest next update: Mon 05 Oct 2026 06:01:12 +0000
Files and hashes: 1: k3hbOp4zxStYueyVo3cj8ACL-UY.crl (hash: CBpKNVH5GNpjSyW+5iluk/4Z1edp8jRt4jqGqnlm//M=)
2: lzqB-_xRsBzlfZC3i-581O0TRPA.roa (hash: p6cjxCw0yBX+JOEsw/uKDi48tVNBgWuDysGJUIAaJS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:80:8a:2b:5c:8f:da:4f:c0:b7:f0:1f:31:5f:d0:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93785b3a9e33c52b58b9ec95a37723f0008bf946
Validity
Not Before: Oct 4 06:01:12 2026 GMT
Not After : Oct 5 06:01:12 2026 GMT
Subject: CN=aca6b45b1dc728bbb79913d43223becaa34921f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b8:2c:22:fd:2f:73:02:61:9b:4d:ef:33:92:
92:06:c8:b2:3b:3e:56:ef:47:06:66:39:18:01:56:
60:76:90:c9:b8:d5:c8:49:3e:95:b1:bc:33:52:2d:
2c:dc:32:3e:5f:60:cd:5b:cb:ed:45:a3:84:db:a6:
bb:39:67:0b:23:44:0d:6a:fb:6b:f9:45:91:57:75:
3e:71:9a:0f:60:25:f9:ae:cc:4e:d1:17:2e:81:07:
65:22:e6:fb:51:16:e8:52:85:2f:66:4a:e9:d7:89:
e6:7a:5c:3f:ec:e3:46:80:ec:59:f1:6c:be:0e:da:
28:70:f7:7f:79:cb:29:f9:a0:3b:31:49:fe:e7:57:
00:10:20:03:d3:ca:c0:4b:7a:67:27:c0:dc:15:89:
ec:0c:db:45:53:7b:50:5c:b7:06:92:f3:48:78:a0:
1a:f5:32:03:da:d8:fe:22:ad:0e:d1:bc:22:ab:34:
62:d5:42:c8:2c:bb:1d:0b:d8:49:b7:6c:8d:9d:26:
8a:1b:55:cd:6d:2b:fb:3c:75:f6:ff:e8:fa:36:d5:
78:8a:3e:a8:e7:3d:3e:ad:3f:d8:5f:c2:b7:aa:dc:
68:11:91:fb:7c:37:2c:59:42:a2:f6:64:53:ef:a7:
0e:a8:e6:98:65:ce:bb:8c:c6:11:3b:2c:18:3d:7d:
16:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A6:B4:5B:1D:C7:28:BB:B7:99:13:D4:32:23:BE:CA:A3:49:21:F3
X509v3 Authority Key Identifier:
keyid:93:78:5B:3A:9E:33:C5:2B:58:B9:EC:95:A3:77:23:F0:00:8B:F9:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3hbOp4zxStYueyVo3cj8ACL-UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/482984-d9e4-4d33-a8ec-f4bab719e070/1/k3hbOp4zxStYueyVo3cj8ACL-UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f9:ae:71:26:11:b0:53:f8:40:af:32:c0:c4:e8:0f:62:f7:
9f:72:fb:b0:4d:79:2b:78:d8:4c:1a:3e:2d:2e:ce:d0:f9:28:
72:4e:f4:3d:64:c6:ab:75:be:50:d3:a6:43:52:98:c3:d8:87:
2a:d5:27:08:74:ce:f5:16:f1:0e:10:3d:42:af:d8:e6:07:e5:
64:12:da:17:a6:08:3e:c5:55:1c:e6:08:5d:6b:e2:88:78:ce:
5a:6d:15:b2:8b:c2:fa:e9:66:54:27:0b:df:5f:f8:7c:a7:b9:
0c:69:98:00:92:1a:34:08:1f:d4:ea:4c:46:81:49:e7:f5:67:
20:19:d0:55:b8:6a:91:76:b2:78:eb:ec:84:cd:c7:a4:13:97:
c6:6e:14:a1:ff:16:22:df:5a:5a:74:a6:b3:04:40:53:01:bb:
5e:a8:73:40:a5:0c:ae:50:7f:b9:16:8b:ca:45:d3:49:c9:a3:
f6:28:ef:16:94:89:ce:89:2f:0e:de:59:96:ab:a1:c1:de:86:
f9:4b:b7:c6:17:b4:82:5f:22:ab:52:74:d8:fe:44:6a:bb:99:
c5:f0:11:89:78:77:27:9b:45:22:0a:69:ce:be:33:e4:c4:3e:
07:9f:fe:4d:60:46:8f:03:78:0e:c7:c2:c4:a6:b6:99:90:f0:
c4:d4:3e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:13:48 2026 by rpki-client