Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft
File: 46iYuhJQyJicx22fi1PR28YrKJA.mft (raw, json)
Hash identifier: LGDoEmpmWy5N9WTiRR1IUADVe4YRr0ZRB42q4zPrm4w=
Subject key identifier: EC:3A:EC:AD:99:79:EC:BE:38:72:4F:0F:D5:5D:FE:68:51:9D:FD:BE
Authority key identifier: E3:A8:98:BA:12:50:C8:98:9C:C7:6D:9F:8B:53:D1:DB:C6:2B:28:90
Certificate issuer: /CN=e3a898ba1250c8989cc76d9f8b53d1dbc62b2890
Certificate serial: 01A129FAD210FDF9583E021FD8EBA9CB1A2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46iYuhJQyJicx22fi1PR28YrKJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft
Manifest number: 0FF3
Signing time: Sun 11 Oct 2026 08:01:05 +0000
Manifest this update: Sun 11 Oct 2026 08:01:05 +0000
Manifest next update: Mon 12 Oct 2026 08:01:05 +0000
Files and hashes: 1: 46iYuhJQyJicx22fi1PR28YrKJA.crl (hash: mTIf8W7mvUGidCGYkaye5IaewDeoncDewvclpGilPYo=)
2: nmFsMibkUkc4eLEyHsZSOh33hiM.roa (hash: UIbhcnO6tinapdLdEyBhk1W1C6XNYeMhFMwzbq1oLUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/46iYuhJQyJicx22fi1PR28YrKJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:fa:d2:10:fd:f9:58:3e:02:1f:d8:eb:a9:cb:1a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3a898ba1250c8989cc76d9f8b53d1dbc62b2890
Validity
Not Before: Oct 11 08:01:05 2026 GMT
Not After : Oct 12 08:01:05 2026 GMT
Subject: CN=ec3aecad9979ecbe38724f0fd55dfe68519dfdbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:89:f5:84:34:19:aa:43:0f:fc:a5:ab:27:6f:
76:18:e1:6a:3f:f3:1d:e2:10:bb:c6:af:b5:46:32:
f9:76:77:eb:aa:63:0b:57:0d:93:7a:5f:5a:24:b9:
89:cf:bf:2f:c8:cf:c8:aa:f1:d1:86:58:22:3f:63:
04:5f:77:63:da:be:03:40:4b:7f:4d:be:d9:79:c9:
ce:ef:3e:bd:9a:30:ea:60:61:f9:38:ff:6c:e4:91:
29:2a:40:a6:c5:84:ba:73:f7:c1:39:b2:ca:cd:e5:
71:d7:db:e6:ef:ae:2e:fe:c8:4f:57:e4:62:fe:69:
32:35:b2:bd:63:ff:33:c5:62:3c:87:60:9b:01:03:
ca:a7:71:79:32:d2:3c:b2:1e:ef:4b:59:13:81:7e:
23:24:4e:c3:cb:3b:94:6d:3c:e3:29:a9:6f:54:58:
c3:fb:f1:81:6c:97:7a:71:ec:bd:a5:84:79:d2:37:
9d:3d:98:79:45:75:6b:88:bb:d1:a4:fa:0e:26:a5:
d2:2f:1e:0a:0d:da:2c:02:66:d3:09:54:10:dc:ad:
ec:86:e2:12:41:6a:71:fe:46:0b:fa:e1:7d:0d:8c:
c9:8e:6d:4d:72:76:06:b8:6b:3a:f1:b9:5f:a6:b0:
02:b3:67:35:ba:01:14:19:9e:22:fc:bc:2c:e7:4c:
b4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3A:EC:AD:99:79:EC:BE:38:72:4F:0F:D5:5D:FE:68:51:9D:FD:BE
X509v3 Authority Key Identifier:
keyid:E3:A8:98:BA:12:50:C8:98:9C:C7:6D:9F:8B:53:D1:DB:C6:2B:28:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46iYuhJQyJicx22fi1PR28YrKJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:cc:e2:47:5e:74:61:d5:6c:e0:8e:b3:20:56:58:2a:d7:9b:
18:20:d5:3a:db:f7:c7:e7:6c:0f:8d:a1:33:d5:6a:23:d1:44:
0e:82:13:36:eb:53:76:24:ea:1b:84:48:8d:d0:bd:da:5b:b1:
70:b1:66:4e:1d:32:15:72:f3:17:9e:bb:44:1d:5f:a9:76:36:
36:d7:56:83:e7:7b:31:84:14:13:75:a3:2e:e5:58:a3:6e:8f:
b0:34:42:88:84:33:c5:0b:8f:0b:1a:09:17:25:d9:c4:9d:27:
29:5c:fa:f3:5a:8b:e4:68:d1:54:46:bb:30:4b:a6:ec:7b:4f:
9a:cd:cc:d1:6b:d8:50:55:d1:32:14:bc:b0:93:60:3a:e5:da:
d5:74:c0:c1:72:75:42:43:c4:f0:ab:15:88:e3:fc:c9:65:04:
0a:03:5b:80:aa:8f:7e:8c:65:dd:a8:11:e9:01:41:bc:35:71:
9d:0c:89:c5:78:4a:22:d3:f4:1a:78:f8:04:7a:d2:da:f7:54:
2c:fd:99:1c:f4:6e:ef:fc:da:3b:c6:65:ea:5d:56:f1:a5:a4:
88:0b:78:55:01:5f:ba:71:49:c2:49:ae:e6:e4:86:73:d1:ab:
54:d7:43:42:f7:d4:9f:4f:f6:9f:13:66:c5:6f:d8:75:ed:b6:
49:e3:4e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:36:19 2026 by rpki-client