Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
File: 3F-syhTeCBdO9clskfHngl9C0Hs.mft (raw, json)
Hash identifier: QHIXF/iKfh4ADN8hQ5MxCwtZC6pM7ICdnDMbTEU7Dzs=
Subject key identifier: 3A:EC:85:14:69:9E:DA:59:8B:53:44:2F:25:D7:B7:0C:9C:1D:12:CC
Authority key identifier: DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B
Certificate issuer: /CN=dc5facca14de08174ef5c96c91f1e7825f42d07b
Certificate serial: 01A0D0B6E8183E9387E9AF1ECF233CFA2083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
Manifest number: 175E
Signing time: Thu 24 Sep 2026 00:00:42 +0000
Manifest this update: Thu 24 Sep 2026 00:00:42 +0000
Manifest next update: Fri 25 Sep 2026 00:00:42 +0000
Files and hashes: 1: 3F-syhTeCBdO9clskfHngl9C0Hs.crl (hash: CM7yxg1wdH0I8Wngwuaa5W9gru2cTWgIK0KhCuYbX9o=)
2: 8cfj4AnF2yhGPptSyF2jUpxr_S0.roa (hash: DzmUzilMBBgQsPSM2fLdsvW1h+o9QZQZ1zF5bMN9CFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:e8:18:3e:93:87:e9:af:1e:cf:23:3c:fa:20:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5facca14de08174ef5c96c91f1e7825f42d07b
Validity
Not Before: Sep 24 00:00:42 2026 GMT
Not After : Sep 25 00:00:42 2026 GMT
Subject: CN=3aec8514699eda598b53442f25d7b70c9c1d12cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ef:13:44:2a:a0:3f:9c:29:b8:c2:3f:59:75:
b7:2d:98:e8:29:c5:8d:19:54:45:37:27:10:6c:81:
03:3a:6a:7c:55:62:67:63:11:b4:b4:97:67:25:61:
70:1e:f6:18:59:57:cb:05:e9:a4:a1:7c:57:26:05:
a5:fd:f8:92:b7:2b:95:92:e2:73:0f:92:5b:d6:a3:
26:fe:2a:34:35:19:20:07:e2:8d:65:20:fe:24:94:
15:6f:85:76:87:3b:9b:e0:16:7d:cd:73:35:fc:75:
84:bc:4f:d1:35:e7:45:6d:9c:81:9f:3f:c1:79:fc:
b6:f5:e5:a4:82:c3:e1:ef:87:b2:e1:65:79:57:c8:
f0:b1:05:d8:3e:82:79:63:c2:1d:1e:92:11:dc:48:
c6:d5:79:45:b5:b4:59:ab:11:3d:f1:2c:b4:8b:60:
0c:15:a9:3f:8d:6b:a7:0c:73:35:32:2d:47:c4:2c:
00:7d:c3:fe:97:bd:aa:2d:1a:8c:9d:60:28:24:ae:
cc:43:61:49:5e:2c:58:59:31:2e:42:c0:d0:65:0c:
94:7f:59:d7:08:78:dc:48:8d:4c:52:d3:a6:26:03:
6b:40:fa:5f:f2:82:bb:78:39:47:a9:82:4c:cf:5f:
6d:0e:28:f2:2c:9e:59:f3:81:eb:d7:7c:7b:16:6b:
71:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EC:85:14:69:9E:DA:59:8B:53:44:2F:25:D7:B7:0C:9C:1D:12:CC
X509v3 Authority Key Identifier:
keyid:DC:5F:AC:CA:14:DE:08:17:4E:F5:C9:6C:91:F1:E7:82:5F:42:D0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3F-syhTeCBdO9clskfHngl9C0Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0893f1-ffb4-46b3-bf27-a7016980c86f/1/3F-syhTeCBdO9clskfHngl9C0Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:2c:24:b8:50:8c:42:2d:2e:5f:c6:be:a5:69:9d:8d:11:d7:
47:fd:19:b4:c8:45:c0:68:a0:c2:a2:cd:72:43:a5:39:58:6c:
a5:90:43:d0:9f:f2:46:61:4f:b8:ea:24:de:57:78:48:23:66:
20:a4:f4:1c:ca:2b:64:a8:95:ef:3e:f6:33:2f:23:25:4a:02:
b0:73:d3:c7:3f:47:19:dd:62:c5:cd:9b:39:7b:74:b5:ba:8d:
52:be:27:fb:ee:7c:2a:30:92:fe:4f:6f:21:bc:77:c7:e5:d1:
84:e8:c0:20:d1:1c:89:12:2f:f7:14:f5:b5:24:bc:08:09:23:
49:08:1b:74:c7:49:63:c3:00:00:4a:57:0a:b8:77:b5:91:33:
cc:c2:c5:e1:2e:e7:14:8d:6d:d4:77:21:96:97:80:96:79:aa:
d3:5a:c2:f3:98:2f:b7:16:6d:b9:98:2c:50:63:18:1b:7b:8c:
51:20:17:50:37:d6:7d:6d:45:b1:56:7b:46:60:e2:86:c6:0c:
47:dd:c7:39:c2:b4:f5:03:93:cd:1c:c0:cd:62:2a:d8:68:d5:
ac:3e:f9:2d:9a:38:c7:3e:cc:fa:ec:57:70:51:42:d0:6e:8c:
83:6f:d7:0d:11:60:ba:10:7f:c4:d0:41:2b:5c:97:e9:ad:eb:
64:08:06:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:55:27 2026 by rpki-client