Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
File: 3V8ufMLGh_WMDR9hMrstz984y2Q.mft (raw, json)
Hash identifier: C/JCnMv1XDeDd75OizmeLwiIPNbMpqSL9jdo0Mj+dN4=
Subject key identifier: 8A:6B:E1:B9:AA:8E:E4:D4:A0:6B:06:D0:7E:CC:90:39:F1:43:24:17
Authority key identifier: DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64
Certificate issuer: /CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
Certificate serial: 01A1C28AA8D57190B6FFB5BABE84BAF50DA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
Manifest number: 1AFA
Signing time: Mon 09 Nov 2026 23:00:29 +0000
Manifest this update: Mon 09 Nov 2026 23:00:29 +0000
Manifest next update: Tue 10 Nov 2026 23:00:29 +0000
Files and hashes: 1: 3V8ufMLGh_WMDR9hMrstz984y2Q.crl (hash: hD3m50fMySKB03U5zU4jExmng+rHSh/AXqGxL9cZ7tM=)
2: 9iXPkKQ54sHh9FCulI77t8C1PLY.roa (hash: /ecGydtHF8wvlQeIO0uuqqIOnlvcqPbpsJvKK5M4Szw=)
3: CnlOxC7_uwBkJ3v3U1fHQBRIdjo.roa (hash: qBL5SEn9bLiNiZ8kK6JPW1aDdUpSEsezqM0e+ePG6oI=)
4: g0mhvAZsLExNosr94fQnamWzRDY.roa (hash: /xN1qB7faHsczS8ezFck6vhb0aDhcJHPTlgHGBz6WiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 22:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c2:8a:a8:d5:71:90:b6:ff:b5:ba:be:84:ba:f5:0d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
Validity
Not Before: Nov 9 23:00:29 2026 GMT
Not After : Nov 10 23:00:29 2026 GMT
Subject: CN=8a6be1b9aa8ee4d4a06b06d07ecc9039f1432417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c5:64:5e:40:4d:c1:23:0d:b5:20:63:ec:95:
5f:fb:23:fb:16:d2:bd:1c:09:3d:12:bf:cf:b4:e9:
20:70:3e:09:58:bb:ed:90:ba:ba:6b:f5:59:9e:8f:
a6:2e:87:36:44:f6:96:0d:cb:85:64:c1:81:2e:d8:
90:79:c4:81:b4:0a:88:b7:f7:0a:67:95:46:0a:a6:
77:e7:4d:78:6d:c1:b7:3e:2c:1c:b6:c3:7a:00:ed:
02:d8:49:ad:65:76:39:aa:d1:ce:ef:f7:7d:62:30:
bc:99:cc:60:34:45:9c:d7:76:10:54:f2:c1:a1:a8:
0d:cb:3f:37:91:b7:14:69:92:5c:32:a2:a2:f5:2a:
e4:0d:36:cd:97:9e:d8:41:de:ed:fa:55:27:e0:7a:
75:32:78:45:81:b3:28:f8:bd:99:d5:91:52:8d:85:
42:d5:06:47:6c:5e:16:93:7a:16:40:12:40:36:cb:
e7:73:0b:9f:b8:a4:64:d3:28:d6:16:e8:74:5b:12:
8a:b3:de:af:18:95:8b:80:6a:41:45:bb:01:28:4e:
23:ff:88:2d:a1:26:63:21:ba:37:f6:93:05:72:3e:
c8:fb:0a:2c:ae:8a:95:ec:fa:10:23:c2:6e:5f:67:
8a:df:66:9a:04:fe:49:ca:4f:aa:3a:7d:0e:61:c9:
8c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6B:E1:B9:AA:8E:E4:D4:A0:6B:06:D0:7E:CC:90:39:F1:43:24:17
X509v3 Authority Key Identifier:
keyid:DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:41:71:fc:3a:7d:ff:d0:40:b8:36:b8:f9:a3:bf:f6:29:7c:
b0:ea:d5:8a:98:c0:7c:a0:58:41:19:76:6f:62:9f:33:3e:4d:
9a:ab:ef:a1:56:ae:d0:25:ed:fa:d9:4d:e6:97:ee:90:7a:72:
ed:33:bc:6f:cc:fe:06:c0:21:b0:bb:21:0c:bd:b5:b9:2b:9d:
e6:1c:b7:35:e9:ce:ef:ce:0e:f3:30:77:a0:41:f1:00:38:73:
48:6b:04:cc:79:7a:fd:ea:20:be:9e:f1:5b:3a:9a:c4:eb:1e:
07:2b:e7:cd:a5:7d:8e:25:ac:a5:20:99:50:e5:97:d9:05:c0:
0d:de:26:c3:ba:59:e7:86:58:f6:5c:44:b5:13:79:e5:72:8d:
86:cc:d3:a5:21:c8:e9:00:ec:ba:a3:a5:09:e4:d6:93:02:19:
2a:0d:30:89:23:c5:29:8c:90:c3:98:43:a8:1e:1c:99:ba:db:
a6:59:26:22:6d:80:bd:d9:23:bb:ee:0b:41:b4:18:c0:89:21:
80:89:90:ac:f3:df:c2:67:ba:4a:3b:6b:67:3e:1b:c9:ee:39:
40:cb:e6:e8:f1:25:c4:59:5d:8f:b9:07:0e:4f:a8:65:78:bd:
70:89:2a:9a:19:bb:61:0c:04:20:97:87:d9:ad:e3:29:7c:06:
68:33:a1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 08:26:44 2026 by rpki-client