Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/619a7e-393b-4a35-99c0-48e69cc98612/1/3aCeRyucJahf8jydskIKSWCH-lY.mft
File: 3aCeRyucJahf8jydskIKSWCH-lY.mft (raw, json)
Hash identifier: 1ebZA3uHZX7Ec0R0wK2NLdxB7jq9NXNTM8XilOxcxRs=
Subject key identifier: BD:FA:F9:EF:08:AD:13:F8:D0:B3:57:66:67:4B:B3:B7:C5:2A:68:EC
Authority key identifier: DD:A0:9E:47:2B:9C:25:A8:5F:F2:3C:9D:B2:42:0A:49:60:87:FA:56
Certificate issuer: /CN=dda09e472b9c25a85ff23c9db2420a496087fa56
Certificate serial: 01A0D012B3EF54CA21B771ECE63B4C0D0E42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3aCeRyucJahf8jydskIKSWCH-lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/619a7e-393b-4a35-99c0-48e69cc98612/1/3aCeRyucJahf8jydskIKSWCH-lY.mft
Manifest number: 25
Signing time: Wed 23 Sep 2026 21:01:21 +0000
Manifest this update: Wed 23 Sep 2026 21:01:21 +0000
Manifest next update: Thu 24 Sep 2026 21:01:21 +0000
Files and hashes: 1: 3aCeRyucJahf8jydskIKSWCH-lY.crl (hash: 38FrPhlBuH2LU2gCNaRuB013UclIpAu7l27qeA49XaA=)
2: SlFzfVkfD2gHM5KxjEPVK_gmhI4.asa (hash: IPdymVbjC7V3blPNsDR0NjT2Y5U4c9mHSZI+2IEdVFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/619a7e-393b-4a35-99c0-48e69cc98612/1/3aCeRyucJahf8jydskIKSWCH-lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/619a7e-393b-4a35-99c0-48e69cc98612/1/3aCeRyucJahf8jydskIKSWCH-lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3aCeRyucJahf8jydskIKSWCH-lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:b3:ef:54:ca:21:b7:71:ec:e6:3b:4c:0d:0e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dda09e472b9c25a85ff23c9db2420a496087fa56
Validity
Not Before: Sep 23 21:01:21 2026 GMT
Not After : Sep 24 21:01:21 2026 GMT
Subject: CN=bdfaf9ef08ad13f8d0b35766674bb3b7c52a68ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e7:c0:0c:50:5b:be:46:80:7c:cd:ca:f6:65:
f8:82:c3:34:d9:4a:8a:53:3a:45:35:2d:f2:d3:12:
be:19:96:ba:4c:47:b6:c4:17:8c:1f:79:1e:4b:cf:
b3:b8:09:9c:f9:2f:83:b3:9a:9a:c9:2a:b3:83:b8:
9e:95:6b:73:f5:4d:1c:d1:74:c8:6d:54:a6:74:c7:
af:20:42:18:66:c4:32:7e:a4:8e:60:2a:f6:73:08:
9e:41:e6:7a:05:60:83:9c:88:56:32:62:6d:28:ab:
8c:51:b2:c9:57:dc:7d:ce:4f:89:67:71:f0:fe:f7:
92:ef:91:e0:7b:f8:aa:a4:ab:5e:c6:22:f7:fd:c3:
ea:2b:9e:3c:9e:b0:8a:1e:c1:95:79:db:79:05:f2:
02:02:05:01:89:16:8e:d0:ea:05:05:b3:9b:28:1b:
c3:42:61:06:50:1d:6f:ba:7d:4b:58:95:8c:16:2a:
0b:5b:92:ad:ff:f4:d1:0c:25:08:3a:65:bc:a6:51:
4d:06:c1:84:e1:05:d8:5a:29:27:3e:a8:88:f2:39:
d8:b6:6e:5e:b5:a7:52:83:97:28:9d:ad:8a:94:0f:
75:01:a8:59:55:15:49:cb:e3:77:54:e3:f0:59:cb:
c5:c9:0d:46:7f:01:a5:e7:c5:14:ee:c8:dd:bd:1c:
e9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FA:F9:EF:08:AD:13:F8:D0:B3:57:66:67:4B:B3:B7:C5:2A:68:EC
X509v3 Authority Key Identifier:
keyid:DD:A0:9E:47:2B:9C:25:A8:5F:F2:3C:9D:B2:42:0A:49:60:87:FA:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3aCeRyucJahf8jydskIKSWCH-lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/619a7e-393b-4a35-99c0-48e69cc98612/1/3aCeRyucJahf8jydskIKSWCH-lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/619a7e-393b-4a35-99c0-48e69cc98612/1/3aCeRyucJahf8jydskIKSWCH-lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b1:5e:eb:16:2c:04:59:bf:96:39:58:a8:30:88:f4:68:86:
af:0c:92:92:c4:dd:dc:f2:68:7f:13:4c:ef:0c:c0:2b:11:31:
cd:3b:0d:25:8d:7c:72:b5:1c:2d:ae:0b:c6:96:f4:f4:13:2b:
ac:9e:0b:a4:d9:68:83:fe:d9:95:48:b8:9b:28:1f:72:66:d5:
e0:24:b4:07:82:d2:d2:3b:ed:86:1b:6f:a3:c4:87:77:bb:b7:
f8:89:84:fb:8a:6c:4f:a4:9f:b2:9d:2d:03:fd:c1:78:1d:8c:
b7:01:be:c9:c2:74:34:5a:f2:c0:8d:1b:d6:af:0b:73:d7:19:
0e:38:98:f9:7f:75:00:73:25:ea:0f:fe:62:f3:12:12:3f:0e:
8a:ef:cb:7a:99:e6:fb:27:ae:54:cf:41:df:aa:91:d5:95:8a:
9e:98:27:57:00:ce:7a:67:3b:56:93:a9:3f:d6:bf:5d:b9:89:
b5:05:7e:29:ca:98:44:42:08:d2:49:47:26:46:69:03:07:f4:
75:d2:5a:62:e3:53:ef:36:d2:34:0e:7c:bd:77:88:53:dd:82:
20:9c:67:71:0a:17:f1:74:30:8e:c0:df:6b:bc:86:88:9a:a3:
ec:94:e3:b2:02:c1:08:83:34:b2:e6:e7:84:c1:18:09:0f:ca:
14:8f:e9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:25:25 2026 by rpki-client