Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
File: 3ZfHygW8w9airRuiNb7Y_qtpRVA.mft (raw, json)
Hash identifier: OBdyX1MK/5QG3h2YGZjkbKI7i1JgkfCikGBS6joIuLw=
Subject key identifier: 84:61:28:54:49:2E:BB:52:D8:B7:74:19:CF:75:34:C2:65:F8:17:B3
Authority key identifier: DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
Certificate issuer: /CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Certificate serial: 01A0CD7ECB86A30D7A2D5C9B35E3C07CDF11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
Manifest number: 1A8A
Signing time: Wed 23 Sep 2026 09:00:33 +0000
Manifest this update: Wed 23 Sep 2026 09:00:33 +0000
Manifest next update: Thu 24 Sep 2026 09:00:33 +0000
Files and hashes: 1: 3ZfHygW8w9airRuiNb7Y_qtpRVA.crl (hash: CqAlw1rvcl9BU2om6jNUEb+iCQ1SD2rhdGZGiWE4+Ns=)
2: IMNGeAH2RRBE8orK0TLke0HPxKQ.roa (hash: e4rxqBMgfnAkGyLI8Cggr5KhboGpBtVTFvPT4BNFaIw=)
3: oRUzmPVMVYzpNrzGxH1BooLT378.roa (hash: uCcKGYmN/9GuwRuNNCgcYsC9Ba96kMPVmQDqSWP2004=)
4: w4CVyL2U79HSB7wONrXYugmX-AM.roa (hash: yBF78znISqvhJ/sR7b39y1Qr+HsHjN0eWMU8QBarpaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7e:cb:86:a3:0d:7a:2d:5c:9b:35:e3:c0:7c:df:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550
Validity
Not Before: Sep 23 09:00:33 2026 GMT
Not After : Sep 24 09:00:33 2026 GMT
Subject: CN=84612854492ebb52d8b77419cf7534c265f817b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:42:22:f5:3c:75:63:99:be:58:fa:05:12:82:
31:dc:df:4c:d9:fe:a6:be:fb:4e:7a:ba:6d:92:ff:
0a:f9:58:6f:58:62:60:bb:1c:52:54:df:66:e0:bc:
7a:e4:3f:c6:cf:46:17:7c:3e:a1:e2:ff:19:fe:11:
76:b7:7c:6b:e5:7e:64:26:d7:11:22:54:66:59:02:
cf:63:fa:a2:6a:c8:b6:1b:83:fb:ca:fd:fb:36:b5:
96:8d:4a:b9:90:22:80:3c:ec:10:6e:9e:0a:71:b2:
f7:0d:b6:bc:4f:ee:01:de:8e:8f:b0:bf:c3:9b:bf:
8f:96:61:05:59:cc:94:da:b0:cd:a6:9a:5a:93:ba:
64:54:8e:9f:4e:01:5d:d5:ff:3a:a0:26:4a:d9:99:
dc:eb:97:4a:01:26:5e:f0:7e:ff:ae:44:8f:30:48:
d6:ad:66:91:27:b7:39:b9:56:98:7e:0f:f3:26:a9:
9f:bd:c5:5a:2f:98:7a:52:0f:b6:20:f2:a6:e3:69:
23:99:c3:ec:e4:9c:f9:0c:1f:76:bd:c4:71:46:9d:
98:42:ae:70:ef:ba:f7:d3:4f:18:cf:31:79:d4:3f:
69:97:56:34:5d:5a:c8:c0:f8:cb:c2:e6:b8:91:18:
ba:d7:f3:28:e5:bf:1f:82:c7:3b:8c:29:10:a5:1f:
0d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:61:28:54:49:2E:BB:52:D8:B7:74:19:CF:75:34:C2:65:F8:17:B3
X509v3 Authority Key Identifier:
keyid:DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:34:b5:e5:33:0f:d1:90:a4:b4:64:94:7b:87:f6:97:2a:f0:
e1:82:0b:21:e8:da:09:87:7d:b9:e2:c9:4c:37:98:41:1b:66:
c0:f2:99:f3:f3:9b:9e:49:6c:7e:c3:fd:90:3b:37:fc:e2:3d:
93:dd:09:6b:43:e0:27:2e:59:20:76:9c:e6:71:56:0f:80:e5:
13:86:f5:2c:04:2f:41:1a:6c:f6:66:23:bd:79:f0:88:31:24:
db:79:7d:7f:fd:c4:eb:9b:d3:b1:6f:2a:34:bc:3a:6b:27:99:
56:56:f4:2e:e4:d5:31:24:ff:86:83:7a:2a:f1:c8:8d:45:29:
98:d1:00:74:df:b6:75:47:9c:84:2e:6f:fd:27:8a:19:ec:2a:
b0:97:21:f0:1c:94:6a:fa:f5:33:0c:69:ed:b8:8f:a9:03:ee:
9f:b4:c8:9c:b6:0b:5c:ef:c7:65:0e:ff:fc:42:22:69:e4:96:
bc:d4:52:be:7d:57:1e:f1:c1:33:96:7e:4a:20:8c:1f:ac:cf:
18:81:35:35:7f:29:8d:fa:dd:8a:59:df:44:98:95:d1:6e:bf:
46:45:bb:d9:64:77:5f:e0:c8:0c:a6:a0:08:25:a5:82:dc:38:
65:95:7c:be:cb:b9:fc:f8:50:73:35:07:6a:e8:31:75:ca:a5:
08:0d:2e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:45:22 2026 by rpki-client