Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
File: 3pDUMpPP6_h-fqsrDVU_0hpulkE.mft (raw, json)
Hash identifier: 7mFlCaOolAl3YJh7+KdZsC35tPT26DWwizW13ZVjZDM=
Subject key identifier: A6:13:89:D1:BB:50:A1:4E:22:83:93:34:46:13:E1:E0:AC:9C:EF:56
Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
Certificate issuer: /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Certificate serial: 01A0D23789F073F06ADAD83E4DEC66A4AF66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
Manifest number: 1A75
Signing time: Thu 24 Sep 2026 07:00:50 +0000
Manifest this update: Thu 24 Sep 2026 07:00:50 +0000
Manifest next update: Fri 25 Sep 2026 07:00:50 +0000
Files and hashes: 1: 3pDUMpPP6_h-fqsrDVU_0hpulkE.crl (hash: 4XyeJRtbFBAsVKCV8IyXi0bNjYvVLhd/+l4/Nl4pnTE=)
2: M4QUOFTfojfe9Puztb3G-E5hYsQ.roa (hash: nVwzsK/0G0L0DeqaFuH81eDkbF0VoyZV22ct2zx5OnU=)
3: dyDacYG9aeiRlaiQgtNvE4ErVUI.roa (hash: PdpYlK5IJJ0ruhbi5o/udgWox1/LLP1tGzCkyDFpfcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:89:f0:73:f0:6a:da:d8:3e:4d:ec:66:a4:af:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Validity
Not Before: Sep 24 07:00:50 2026 GMT
Not After : Sep 25 07:00:50 2026 GMT
Subject: CN=a61389d1bb50a14e228393344613e1e0ac9cef56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5b:97:d5:94:6e:18:7f:90:02:6e:6b:1d:35:
00:ca:96:68:2d:90:b0:f4:7f:e1:c2:41:83:82:30:
d3:f3:66:bd:52:c3:f0:ca:76:00:8f:d2:c6:78:6f:
1d:fc:3c:fe:c1:77:55:ff:82:69:24:af:a4:48:96:
f3:be:e3:2a:35:6b:d0:db:00:73:9a:17:8f:3c:b6:
94:9c:d2:77:b2:54:05:58:5e:bf:48:46:3c:98:bf:
4c:15:4c:ad:32:4a:5a:69:cb:12:3d:0d:22:66:84:
da:96:93:a2:c3:49:08:f9:f6:91:57:e8:d8:4b:d5:
57:ed:88:0f:5c:47:23:cf:48:fd:e3:60:a8:c3:47:
a0:e6:ad:ca:f3:f8:84:55:1f:43:8a:01:b0:a5:c8:
7c:00:a7:b4:3b:03:a9:1d:29:4e:43:88:19:4c:4e:
64:8d:31:6a:1b:07:26:19:f5:b3:59:84:bc:ff:43:
c2:68:9e:c6:7b:94:a1:cf:5c:35:7d:24:30:5c:5f:
94:af:67:88:28:27:45:f9:58:67:18:c4:ac:a0:eb:
df:cd:b2:2e:50:5b:b9:88:a2:7d:fe:8d:e4:a8:30:
b2:a1:f6:5a:e0:8d:32:8c:67:d8:e6:07:cc:dc:e9:
ea:6a:ca:4a:94:0c:89:b4:1b:85:3b:ec:03:4e:16:
10:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:13:89:D1:BB:50:A1:4E:22:83:93:34:46:13:E1:E0:AC:9C:EF:56
X509v3 Authority Key Identifier:
keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:1a:6e:84:ee:2c:1a:b0:6e:96:dd:73:dd:15:93:aa:34:1f:
c9:72:e6:fc:c5:f1:4d:37:81:a2:25:cd:f6:b6:23:a2:ff:be:
bc:43:84:6d:1b:00:e2:ab:62:e7:b9:c6:10:40:f5:52:9d:34:
e8:a1:24:3c:e8:d6:f8:35:b0:73:ad:8d:da:48:17:0e:5d:e6:
b9:16:85:d7:02:d4:74:f8:37:6e:10:1a:b4:14:9d:73:87:76:
56:4e:3a:13:dd:1a:75:59:f7:11:4a:8b:83:6a:75:a1:6d:a3:
73:33:ef:31:f0:24:fc:77:da:8a:65:09:a2:23:60:be:84:69:
98:94:26:b6:ab:39:b8:f7:7d:46:90:71:fd:32:12:de:4f:cf:
f9:1d:f6:d5:f1:d0:51:dd:da:55:5a:10:6b:fb:5e:f0:8b:5b:
11:b6:f4:ec:b8:7b:52:f8:ca:fe:e4:17:c0:fa:ff:0e:2c:08:
28:c9:39:9b:0a:5e:df:f8:e6:4c:7f:fb:2d:ab:4d:17:38:26:
c9:91:d8:ba:6f:e0:ad:b4:b3:63:78:41:ad:91:45:44:18:62:
29:a8:38:bf:33:05:d0:9c:c8:21:31:68:0a:fb:90:8a:a4:48:
62:dd:34:41:19:6e:11:b5:20:97:ad:16:f5:15:7f:7f:f9:35:
63:ed:16:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:37:34 2026 by rpki-client