Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
File: 3iuimqARP6_TcNhl-0REmHtHMIo.mft (raw, json)
Hash identifier: uQabq1I6MxVIyQw8U5dRyIiIWu6cER0dOM1z8lmamDU=
Subject key identifier: 61:42:3F:79:F7:55:00:62:31:AF:BF:49:F8:8D:51:04:A3:73:76:69
Authority key identifier: DE:2B:A2:9A:A0:11:3F:AF:D3:70:D8:65:FB:44:44:98:7B:47:30:8A
Certificate issuer: /CN=de2ba29aa0113fafd370d865fb4444987b47308a
Certificate serial: 01A0CE5AA5E943304B61DA8C7803B67EE682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
Manifest number: 0ED6
Signing time: Wed 23 Sep 2026 13:00:42 +0000
Manifest this update: Wed 23 Sep 2026 13:00:42 +0000
Manifest next update: Thu 24 Sep 2026 13:00:42 +0000
Files and hashes: 1: 3iuimqARP6_TcNhl-0REmHtHMIo.crl (hash: MDBeW/rOXPWAT+ZIfpbfiCi+h7Fy9f8hT7cA+Wt+UWI=)
2: c52XhO4YGCrU48r6aoFS0wJifx0.roa (hash: 4+paDSnGo7aoDvCfZSAugeN0kcY8+2h3yijdRS9k2EQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:a5:e9:43:30:4b:61:da:8c:78:03:b6:7e:e6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2ba29aa0113fafd370d865fb4444987b47308a
Validity
Not Before: Sep 23 13:00:42 2026 GMT
Not After : Sep 24 13:00:42 2026 GMT
Subject: CN=61423f79f755006231afbf49f88d5104a3737669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:48:39:5c:cf:c8:dd:4c:db:70:78:1c:5f:ac:
41:35:4a:db:27:71:e5:ff:de:95:19:bd:72:38:64:
bb:b5:e8:09:9e:bb:16:f6:72:e2:26:25:fb:5c:ab:
0e:f3:dd:02:4c:da:69:5c:7f:49:cc:90:9a:71:a4:
80:66:e0:ca:03:1f:7a:2d:44:30:29:5e:35:5a:e5:
45:7e:05:21:f8:f7:9b:83:10:95:fb:d2:e4:65:8a:
94:e5:af:8e:59:ea:d5:28:7d:d4:5d:92:f7:da:0a:
31:dc:01:f4:fb:b0:be:6b:ba:57:87:33:3b:00:af:
df:8c:6a:c8:1c:6a:48:77:bc:de:76:6a:ad:db:9b:
3f:4d:a3:a3:f1:cb:6f:3e:aa:39:fc:49:45:bf:9a:
af:95:f0:e5:00:63:e3:db:12:ec:c2:a8:61:68:f6:
a2:1c:d8:d1:65:9c:a9:0b:69:f2:8c:dc:d7:88:7f:
6c:8b:ae:9a:96:09:ef:4c:64:0e:87:cf:75:61:36:
ff:51:93:11:e8:39:11:69:bf:28:a5:a5:ea:6a:f9:
a4:ea:b3:e1:e3:5d:1c:d0:0f:e6:2d:42:c1:53:d0:
65:92:ad:d5:47:6a:29:e7:00:3b:fc:6c:80:eb:56:
82:db:6b:c3:17:32:ee:24:92:bf:5e:f3:12:24:da:
6e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:42:3F:79:F7:55:00:62:31:AF:BF:49:F8:8D:51:04:A3:73:76:69
X509v3 Authority Key Identifier:
keyid:DE:2B:A2:9A:A0:11:3F:AF:D3:70:D8:65:FB:44:44:98:7B:47:30:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:71:d1:b3:1c:1d:67:bf:33:e5:96:d5:a7:9a:d8:48:92:e0:
50:e6:26:64:aa:db:d6:59:8f:f3:21:66:64:53:3c:f5:59:b8:
ed:68:9b:16:6b:1b:1d:c6:c4:64:1e:74:86:6a:a4:33:c0:5e:
b4:bf:67:52:a8:f9:ff:bf:ae:c8:d9:f3:e8:fa:5d:1d:95:b4:
8a:6e:55:e4:a0:10:3e:24:0c:e1:73:eb:85:9d:30:c5:32:55:
f2:32:a0:f2:f2:43:44:e6:5b:f9:e3:10:cd:24:10:bb:6d:41:
7c:72:27:d8:b6:3a:32:3d:07:75:3a:1f:ec:14:68:31:f2:0c:
2f:9f:b3:b3:46:75:c6:80:b4:d3:cb:f0:42:28:66:6a:41:fe:
89:e1:0a:89:e8:97:b8:86:17:02:69:3d:fb:fc:a4:8b:eb:fb:
ec:95:b3:05:97:23:55:dd:f9:ba:31:70:bc:e3:f9:a1:94:bd:
98:d0:71:54:15:74:2a:20:61:95:54:02:ba:b3:c0:b0:dd:f5:
b7:73:a0:17:bc:74:08:fb:b3:e8:d9:92:c8:0d:66:c9:61:16:
f2:c7:f9:dc:65:76:9f:ee:7a:1c:65:43:de:ae:4a:19:b5:f5:
b2:1b:7f:9c:59:d0:bb:cb:4f:d5:a9:4a:6c:13:da:d3:35:62:
a8:d5:2a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:15:27 2026 by rpki-client