Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
File: 3MstX7JThS8YI8ZUNOjydtBOTgw.mft (raw, json)
Hash identifier: FrV+x8BfMJUQ7/Ko0z9rzFcyXtF0TWijERBlMpGnX6E=
Subject key identifier: 15:D8:03:23:BA:40:82:11:B2:E7:0D:55:FE:44:92:63:3C:98:EA:8D
Authority key identifier: DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C
Certificate issuer: /CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
Certificate serial: 01A1C40BC612D4976E811BE44C3DD2CF10F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
Manifest number: 1AF9
Signing time: Tue 10 Nov 2026 06:01:08 +0000
Manifest this update: Tue 10 Nov 2026 06:01:08 +0000
Manifest next update: Wed 11 Nov 2026 06:01:08 +0000
Files and hashes: 1: 3MstX7JThS8YI8ZUNOjydtBOTgw.crl (hash: QvuHNUbhZ2TS3LRRqnRc6EZNowoHh/jyw9UzKhKgq6U=)
2: 9zaCEl1SgGOc-A7zIR9SmhOUbCA.roa (hash: eFtzjl4+/9tlA7bC6sKrJsHMLsAxLeLlfmditC5aZTs=)
3: _QaXkGOzguH_3SYFNe1d3y7B2Tw.roa (hash: KztSdz5ODte8K6guWxzrXZlYDG1F2rVO/Vqml3J+Q0o=)
4: fsnKswSMyeM4OK2o8J_ZzwwYiiI.roa (hash: tWk+nFmUcDykdNhoUyVPw1UFkRx/3AJQMBQrLxH1g5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:0b:c6:12:d4:97:6e:81:1b:e4:4c:3d:d2:cf:10:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
Validity
Not Before: Nov 10 06:01:08 2026 GMT
Not After : Nov 11 06:01:08 2026 GMT
Subject: CN=15d80323ba408211b2e70d55fe4492633c98ea8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:85:07:ee:ed:0c:e6:cd:07:0b:ce:31:57:29:
c7:91:50:ce:ad:21:7f:17:c4:07:02:28:fb:2d:24:
2b:9f:58:f1:fd:c2:8c:7a:2d:63:0f:92:98:58:21:
4c:05:90:6e:2e:df:c8:b4:9e:ca:c0:eb:a1:e9:f8:
58:54:7b:8f:ed:4c:f8:d4:f8:3d:59:66:b0:46:28:
ce:48:2d:86:be:70:f4:a9:8b:dd:79:e0:4e:9c:9e:
48:75:d8:3f:b2:8a:46:a4:3c:d0:b0:3e:2c:27:63:
7f:7e:91:96:e8:35:44:ed:2a:0d:24:a0:bb:c3:15:
4f:72:ce:be:ed:00:16:0f:2f:99:31:20:61:50:72:
e5:c7:aa:31:cf:87:a7:12:8e:3b:7e:90:aa:3e:f4:
b9:41:27:e6:5f:5f:f3:9c:cc:73:78:7a:3b:0c:5e:
1c:91:4d:93:45:d8:86:03:69:ed:75:09:ef:ce:cd:
96:0b:f0:2e:aa:ee:90:dc:76:47:36:86:3d:84:58:
8b:7e:7c:7b:ec:c0:41:f0:ae:69:c8:df:e5:6d:40:
43:a7:e9:83:ec:3c:83:a4:5b:b3:70:36:71:a5:9d:
31:42:cc:40:57:07:91:5c:68:9b:63:83:ed:4a:f9:
fd:b7:cf:64:c9:35:aa:74:5a:21:12:b1:46:12:d8:
94:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D8:03:23:BA:40:82:11:B2:E7:0D:55:FE:44:92:63:3C:98:EA:8D
X509v3 Authority Key Identifier:
keyid:DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:9e:1e:e1:cd:26:a2:c9:c4:b2:2d:ee:51:43:e5:33:0a:ff:
5e:af:9f:74:8b:05:43:cb:4e:8f:41:41:2c:13:e6:a3:a0:d6:
6d:f7:73:a4:2a:9f:eb:bc:a4:84:13:e8:ba:30:65:d8:c3:6a:
a3:bf:3f:93:59:b7:f7:9c:2a:8c:ec:7c:4d:7c:fb:46:61:ac:
3e:1c:72:b9:58:99:ac:d6:f8:5a:57:66:4e:00:f7:00:60:10:
f0:87:b8:92:b1:e9:a2:fd:08:80:7d:c9:35:21:27:37:0a:f9:
5f:3d:57:8d:bb:42:d1:6e:ac:1e:a5:22:a2:04:c8:0a:08:ac:
e0:1c:f3:d4:97:9d:4f:ba:89:aa:bb:fe:e2:af:fe:c6:4e:d4:
a8:3c:8a:a3:7e:87:91:e0:62:ae:7e:bb:8b:f5:ae:eb:b1:c1:
90:eb:e3:f3:8a:8c:16:b3:6a:d9:6e:4c:66:16:63:84:3f:b6:
56:a9:45:42:d2:4c:21:e9:2f:3f:70:3f:3d:f8:6d:32:c8:d1:
30:08:a9:09:93:49:3b:d3:92:62:22:92:d9:ea:fd:dd:91:64:
2e:21:be:38:3d:13:19:89:86:78:b9:88:a1:7a:87:7f:8d:89:
36:13:cb:0d:9a:84:f8:a2:fc:50:e9:8b:b7:d9:cf:02:39:6e:
84:c1:8b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 16:38:54 2026 by rpki-client