Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
File: 3BAvYTHOWnRutZgd1MHWtOF7Az8.mft (raw, json)
Hash identifier: JHOxpRvnjpNudtKqaBWt+hLv+KargbD4BjSgTP4HxYA=
Subject key identifier: 54:61:B7:D3:15:B7:A1:8F:5D:DB:82:E2:D2:5D:D4:9B:F0:49:81:E4
Authority key identifier: DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F
Certificate issuer: /CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f
Certificate serial: 01A0D2370E70B7CEE1EF7FCC9BA699FB8EC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 07:00:18 +0000
Manifest this update: Thu 24 Sep 2026 07:00:18 +0000
Manifest next update: Fri 25 Sep 2026 07:00:18 +0000
Files and hashes: 1: 3BAvYTHOWnRutZgd1MHWtOF7Az8.crl (hash: i5g+ygtn0M7vpKrkI8v85sUO61bfTY1JYGW0L6jkINM=)
2: Wdloadg_jaSIWNimJpIr6kOshxY.roa (hash: xgmHkwMMNOck0R3y8/daNlcMrAkpPhMbZk/5vahLUtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:0e:70:b7:ce:e1:ef:7f:cc:9b:a6:99:fb:8e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f
Validity
Not Before: Sep 24 07:00:18 2026 GMT
Not After : Sep 25 07:00:18 2026 GMT
Subject: CN=5461b7d315b7a18f5ddb82e2d25dd49bf04981e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:55:73:c3:14:65:97:d4:09:eb:19:b8:cf:d2:
84:0b:0d:6a:b8:f5:84:64:cd:02:21:ad:2e:9c:b6:
c4:92:6c:0f:15:2c:87:9c:b4:6d:3d:ed:d2:05:f4:
4c:e0:a2:1a:78:cb:dc:93:6c:34:13:3c:11:49:ab:
86:68:a9:13:13:a2:1b:45:ab:88:cb:d0:1d:09:a8:
1c:c4:92:bd:17:2b:3a:5a:35:8b:35:ee:83:42:16:
5f:96:87:99:72:1d:45:71:ee:95:e4:69:26:dd:91:
2d:86:e7:ee:da:ad:eb:e9:52:7e:ac:c8:d1:39:e0:
95:a6:76:1f:69:a3:72:b5:b5:5c:52:dc:54:67:2a:
3a:01:2c:09:8d:6a:4f:39:78:0d:4a:3e:50:ea:e3:
d6:8c:5e:d0:0f:97:9d:8b:1d:67:3f:d1:bd:99:22:
ab:24:5d:0f:d7:64:3c:89:7c:ab:1a:50:2e:91:bb:
3f:94:2a:ed:91:ce:30:83:a4:ed:16:d7:73:9f:54:
01:66:cf:8f:3f:bd:83:9c:3e:05:14:2e:fa:2b:a0:
a9:28:43:a7:91:6a:be:b8:ca:22:77:05:8c:b6:96:
68:63:67:ac:d3:85:ae:b5:8b:da:31:c0:fd:04:60:
32:d4:1e:d1:d5:8b:44:fe:08:a8:37:49:27:44:14:
0f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:61:B7:D3:15:B7:A1:8F:5D:DB:82:E2:D2:5D:D4:9B:F0:49:81:E4
X509v3 Authority Key Identifier:
keyid:DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:3f:64:7d:ef:a8:1b:e3:60:3c:94:91:a8:ed:6f:fa:d2:23:
6e:e6:bd:e4:63:09:4f:45:94:23:fb:fc:ab:ed:63:cd:c5:0e:
dc:08:98:71:5f:aa:19:47:cd:a5:58:32:9c:56:14:7a:ba:76:
fe:f2:4f:d7:a2:05:c1:59:cc:ae:e4:08:d9:3c:83:12:11:40:
86:92:32:a8:2d:63:2a:f1:85:5d:7d:a5:f7:10:45:0b:b9:e2:
e3:44:54:ff:81:20:21:de:2c:7f:81:79:d1:c5:4f:ec:c0:69:
ea:25:49:76:72:ea:4c:b1:6c:9d:4f:71:e4:be:89:0a:8d:a5:
9f:60:fd:4f:cf:61:68:c2:f3:36:63:d1:b1:03:c9:c5:e9:e7:
b8:38:20:c8:21:c0:8b:03:21:6c:b9:82:21:d9:c3:51:90:d3:
8a:f8:18:cb:3a:8d:a4:76:54:5c:08:da:05:05:34:a6:aa:f2:
d6:e9:da:0b:50:65:64:7c:61:d3:c9:12:47:f4:e2:00:3f:5c:
c8:21:ea:c2:a8:56:73:70:1b:db:a0:54:0d:df:c5:25:df:ca:
fd:cc:a9:10:2f:c9:d9:48:6b:f8:47:bd:f5:f0:5c:af:5b:e7:
b9:3a:b8:c5:6c:53:8a:f6:0c:0f:b7:84:9d:9e:97:2a:ba:6d:
bc:76:53:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:38:03 2026 by rpki-client