Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
File: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft (raw, json)
Hash identifier: RMdZYjILKkM+l7h/706pJMxE4juusPHqDuY0i2mqQjA=
Subject key identifier: 44:20:64:58:8A:80:06:B2:67:38:8C:BC:BB:F5:69:A5:8E:84:20:CB
Authority key identifier: DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
Certificate issuer: /CN=de51da32762a6f9c126d63ba705d62c050b8484e
Certificate serial: 01A0DB3AFD4A9A4CF9BE10539CCEAD74860E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
Manifest number: 1A70
Signing time: Sat 26 Sep 2026 01:01:11 +0000
Manifest this update: Sat 26 Sep 2026 01:01:11 +0000
Manifest next update: Sun 27 Sep 2026 01:01:11 +0000
Files and hashes: 1: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl (hash: 8mIK1E12T8HQ4Jb8rRJFGORzJ1JHkNPU035kGRKBqZc=)
2: 8J_-hWHGPWEYN0vjZgr-eCklQg4.roa (hash: qBQWLHkgusN1QQCqlJvTYnenuo1KralG8LLl2synFhs=)
3: elKDEgk9yKtQtzq3PdJ4l_cpSZQ.roa (hash: 8uKk6fr9oWkQeVcBDQrXHD0Zpv9/C37D7zWtE6D01OI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3a:fd:4a:9a:4c:f9:be:10:53:9c:ce:ad:74:86:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de51da32762a6f9c126d63ba705d62c050b8484e
Validity
Not Before: Sep 26 01:01:11 2026 GMT
Not After : Sep 27 01:01:11 2026 GMT
Subject: CN=442064588a8006b267388cbcbbf569a58e8420cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:11:cd:5d:71:29:7d:3f:a6:1c:e9:f8:dc:24:
ef:ba:69:0c:6f:82:f9:f4:62:2f:d9:5c:f4:ff:63:
78:66:a5:a1:4c:00:85:59:04:69:e3:6b:e3:61:4d:
62:83:08:57:37:95:87:5d:9e:be:ab:f8:6b:26:da:
c7:86:aa:46:29:70:ae:43:20:f5:94:f7:e9:3e:97:
e0:eb:23:28:76:87:e7:c7:7a:12:c5:66:20:28:54:
f1:93:f3:33:8b:0f:95:55:c3:fc:d8:23:cd:fa:52:
a0:ae:c9:4c:0a:06:29:95:c5:26:fa:8e:c4:8d:32:
0e:b3:fe:51:ea:d1:7d:02:d1:9d:0f:03:f2:5a:42:
9d:0f:f5:a9:aa:99:7f:75:61:7f:b1:45:c1:1b:e9:
a5:a2:14:52:9a:59:64:0c:1d:86:d4:f0:19:2a:ed:
4c:87:fd:b0:57:89:1a:db:04:da:f3:9e:e8:95:a0:
7c:f9:e7:8b:1e:21:5b:a5:b6:99:6c:4d:5b:2b:64:
e9:52:89:43:8b:10:9e:af:dc:0c:65:2a:b5:49:c9:
27:7a:de:4b:b8:b5:eb:f2:9f:5b:87:e7:7a:c5:b0:
86:7a:00:4e:20:dd:c1:c8:96:b0:91:15:3d:3a:7a:
9d:af:30:17:58:d5:f4:02:ef:90:76:e7:01:ad:a7:
13:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:20:64:58:8A:80:06:B2:67:38:8C:BC:BB:F5:69:A5:8E:84:20:CB
X509v3 Authority Key Identifier:
keyid:DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:6f:4e:94:5d:a5:f4:ac:e4:06:93:68:90:f0:1d:78:21:93:
f3:46:05:ae:d4:ed:38:a0:a1:60:5d:e6:f3:c3:60:f5:84:d3:
66:07:0b:fc:5e:e0:b3:15:ed:68:92:d8:cf:52:f7:51:f5:b9:
1f:0e:a6:28:bb:0e:a7:21:0e:43:18:98:fc:84:37:f1:43:a7:
24:ae:57:de:1f:32:c4:c8:06:c9:03:d5:2e:14:6a:06:32:f9:
79:0d:d0:07:4d:3c:f8:04:2a:67:99:35:e9:22:1e:e6:5f:38:
b3:16:04:ae:af:56:aa:c8:b1:17:01:a3:65:35:ac:ba:e0:40:
4a:b8:fc:8d:5d:91:d8:a6:9b:6a:a9:a4:07:f9:ae:b4:0c:27:
8e:c4:09:3a:4c:90:d4:c0:44:78:31:9a:b8:c2:61:30:a3:37:
15:f3:b4:4c:dc:32:3c:02:41:f2:9c:6b:3e:b3:12:3f:e4:af:
bf:b4:9a:2a:d7:ca:c2:55:65:2f:15:bc:f7:86:1e:2d:f4:e0:
a6:cf:2a:ba:63:84:97:7c:65:7f:72:e9:29:d0:2d:bc:b3:38:
79:4e:65:fe:91:22:e5:d7:0e:00:99:35:79:ee:6f:4e:ab:17:
db:15:9f:c8:e1:36:d0:d4:d0:a1:b7:db:58:36:e7:df:77:db:
9c:0a:d3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:01:21 2026 by rpki-client