Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/993f7b-d970-4d0c-af35-260ff107ee75/1/3OXgIlmwLxipnQnkvc5BnGrgo7g.mft
File: 3OXgIlmwLxipnQnkvc5BnGrgo7g.mft (raw, json)
Hash identifier: jKB2HF5ghsjAsdzbkBfj0X6YD/FpVlP/yOPjuWDzjwQ=
Subject key identifier: A2:1F:4B:74:B4:31:D9:6D:DA:3E:E0:AC:2B:A1:5D:E1:61:22:73:33
Authority key identifier: DC:E5:E0:22:59:B0:2F:18:A9:9D:09:E4:BD:CE:41:9C:6A:E0:A3:B8
Certificate issuer: /CN=dce5e02259b02f18a99d09e4bdce419c6ae0a3b8
Certificate serial: 01A0D983AAB80BEB3531E85CE9029CC8E08A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OXgIlmwLxipnQnkvc5BnGrgo7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/993f7b-d970-4d0c-af35-260ff107ee75/1/3OXgIlmwLxipnQnkvc5BnGrgo7g.mft
Manifest number: 01A8
Signing time: Fri 25 Sep 2026 17:01:19 +0000
Manifest this update: Fri 25 Sep 2026 17:01:19 +0000
Manifest next update: Sat 26 Sep 2026 17:01:19 +0000
Files and hashes: 1: 3OXgIlmwLxipnQnkvc5BnGrgo7g.crl (hash: df23s0hNEJTGoxYAxJSgYCx6wRchwuCM1o35RxFD6S8=)
2: dzwsdq_p19qeWq1sVjAo8n8DF3A.roa (hash: ypz0q9rJFOFUluO/EXbahQLlxxipPvEZdWT5c5RYe/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/993f7b-d970-4d0c-af35-260ff107ee75/1/3OXgIlmwLxipnQnkvc5BnGrgo7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/993f7b-d970-4d0c-af35-260ff107ee75/1/3OXgIlmwLxipnQnkvc5BnGrgo7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OXgIlmwLxipnQnkvc5BnGrgo7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:aa:b8:0b:eb:35:31:e8:5c:e9:02:9c:c8:e0:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce5e02259b02f18a99d09e4bdce419c6ae0a3b8
Validity
Not Before: Sep 25 17:01:19 2026 GMT
Not After : Sep 26 17:01:19 2026 GMT
Subject: CN=a21f4b74b431d96dda3ee0ac2ba15de161227333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:64:e0:10:87:b2:3c:7b:a9:cf:5a:8d:d7:68:
b7:28:36:2d:54:32:10:6a:7f:e1:6d:81:97:14:42:
fd:d9:97:af:e1:95:5c:9d:69:fb:ff:3a:ec:36:a3:
4f:e8:d9:88:17:62:38:ee:1a:dd:49:5d:8d:3c:f4:
21:d1:36:23:ea:6a:20:47:b9:76:5e:09:91:c3:71:
14:ff:57:a7:24:46:22:0f:9c:e0:a5:25:cd:d0:ab:
fe:44:d3:98:db:50:67:51:e4:35:a2:fc:5c:0f:b2:
f3:32:24:76:e5:a1:fb:9e:54:2c:32:85:45:31:f9:
e0:10:e8:0e:28:e3:f1:57:6e:b2:0a:9d:7e:58:01:
0d:04:c5:9c:a1:98:d9:b9:79:25:79:51:26:a3:ca:
df:7a:9d:61:f6:e9:ad:e4:3c:ee:0b:d6:f0:fb:ca:
ab:ca:67:22:88:09:f6:2e:02:f4:31:8d:a2:fe:16:
8b:4c:04:4e:51:e0:36:69:00:bc:c5:2b:06:e7:25:
10:f9:65:06:ce:4d:61:4f:5a:69:e2:54:81:e8:e5:
e2:87:99:a8:f4:5b:b0:f0:87:a3:30:01:4f:c1:b1:
8e:bc:9d:60:3c:93:3d:fd:4f:67:8a:20:b5:c6:9a:
0d:cc:72:52:0b:4e:7e:28:8b:1e:da:2b:13:15:b5:
8a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1F:4B:74:B4:31:D9:6D:DA:3E:E0:AC:2B:A1:5D:E1:61:22:73:33
X509v3 Authority Key Identifier:
keyid:DC:E5:E0:22:59:B0:2F:18:A9:9D:09:E4:BD:CE:41:9C:6A:E0:A3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OXgIlmwLxipnQnkvc5BnGrgo7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/993f7b-d970-4d0c-af35-260ff107ee75/1/3OXgIlmwLxipnQnkvc5BnGrgo7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/993f7b-d970-4d0c-af35-260ff107ee75/1/3OXgIlmwLxipnQnkvc5BnGrgo7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:85:6e:8b:18:37:70:20:1d:c9:eb:c1:c3:e0:65:ed:04:ca:
bb:06:7c:2c:25:3d:fd:16:31:9a:b7:d7:af:b7:71:93:92:63:
4b:65:12:b3:c8:70:d8:cf:cc:58:2b:4c:99:8f:3b:0a:74:ab:
47:d0:7f:8f:49:5a:42:08:0e:bc:fb:ba:20:bb:72:33:47:01:
d4:41:61:6f:b0:cd:dd:7f:f6:4f:14:dd:fd:de:3a:2d:8f:d4:
c6:73:95:1d:68:ff:7a:e7:2c:9c:74:c8:3a:f5:db:32:af:e4:
32:4b:50:55:5c:c0:68:ab:bc:2a:df:e0:5e:6a:df:80:b5:48:
77:9e:82:10:3b:8c:d8:fc:9a:f7:58:7d:23:fb:81:b3:e9:83:
8b:8d:e6:b7:36:aa:dd:d0:91:59:d8:05:1d:ca:69:c7:93:ed:
bd:15:8a:2f:ff:09:04:59:67:f5:e5:f6:7f:d5:65:09:73:b4:
e9:78:0d:3a:21:e6:10:aa:80:bb:92:be:b3:2f:db:e7:49:8b:
1f:6c:f2:c0:18:b7:d4:a7:2b:1e:a7:ba:81:b4:06:7c:b9:33:
fd:0f:35:80:75:bd:6a:de:fd:26:ce:da:81:b9:0c:ed:c0:d1:
02:51:a1:7c:30:3c:e1:48:35:d6:e8:95:00:e6:81:60:c2:93:
b5:0c:6a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:07:29 2026 by rpki-client