Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
File: 3keU2fyrI-wF3d1QSKP8cgQAKio.mft (raw, json)
Hash identifier: GdVTpxqlKlgow4aBwXTrxY5pdK6lYSClke3AxO22mmM=
Subject key identifier: 86:D0:47:80:B8:BC:A2:6A:5A:CC:99:EE:C3:7D:41:14:A6:39:35:B8
Authority key identifier: DE:47:94:D9:FC:AB:23:EC:05:DD:DD:50:48:A3:FC:72:04:00:2A:2A
Certificate issuer: /CN=de4794d9fcab23ec05dddd5048a3fc7204002a2a
Certificate serial: 01A0D87275F6722CDADC4387611B2307171D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3keU2fyrI-wF3d1QSKP8cgQAKio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
Manifest number: 139F
Signing time: Fri 25 Sep 2026 12:02:54 +0000
Manifest this update: Fri 25 Sep 2026 12:02:54 +0000
Manifest next update: Sat 26 Sep 2026 12:02:54 +0000
Files and hashes: 1: 3keU2fyrI-wF3d1QSKP8cgQAKio.crl (hash: 7eUojK0KI8pjvq9k45mxhRpbXVOlHpJqfNTfU2LZEVE=)
2: kZWW_ntfYvdgmDKHXouZXpr8UMU.roa (hash: pybDSm/TxiDymAX06iB+SSYkpRn7EWk4DKtBzvh17SE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
rsync://rpki.ripe.net/repository/DEFAULT/3keU2fyrI-wF3d1QSKP8cgQAKio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:75:f6:72:2c:da:dc:43:87:61:1b:23:07:17:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de4794d9fcab23ec05dddd5048a3fc7204002a2a
Validity
Not Before: Sep 25 12:02:54 2026 GMT
Not After : Sep 26 12:02:54 2026 GMT
Subject: CN=86d04780b8bca26a5acc99eec37d4114a63935b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e4:a8:91:82:da:24:37:f6:c8:6b:bf:69:3e:
43:3b:72:b7:16:07:d1:b9:20:08:3a:86:52:46:33:
58:7e:b3:13:b2:53:44:1d:73:45:f8:3d:8d:07:5d:
c5:6a:fe:13:8c:78:62:66:a5:ff:e6:bc:11:0b:5a:
80:2e:1e:cd:63:3b:64:78:b1:57:d5:06:4c:9e:c4:
82:55:1a:da:c3:8c:4a:bb:8c:69:e8:91:8f:a7:92:
ee:22:f4:3d:f5:96:a3:84:21:af:72:9b:54:8f:02:
92:bf:28:c5:8c:6e:85:14:ec:ee:57:b2:b9:b5:c3:
e8:72:5a:83:c8:c7:05:4a:9b:e2:dc:59:60:c5:14:
fc:7b:52:61:65:4a:4b:44:24:44:3d:30:2e:1f:91:
c2:82:fd:66:70:82:f8:f6:9f:20:86:b6:35:a3:a0:
f7:94:66:f9:ff:db:9d:d1:21:6e:88:a3:8e:ac:5d:
b9:8e:fd:8c:99:b1:8b:d1:15:05:a0:16:14:96:97:
f1:99:6b:bf:4b:27:5e:13:06:2d:fc:06:e2:bd:9d:
97:d7:8e:d6:2b:22:83:33:58:e0:b1:ec:e8:4e:f9:
6b:68:ec:6e:8f:09:4a:f1:9c:b1:6f:af:a0:b3:55:
b3:06:dd:e9:1d:e5:ff:c3:57:e1:a0:84:69:5a:2e:
c7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D0:47:80:B8:BC:A2:6A:5A:CC:99:EE:C3:7D:41:14:A6:39:35:B8
X509v3 Authority Key Identifier:
keyid:DE:47:94:D9:FC:AB:23:EC:05:DD:DD:50:48:A3:FC:72:04:00:2A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3keU2fyrI-wF3d1QSKP8cgQAKio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0800fe-9bd2-488b-8c42-f011293953f5/1/3keU2fyrI-wF3d1QSKP8cgQAKio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:04:19:49:a3:ef:b5:2b:5b:40:d8:3f:67:5b:f3:a1:67:b0:
ff:27:48:a8:3e:c9:ea:f1:55:2f:2e:1b:a3:0f:23:fe:0b:e4:
0d:78:65:70:b9:3e:c9:95:ea:f5:f3:81:ab:c1:5d:1e:41:52:
e7:2a:26:f3:8f:74:d0:92:c2:ca:3b:35:73:3b:fe:ac:df:f1:
dc:6b:2b:6e:6f:f1:77:e5:28:d0:9f:66:08:1b:8b:79:8b:75:
4f:a2:4e:6a:d3:c6:86:2d:d0:6d:cb:6e:3a:e7:29:de:a8:57:
31:9b:e6:4c:8d:89:53:f6:d7:5f:93:e8:9e:8e:7a:9d:8b:44:
5b:c0:ae:c1:80:b9:6a:7e:28:e8:fb:50:9b:53:4a:a4:4d:e2:
21:81:74:eb:f3:88:92:5e:bc:a5:01:0e:20:5c:9c:a5:67:3f:
29:b4:cc:ee:16:e3:14:7d:bc:4b:73:e0:3a:7d:3a:03:b5:0b:
bb:67:01:1e:b0:6e:58:f2:58:3f:18:54:d7:df:2f:15:0b:01:
f5:c4:66:67:43:07:91:cf:cb:8c:4e:68:77:d3:d7:b7:e4:67:
89:e2:9b:ae:f4:75:13:21:1a:fa:88:7b:17:e8:c6:8e:56:5d:
5d:ec:91:82:69:52:6d:af:c8:03:a1:70:4b:54:9f:48:9a:d7:
59:4e:1e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:59:38 2026 by rpki-client