Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
File: 3plxFn-T_DSzvEebsh_2LTvzyYQ.mft (raw, json)
Hash identifier: CrxifFMso7klRjqcRGVlovEMhhFN1V2sqOegaqkiDtc=
Subject key identifier: 16:C9:85:E7:7D:11:06:12:BF:7E:F3:03:BB:83:7B:0C:E7:5A:4C:27
Authority key identifier: DE:99:71:16:7F:93:FC:34:B3:BC:47:9B:B2:1F:F6:2D:3B:F3:C9:84
Certificate issuer: /CN=de9971167f93fc34b3bc479bb21ff62d3bf3c984
Certificate serial: 01A1C065726772CB68435C1058CCF253B25E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
Manifest number: 06E9
Signing time: Mon 09 Nov 2026 13:00:36 +0000
Manifest this update: Mon 09 Nov 2026 13:00:36 +0000
Manifest next update: Tue 10 Nov 2026 13:00:36 +0000
Files and hashes: 1: 3plxFn-T_DSzvEebsh_2LTvzyYQ.crl (hash: LFxogC0LTURxgtbQZDyxwR0m3lWSgAtwPNWAJ5xgaEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c0:65:72:67:72:cb:68:43:5c:10:58:cc:f2:53:b2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9971167f93fc34b3bc479bb21ff62d3bf3c984
Validity
Not Before: Nov 9 13:00:36 2026 GMT
Not After : Nov 10 13:00:36 2026 GMT
Subject: CN=16c985e77d110612bf7ef303bb837b0ce75a4c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:de:47:60:cc:ef:8a:f3:77:ab:ba:20:c8:90:
ec:fb:d8:d2:78:6c:fe:4d:36:77:d2:21:69:ef:af:
ae:85:44:04:5a:7b:52:03:11:a3:2f:9f:c9:79:0f:
b3:eb:64:c3:9b:f4:40:7b:52:b4:cf:a7:49:dc:1d:
89:3d:3c:b8:82:32:07:32:37:7b:29:3a:42:c9:23:
43:07:70:8a:c5:0b:22:15:2c:59:7b:e3:f3:92:53:
c2:3d:ce:fe:f4:0b:e9:88:c2:c9:eb:ec:2f:9a:f2:
e9:ba:5a:0a:35:d6:c6:92:49:ef:b7:5f:f7:ca:a9:
26:13:fb:48:d4:32:51:0f:93:53:22:89:09:46:bd:
18:35:64:4f:af:e6:dc:a6:a6:b4:4e:07:fa:da:dc:
db:4c:d3:f0:14:11:52:5c:82:ce:42:f4:ec:b2:96:
ff:83:1a:c4:fd:9e:39:2b:ab:53:d0:d0:a9:c6:6d:
ac:0d:9b:74:ed:b6:20:68:ba:b6:a9:d9:c5:7a:32:
b9:c0:7d:b4:c3:b4:d0:5b:eb:2e:f3:b5:47:db:aa:
58:66:c2:26:4b:53:9c:33:c3:98:91:ec:f9:e6:0d:
bd:ce:cf:f4:8b:ad:48:7e:ea:9e:d6:53:ea:63:47:
7d:32:7a:2d:86:38:60:13:b3:79:1c:df:fe:2b:cc:
a0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C9:85:E7:7D:11:06:12:BF:7E:F3:03:BB:83:7B:0C:E7:5A:4C:27
X509v3 Authority Key Identifier:
keyid:DE:99:71:16:7F:93:FC:34:B3:BC:47:9B:B2:1F:F6:2D:3B:F3:C9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:05:b0:04:77:e5:ed:86:82:d2:9d:42:35:7b:5a:84:98:e7:
13:51:2e:18:85:12:b3:f3:4e:bc:53:f8:01:ed:65:87:1e:df:
bf:c1:55:3c:fb:98:6a:55:fa:70:f2:ac:c6:c7:b7:ea:97:9d:
65:8c:46:f4:44:16:cb:ca:00:b6:3f:5c:12:67:80:56:5a:db:
82:40:02:77:42:88:6b:46:2e:36:f9:dd:57:c1:65:f7:87:53:
86:75:de:f1:40:cb:6c:d8:05:1e:ec:3f:db:5f:3b:3c:3d:f9:
4a:0d:c0:70:53:c0:66:11:b4:7e:ba:18:a2:07:ce:70:56:29:
7d:5c:81:b7:db:dd:8e:53:d0:6d:af:ac:53:28:bb:b2:9d:58:
81:71:ac:23:6b:59:9a:06:d8:af:44:25:cb:46:4d:3f:d5:c9:
f0:b2:c2:88:49:31:72:c6:ed:95:94:01:48:b4:44:f1:f3:8e:
96:f8:31:53:ea:b1:1c:49:b4:f0:b1:25:45:cc:f6:4a:3c:91:
a5:4f:b9:05:e7:35:35:6e:85:42:ce:cc:d5:32:d9:5b:20:c5:
99:b3:f6:80:0e:d9:06:ed:c9:0c:b0:c8:22:f9:32:95:bf:9d:
6a:b9:1e:05:ad:33:f6:26:8d:65:e4:c5:99:65:e8:e3:1d:9f:
e0:29:71:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 22:23:02 2026 by rpki-client