Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
File: 3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft (raw, json)
Hash identifier: zhszyC/zEc/grElKdce1mDBSEcCyYxsoCHK1llrF+rM=
Subject key identifier: EF:64:B2:76:8C:F1:CF:7D:89:2F:DA:96:0E:B9:04:A3:35:73:9D:2B
Authority key identifier: DC:32:7A:F3:2A:98:49:27:57:B2:00:EA:04:0D:B2:4E:C3:13:65:92
Certificate issuer: /CN=dc327af32a98492757b200ea040db24ec3136592
Certificate serial: 01A0D2010F877A2885CEB21B5E20DB337D32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
Manifest number: 0849
Signing time: Thu 24 Sep 2026 06:01:19 +0000
Manifest this update: Thu 24 Sep 2026 06:01:19 +0000
Manifest next update: Fri 25 Sep 2026 06:01:19 +0000
Files and hashes: 1: 3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl (hash: CeNYcG22a2pbchY9jDt+Etl1LI54dG5LKgjiyoQFWt4=)
2: SAIHz1BSLN8cZrRdxLMBgPm4XlA.roa (hash: McGCOon8pvSTjIiegxDTJso9YyCAyFlc2PqcW0Wd9HE=)
3: kAZJSgS29MgxZueFo76bZT3RLoo.roa (hash: 3PDTIlQgL4yc+u1IAv1XjtSyfqW/Sc3TvGpNsbSmrQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:01:0f:87:7a:28:85:ce:b2:1b:5e:20:db:33:7d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc327af32a98492757b200ea040db24ec3136592
Validity
Not Before: Sep 24 06:01:19 2026 GMT
Not After : Sep 25 06:01:19 2026 GMT
Subject: CN=ef64b2768cf1cf7d892fda960eb904a335739d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:13:de:a2:66:a5:ea:fa:9f:0d:4d:50:49:c2:
29:d0:23:ae:e3:46:80:9a:0c:d5:bc:93:4e:2a:b4:
64:cd:f3:8a:46:73:c7:0e:d8:fe:e4:15:98:88:b3:
f3:c8:d2:a4:e1:60:fe:c4:0d:d5:e2:1d:4a:b7:44:
72:2a:f2:45:10:14:5f:b6:63:3c:8c:f4:ba:9d:31:
fc:fe:56:56:92:b4:ce:12:22:46:32:2e:fe:e1:d6:
f9:09:b4:9d:ec:85:cd:75:c6:db:e8:fd:16:12:49:
e4:6b:35:3a:62:32:2f:ce:39:ba:f6:53:45:76:5b:
28:60:23:b6:52:df:91:4d:7c:5c:ae:3a:40:36:f4:
28:0c:6b:c8:ae:e9:93:2e:64:f7:68:5a:6a:dc:b6:
b4:98:22:03:a7:9a:1d:a7:8b:d6:f0:96:b1:b6:46:
49:fc:d3:07:99:94:12:b6:c2:b8:78:90:3d:21:6e:
cd:4d:62:43:52:b3:10:e3:24:b6:73:75:50:b2:55:
57:89:42:3d:70:19:a0:e1:82:31:79:cc:61:63:e1:
e4:0e:4f:45:2c:d5:37:b8:bd:4a:77:aa:14:d6:c5:
09:16:fb:24:98:9d:6a:6d:c6:a6:74:e3:83:74:95:
a8:28:ef:ba:20:f7:1c:f2:8d:a9:13:e7:cf:41:54:
9f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:64:B2:76:8C:F1:CF:7D:89:2F:DA:96:0E:B9:04:A3:35:73:9D:2B
X509v3 Authority Key Identifier:
keyid:DC:32:7A:F3:2A:98:49:27:57:B2:00:EA:04:0D:B2:4E:C3:13:65:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:23:ca:88:36:9c:ff:c1:21:5c:4d:a3:5c:6f:a0:0d:f3:d8:
47:67:c6:55:1b:33:ac:77:40:85:26:d7:3a:b9:ea:86:65:3b:
6e:d1:04:8f:0b:dc:b2:ba:6f:df:5b:c7:96:67:e2:d1:3b:fc:
b9:b2:c6:b8:ed:9f:e8:5a:8c:aa:0f:6d:21:a7:6d:8c:14:2b:
0c:16:9c:45:7a:bb:87:58:44:a9:07:10:4a:61:98:97:76:45:
60:3f:cb:65:ac:14:43:77:27:a3:45:ed:af:d1:a6:e3:3f:34:
c6:fc:05:a3:fb:ce:bb:ea:25:66:48:d8:23:ad:92:df:1a:ce:
2b:dd:79:f0:12:1c:de:8d:bb:ea:c2:66:00:9d:e9:20:8d:c6:
d9:c3:64:ba:df:b4:e4:04:3e:35:d4:e4:dc:7a:2f:90:12:f2:
48:df:c6:fb:ba:78:ef:f2:87:fa:db:01:37:75:9e:30:0d:51:
9a:41:67:54:b6:85:ac:53:08:20:ca:fb:52:81:c0:3d:08:b3:
2a:ad:ee:5c:17:41:5a:4c:41:97:da:40:32:a8:97:b0:bf:09:
e4:27:1e:b7:6c:60:cd:eb:b6:ae:d8:0d:e2:d7:20:d0:22:5d:
6e:2c:28:15:aa:c2:39:df:c5:29:a5:33:34:a1:32:9e:a4:d8:
43:01:a2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:07:20 2026 by rpki-client