Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
File: 3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft (raw, json)
Hash identifier: 0Vl+RJdq+yDtRPr3V9oX9cqil7j/pcUkfUCgnxoXcJk=
Subject key identifier: AE:7B:90:6C:C1:C6:A9:2D:3C:5E:E3:59:12:F5:F1:59:A5:98:A0:58
Authority key identifier: DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94
Certificate issuer: /CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894
Certificate serial: 01A129FAE9BF94191B72F348A41AC0F5B64C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
Manifest number: 1A9B
Signing time: Sun 11 Oct 2026 08:01:11 +0000
Manifest this update: Sun 11 Oct 2026 08:01:11 +0000
Manifest next update: Mon 12 Oct 2026 08:01:11 +0000
Files and hashes: 1: 3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl (hash: RnfeoTBLmnWfkVLchgsm8Zu5F3oV9/6yT8nuffta4eg=)
2: nFQlym1aMKDG1iZXPXNlMoKyhB0.roa (hash: r3sbYclJIQsvLQBD+qrAOMivPnh7tcPSSaMitIINazI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:fa:e9:bf:94:19:1b:72:f3:48:a4:1a:c0:f5:b6:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9572fcbd665f72e00e5ffdb8db802d1cbec894
Validity
Not Before: Oct 11 08:01:11 2026 GMT
Not After : Oct 12 08:01:11 2026 GMT
Subject: CN=ae7b906cc1c6a92d3c5ee35912f5f159a598a058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:09:ab:11:4c:0e:6f:d8:a6:76:28:c2:0f:1c:
2f:80:af:1a:df:d3:1b:cd:4e:28:7e:ee:d2:11:07:
70:e4:8a:57:a0:9c:88:bc:e6:e9:53:78:4b:41:a1:
5d:67:05:bf:56:61:7c:4f:5e:d1:86:74:36:f3:3c:
e3:45:80:c5:b4:2f:83:57:35:b3:8b:11:9e:d9:20:
95:cd:f6:4d:9f:c3:63:e8:fa:ec:9e:98:bb:03:64:
49:16:81:74:4a:7f:ce:da:09:0c:27:8c:44:69:16:
ed:23:4a:f0:04:41:7e:a8:83:ee:8d:68:2b:70:84:
05:83:85:c3:8a:18:27:2e:29:6c:9d:ec:64:0b:f4:
80:df:23:67:57:67:33:4b:a9:a0:18:3f:89:ce:d0:
fa:ed:5d:6f:cd:e7:5b:2d:d7:2c:f4:e0:3a:f9:22:
6b:c5:00:ee:ec:d1:d6:67:07:fa:b2:3a:09:96:72:
8b:e5:d3:9f:90:bc:fe:75:30:18:c2:fc:c8:fa:82:
cb:3f:64:15:9c:aa:e0:af:14:ff:d3:67:e6:9d:b8:
cf:b5:7c:54:49:19:4d:ae:13:29:c1:3d:a0:15:cf:
19:0d:da:a9:48:db:5b:9d:aa:b8:90:71:85:ed:02:
4f:8e:e8:21:4b:45:57:0a:b1:8a:34:dd:a4:d4:cb:
42:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7B:90:6C:C1:C6:A9:2D:3C:5E:E3:59:12:F5:F1:59:A5:98:A0:58
X509v3 Authority Key Identifier:
keyid:DE:95:72:FC:BD:66:5F:72:E0:0E:5F:FD:B8:DB:80:2D:1C:BE:C8:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pVy_L1mX3LgDl_9uNuALRy-yJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/792200-2da0-41bf-8587-a92934cb1de8/1/3pVy_L1mX3LgDl_9uNuALRy-yJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:25:e2:cd:3b:96:65:56:46:73:ab:ad:3a:b5:41:82:78:20:
81:4f:1a:97:72:be:5c:08:fc:3e:a1:ca:3c:c0:9d:da:83:e9:
e1:84:09:2c:79:95:95:08:41:83:b4:43:0a:05:37:43:cd:f4:
6f:90:be:6a:46:db:85:ca:ea:18:a1:15:6e:aa:8c:d4:e7:31:
7d:88:46:cf:11:f2:c5:94:92:31:da:28:b9:39:ad:08:11:c7:
be:32:5c:1f:0f:7e:8b:94:72:96:61:4c:1b:1b:04:f2:aa:db:
63:ca:f8:06:05:39:0f:9d:ed:54:6c:33:8e:97:b2:3f:f1:a1:
af:ff:66:7d:4a:81:50:01:49:7c:a7:21:f9:a2:d9:3f:d0:f2:
6e:08:58:fa:00:1c:14:5b:1e:dd:a6:9c:82:a8:0c:d9:8a:1d:
c6:4c:44:b9:c2:fe:c8:d2:98:48:2b:8f:68:47:e7:f5:08:62:
fd:b8:2f:57:e9:a5:44:04:79:36:ae:87:a1:85:e0:cf:b3:bd:
79:a6:e6:28:fe:1f:3a:7c:0d:fb:d1:ff:56:51:4d:67:84:f7:
a5:56:59:bd:e9:fc:f2:14:40:29:22:4d:4e:32:d3:1f:7a:e8:
d9:fd:9f:78:85:4f:a7:ee:75:66:dd:fc:02:84:54:c0:15:b8:
4b:aa:2f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:23:34 2026 by rpki-client