Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
File: 3c6wiktA8fheTroXzcfIPke7WX0.mft (raw, json)
Hash identifier: VW2I311i1eOdUYGIdynLw39R+zawz7hwT7azkKetoIY=
Subject key identifier: 41:07:EA:05:81:D5:E6:B6:B0:76:FF:5C:DB:84:4A:90:FC:12:29:F7
Authority key identifier: DD:CE:B0:8A:4B:40:F1:F8:5E:4E:BA:17:CD:C7:C8:3E:47:BB:59:7D
Certificate issuer: /CN=ddceb08a4b40f1f85e4eba17cdc7c83e47bb597d
Certificate serial: 01A1C668885B94EFD42A0B8B7D137DFC9BA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
Manifest number: 1060
Signing time: Tue 10 Nov 2026 17:01:41 +0000
Manifest this update: Tue 10 Nov 2026 17:01:41 +0000
Manifest next update: Wed 11 Nov 2026 17:01:41 +0000
Files and hashes: 1: 3c6wiktA8fheTroXzcfIPke7WX0.crl (hash: HS8hmNtKErvLKooC/qvuaGLX/vivpVq5qGjz1S4/U/Y=)
2: beU-evce9w8RpnlnhExOwqlTqVk.roa (hash: CxYZfkZx1/BXf+X3x5D+cUabOXDyrgunzk0Oi/R5nlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 16:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c6:68:88:5b:94:ef:d4:2a:0b:8b:7d:13:7d:fc:9b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddceb08a4b40f1f85e4eba17cdc7c83e47bb597d
Validity
Not Before: Nov 10 17:01:41 2026 GMT
Not After : Nov 11 17:01:41 2026 GMT
Subject: CN=4107ea0581d5e6b6b076ff5cdb844a90fc1229f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:00:32:0c:67:09:61:bb:c5:08:08:7a:2c:af:
f4:f3:29:b3:f1:22:5e:69:6a:74:2f:26:cd:51:1b:
7e:c5:b4:28:27:1b:8c:af:0f:e5:9d:97:4c:62:58:
39:f9:40:b2:e1:2e:a7:d7:72:6d:07:40:12:7c:1c:
3b:e1:c9:7e:f9:bd:b0:59:ff:16:7e:5b:79:75:2e:
24:2e:fc:b8:fe:bf:e4:a3:1f:78:62:04:a9:1b:4b:
cd:ef:b7:e3:f5:be:f6:c7:21:70:23:44:fd:4c:a6:
d7:09:37:52:5d:0c:9c:25:cd:22:0c:7a:35:ef:3a:
6d:f3:7f:5c:4f:d6:cb:2a:f3:bf:9b:f5:ae:0b:15:
a4:9c:d8:12:ac:b7:cb:15:d6:e2:a5:58:9a:22:c0:
fa:10:85:57:93:ff:99:31:d2:08:dd:f2:31:29:03:
53:fb:15:74:f6:99:8c:1f:2f:76:9a:1f:f5:35:2a:
1f:ec:46:8e:2a:dd:fb:f8:27:3e:00:66:ad:5e:13:
24:9e:cf:84:f0:43:5f:64:bb:72:36:c3:23:8d:15:
05:e7:dd:33:2b:f1:bc:76:94:9b:a6:ba:c5:a2:53:
0b:ec:2b:4e:a3:7e:bb:a5:e7:30:d5:43:1e:08:ba:
dc:72:3c:9b:72:07:ff:d6:0e:37:3f:8e:85:5c:d6:
a6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:07:EA:05:81:D5:E6:B6:B0:76:FF:5C:DB:84:4A:90:FC:12:29:F7
X509v3 Authority Key Identifier:
keyid:DD:CE:B0:8A:4B:40:F1:F8:5E:4E:BA:17:CD:C7:C8:3E:47:BB:59:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c6wiktA8fheTroXzcfIPke7WX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/92b0df-e0db-4276-8334-8db944e13810/1/3c6wiktA8fheTroXzcfIPke7WX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:bb:a9:80:e3:f6:e9:a0:b1:e9:61:0e:79:9a:ca:09:ff:c8:
42:f4:a3:d5:da:b7:d0:e1:c2:93:5c:ca:79:c4:e1:e4:fd:77:
6b:e7:8d:b8:d1:98:e4:73:85:6b:5c:7d:15:ed:56:60:c5:33:
d0:ac:b6:b2:9b:b2:8b:8f:ce:94:5f:3b:aa:d8:4c:13:c9:13:
0b:64:66:d4:de:cb:b3:c7:7e:e7:5a:d6:46:96:d7:7a:0b:04:
5a:2e:29:d9:79:b7:0d:a8:c1:1d:00:3e:0d:b4:81:92:a3:10:
82:20:aa:c7:19:3d:6a:c6:3f:9f:d2:c9:9c:79:01:d2:49:b5:
5e:a9:53:83:5f:14:79:ed:42:c3:6b:cf:54:43:f1:9f:c1:bc:
bc:c5:a8:48:08:ee:68:02:23:17:49:67:c3:59:a3:20:66:bc:
8f:6e:79:f7:61:eb:17:0e:8b:07:92:4d:d2:13:c4:36:02:99:
06:6f:6b:43:eb:b5:f7:82:25:5b:e3:ce:14:53:43:48:16:ec:
49:87:59:b8:e0:9b:dc:a2:04:c5:73:27:df:09:30:c0:f2:02:
fe:79:6c:5b:79:75:36:fb:97:59:05:21:cd:ce:b5:e6:33:19:
eb:96:96:61:d7:e1:c1:2c:1e:f1:0b:26:68:37:ea:2e:e0:ac:
f5:18:75:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 04:05:16 2026 by rpki-client