Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
File: 3SoSF2c-sRypijUTlSBAfJdo38M.mft (raw, json)
Hash identifier: v/pWwJm1J7yMT+Z81ohNdUuNEiAy3VrmjCKYN/9awcQ=
Subject key identifier: 73:9A:F2:CE:F0:BB:43:1B:44:C4:59:0A:0A:D6:3A:A6:6D:90:95:46
Authority key identifier: DD:2A:12:17:67:3E:B1:1C:A9:8A:35:13:95:20:40:7C:97:68:DF:C3
Certificate issuer: /CN=dd2a1217673eb11ca98a35139520407c9768dfc3
Certificate serial: 01A0D080600AE4D0AC7A4417EF9822B50A7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
Manifest number: 036F
Signing time: Wed 23 Sep 2026 23:01:09 +0000
Manifest this update: Wed 23 Sep 2026 23:01:09 +0000
Manifest next update: Thu 24 Sep 2026 23:01:09 +0000
Files and hashes: 1: 3SoSF2c-sRypijUTlSBAfJdo38M.crl (hash: 5L0EvMVwGQdGHd3qwcEcIxHboQUll4Q8E/axZ45Mjls=)
2: WQR-Dyl5ml38JzgsrWjiLr-jTjE.roa (hash: 8pC1xGdRfwbbzKrCgP0LBKBZ1huDVz6z9MO3fLjaue8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:80:60:0a:e4:d0:ac:7a:44:17:ef:98:22:b5:0a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2a1217673eb11ca98a35139520407c9768dfc3
Validity
Not Before: Sep 23 23:01:09 2026 GMT
Not After : Sep 24 23:01:09 2026 GMT
Subject: CN=739af2cef0bb431b44c4590a0ad63aa66d909546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:26:ad:1f:9e:e8:c3:7d:19:8d:47:7f:93:0d:
e4:a1:1d:13:38:87:46:8f:51:1c:c4:8a:17:a6:66:
f3:94:e9:06:5c:50:81:be:23:a7:0a:b4:9b:bc:c2:
f5:94:e3:d8:96:97:df:81:28:34:fd:da:55:bd:84:
36:52:f3:8f:b9:a7:50:51:01:43:59:70:ed:17:d6:
b0:4b:98:f7:03:6c:92:14:6f:0d:fd:cb:26:53:b5:
85:31:42:8a:0c:b7:6e:d5:c9:21:59:df:93:70:f9:
d4:10:68:40:10:72:ab:0d:17:00:74:7d:24:dd:91:
ad:de:fb:5f:7d:50:80:fa:6a:bd:26:b4:81:74:bd:
4d:a4:04:3f:95:7e:93:7f:be:34:10:3d:0d:42:aa:
2d:72:5b:0b:15:87:fa:63:19:e7:42:25:cb:73:aa:
8c:a9:48:53:5b:bd:dc:8a:96:65:a7:23:ab:4b:1d:
67:3c:14:79:39:c9:17:79:ac:ae:90:dc:fc:52:92:
4a:95:8f:27:ee:98:80:eb:18:10:3d:16:4a:05:c9:
41:6b:ee:a1:85:eb:77:91:2e:1b:4c:f1:33:fd:f9:
de:04:59:45:f0:60:67:d2:5b:3f:b2:12:ff:1e:67:
29:10:9c:e5:2d:30:48:8f:b6:50:5e:c2:1b:d6:52:
17:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9A:F2:CE:F0:BB:43:1B:44:C4:59:0A:0A:D6:3A:A6:6D:90:95:46
X509v3 Authority Key Identifier:
keyid:DD:2A:12:17:67:3E:B1:1C:A9:8A:35:13:95:20:40:7C:97:68:DF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SoSF2c-sRypijUTlSBAfJdo38M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4a93c6-170a-4aa2-8dfc-6b9641823ca4/1/3SoSF2c-sRypijUTlSBAfJdo38M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a9:12:b6:47:dc:45:e4:92:f2:ac:e9:42:d2:f1:47:0a:df:
52:d9:2d:f8:28:6c:2c:88:ab:4a:92:00:73:9b:ce:3a:19:30:
30:db:d1:3b:74:2b:ed:9d:f9:3c:3e:6b:b7:75:c8:b1:ac:11:
6c:f8:a3:d4:15:b8:0e:6c:d4:b6:cc:07:f1:ac:db:6c:27:43:
f0:56:c9:23:4f:4c:ed:4c:3b:29:bd:1a:0c:f6:11:43:d7:f3:
34:1e:58:3d:2d:35:a6:a4:04:c8:ef:7a:b6:16:c9:12:a8:32:
86:39:8b:e2:2c:13:5f:fc:a3:22:cd:a7:94:89:45:9c:bf:dd:
ce:e8:17:39:16:a4:d6:ed:a8:05:20:28:86:bd:c1:bd:38:5e:
69:fc:f7:47:ef:35:36:a5:5d:11:27:74:85:0c:c5:db:51:c6:
2c:22:ab:f8:f4:11:2d:66:8c:98:71:4c:28:2e:82:97:88:04:
db:d4:82:ca:28:39:fe:d8:b4:45:e6:97:f7:1b:93:f3:53:89:
71:7a:6f:8a:6e:75:76:ea:7e:f9:f8:18:a7:4b:8f:d0:63:27:
bd:39:89:6b:e4:95:39:2d:d2:3d:d5:53:6e:54:47:8f:b6:b8:
0d:2b:92:b3:f0:42:06:fe:38:f1:d4:f5:25:b6:3d:db:86:46:
41:af:29:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:05:18 2026 by rpki-client