Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/bb476e-4d66-4672-b1e1-b19e9edcbb34/1/3kX5u4JjMlKIEVvl5OV3-AvJpc0.mft
File: 3kX5u4JjMlKIEVvl5OV3-AvJpc0.mft (raw, json)
Hash identifier: WlrH2ciC852hRDGbL8opE5aNqkQsjh6aIfBkkVQuc2E=
Subject key identifier: 1B:A8:01:0C:DD:6A:0A:EF:9F:51:D3:C6:E1:59:5F:57:A3:6E:CE:D1
Authority key identifier: DE:45:F9:BB:82:63:32:52:88:11:5B:E5:E4:E5:77:F8:0B:C9:A5:CD
Certificate issuer: /CN=de45f9bb8263325288115be5e4e577f80bc9a5cd
Certificate serial: 01A0D011E7080E145EEAD3F1C6F8345934FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3kX5u4JjMlKIEVvl5OV3-AvJpc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/bb476e-4d66-4672-b1e1-b19e9edcbb34/1/3kX5u4JjMlKIEVvl5OV3-AvJpc0.mft
Manifest number: CE
Signing time: Wed 23 Sep 2026 21:00:29 +0000
Manifest this update: Wed 23 Sep 2026 21:00:29 +0000
Manifest next update: Thu 24 Sep 2026 21:00:29 +0000
Files and hashes: 1: 3kX5u4JjMlKIEVvl5OV3-AvJpc0.crl (hash: 1Cr8EvCjSmTJLDUY/2/50GkxZhQyFfRoL/45S4vJ/6U=)
2: MBj5kGluPT5_HSR9ElprzeHWlR0.roa (hash: bTpK8jvE50MfOz8I4rdcfBf2xLTGRw3SAiHk9+mLUjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/bb476e-4d66-4672-b1e1-b19e9edcbb34/1/3kX5u4JjMlKIEVvl5OV3-AvJpc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/bb476e-4d66-4672-b1e1-b19e9edcbb34/1/3kX5u4JjMlKIEVvl5OV3-AvJpc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3kX5u4JjMlKIEVvl5OV3-AvJpc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:11:e7:08:0e:14:5e:ea:d3:f1:c6:f8:34:59:34:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de45f9bb8263325288115be5e4e577f80bc9a5cd
Validity
Not Before: Sep 23 21:00:29 2026 GMT
Not After : Sep 24 21:00:29 2026 GMT
Subject: CN=1ba8010cdd6a0aef9f51d3c6e1595f57a36eced1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:38:36:22:2a:a9:39:d1:65:56:bb:5c:b6:70:
76:74:ea:58:40:d1:1b:a5:08:13:99:b1:b6:ef:0b:
96:31:6a:45:64:d5:0c:0d:80:28:19:57:9e:0f:a7:
66:0d:37:46:9b:47:f4:c7:36:2b:00:0f:9f:b1:02:
97:fc:73:ed:5d:3a:61:b8:6d:dd:1a:1b:ad:b1:75:
87:0d:a2:b4:4d:7a:e8:eb:1b:5c:03:1b:a8:f4:a3:
48:f7:db:25:85:9e:8d:3f:78:a7:e4:34:d2:9f:b4:
96:23:d3:5e:db:9d:18:9b:bc:b9:c4:7a:8f:3e:8d:
37:9a:2a:32:28:3d:96:9d:a9:74:b5:ed:2a:4c:6f:
8f:67:56:6f:70:cd:92:4f:92:a0:8e:e5:97:cc:b2:
4f:e2:c0:54:de:aa:b3:5a:30:60:a7:12:25:d7:57:
13:11:7e:28:79:5e:25:b9:69:e6:99:1f:b2:91:2b:
e7:3d:44:9b:3b:ef:18:9e:5f:db:9f:15:bb:b8:60:
11:42:f5:44:a8:9a:7d:c1:7b:a0:76:38:cd:8d:b5:
bb:00:8f:35:e1:07:67:a6:c7:fa:52:2b:74:76:ef:
9a:41:f6:fd:81:b1:72:a8:3c:4a:f4:11:39:4f:2b:
5f:e2:79:96:85:98:b5:58:4f:85:13:bf:8f:f6:eb:
1e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A8:01:0C:DD:6A:0A:EF:9F:51:D3:C6:E1:59:5F:57:A3:6E:CE:D1
X509v3 Authority Key Identifier:
keyid:DE:45:F9:BB:82:63:32:52:88:11:5B:E5:E4:E5:77:F8:0B:C9:A5:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kX5u4JjMlKIEVvl5OV3-AvJpc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/bb476e-4d66-4672-b1e1-b19e9edcbb34/1/3kX5u4JjMlKIEVvl5OV3-AvJpc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/bb476e-4d66-4672-b1e1-b19e9edcbb34/1/3kX5u4JjMlKIEVvl5OV3-AvJpc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:cd:25:13:47:37:43:ca:8c:2f:29:03:22:c3:2c:56:f0:83:
c4:86:f5:1e:dc:98:c9:b3:34:b7:10:ee:8c:99:15:7d:2e:83:
e2:8b:37:de:6e:23:cd:be:75:63:df:ba:f5:42:2c:41:89:7e:
c1:90:c3:8d:2c:f0:2f:3c:bd:5c:05:e9:2b:72:ca:fb:84:b2:
90:c8:8b:eb:83:0d:8c:2b:7b:42:a0:c2:fb:54:08:4d:5b:b4:
1b:0d:a9:b0:d0:f6:7b:09:4b:cd:6b:82:e8:f5:4b:8e:49:ab:
b1:10:25:ce:4d:a6:50:b1:59:a9:58:ed:46:aa:ec:d4:98:35:
05:49:06:57:5c:db:db:fb:fb:ed:1b:12:9e:8f:02:16:ac:0c:
2c:20:1c:8a:2c:c9:c8:1e:3b:33:bb:34:7c:8b:47:48:0e:0e:
3f:ff:a1:1e:0b:e1:b0:28:1a:57:4d:a6:09:bd:bb:2b:11:3d:
fe:5a:ce:cc:4a:45:75:61:bb:70:42:ff:10:4b:76:36:c0:97:
42:f8:8a:9b:f6:57:9f:dd:b4:b4:13:87:c0:31:7b:3f:f1:c7:
8f:16:89:50:72:b6:43:0e:76:01:79:89:23:59:69:c1:c6:99:
05:41:05:77:59:d6:eb:d9:cc:3c:09:3f:aa:2e:a6:c5:8e:88:
20:fe:7c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:04:29 2026 by rpki-client