Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
File: 3vg4UDz7wFKD_erdRkSke_14P84.mft (raw, json)
Hash identifier: OeQBlF1xF446lgi7O/ey8s/acUUHQh7PJ6KlyseE0n0=
Subject key identifier: 65:BD:82:69:18:67:3A:BE:7C:3A:C6:36:59:A5:76:0E:B5:9A:FE:C3
Authority key identifier: DE:F8:38:50:3C:FB:C0:52:83:FD:EA:DD:46:44:A4:7B:FD:78:3F:CE
Certificate issuer: /CN=def838503cfbc05283fdeadd4644a47bfd783fce
Certificate serial: 01A1DF4CC1F63408EDB7AFE6EE6DAEA07E26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
Manifest number: 0D21
Signing time: Sun 15 Nov 2026 13:01:51 +0000
Manifest this update: Sun 15 Nov 2026 13:01:51 +0000
Manifest next update: Mon 16 Nov 2026 13:01:51 +0000
Files and hashes: 1: 3vg4UDz7wFKD_erdRkSke_14P84.crl (hash: BVJT3ZkcfFGGv2uEjKobFyEUMw1UpZO1R/VFRI0ykKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:c1:f6:34:08:ed:b7:af:e6:ee:6d:ae:a0:7e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=def838503cfbc05283fdeadd4644a47bfd783fce
Validity
Not Before: Nov 15 13:01:51 2026 GMT
Not After : Nov 16 13:01:51 2026 GMT
Subject: CN=65bd826918673abe7c3ac63659a5760eb59afec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:9f:8c:41:d4:19:14:b0:3d:df:b8:37:25:5e:
33:dc:00:5a:49:c2:75:5e:7c:ae:c6:8d:2d:6e:94:
7e:53:3e:cf:aa:08:8b:6d:1f:63:09:0f:61:52:ba:
f4:34:57:2e:43:67:1d:7b:4d:0b:90:e4:c7:df:15:
ad:fe:ce:d3:d1:45:6a:66:0e:61:74:06:3e:d9:d7:
b5:17:b6:b9:01:35:a1:d7:23:b7:18:ad:99:45:3b:
cc:83:3e:85:5b:f8:d1:89:63:d8:5e:78:c9:6d:b8:
25:fa:bd:00:ab:08:0f:3e:62:5f:3f:57:5a:1b:f0:
db:2c:32:78:43:ee:ab:1c:71:34:06:f4:a9:a9:32:
27:1c:54:27:f5:f5:43:fa:65:88:7e:a9:9a:bb:ff:
c3:f6:9c:d4:e2:aa:bb:6b:3b:45:de:16:a9:cc:72:
5d:45:77:ab:b8:26:75:17:ec:09:de:17:a6:20:2d:
f0:24:df:95:3f:6a:88:32:16:25:0c:df:46:89:0c:
87:87:4b:35:9f:85:63:e5:c5:66:e2:1d:41:b1:8d:
db:cc:59:3b:d1:cd:c5:f0:a3:b5:7d:29:18:ea:66:
08:b4:07:b2:12:07:12:12:34:90:68:63:27:e1:05:
da:29:e0:96:c9:52:03:cb:21:10:e8:a2:2a:62:4d:
c3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:BD:82:69:18:67:3A:BE:7C:3A:C6:36:59:A5:76:0E:B5:9A:FE:C3
X509v3 Authority Key Identifier:
keyid:DE:F8:38:50:3C:FB:C0:52:83:FD:EA:DD:46:44:A4:7B:FD:78:3F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f8:e6:a5:76:85:e5:27:e1:6d:92:30:e8:6f:fb:f6:0c:c5:
4e:5f:8e:d1:d3:e2:f9:b3:90:47:4f:fb:e6:3c:1a:f3:04:24:
aa:6e:64:87:56:83:ca:5e:df:68:c2:94:48:3f:3d:12:58:b3:
2b:1c:7e:19:e6:74:02:4b:e4:bb:a6:40:90:cb:9f:9a:61:1e:
e8:e1:d7:f5:c5:24:d1:cb:e4:b0:3a:0a:b9:a1:1b:1b:af:53:
56:6d:8c:54:24:7d:49:82:28:aa:e7:fc:a1:38:4d:03:46:1c:
9b:92:b6:f7:9f:22:27:c0:55:50:48:7e:c7:a5:44:7e:f5:7c:
f6:bc:28:52:a2:62:5f:ea:bd:55:6e:fe:6a:1d:a2:c5:54:1b:
1e:cb:ce:d4:fe:73:39:29:a1:a7:eb:67:27:cd:67:a3:55:9f:
d6:a7:ed:2c:a6:e2:28:29:41:6a:2a:f6:2f:52:ec:ac:f3:66:
5c:c4:1c:fd:2e:7f:9a:00:34:f7:28:a6:fe:99:80:b9:d1:09:
e7:a7:03:6d:a3:cb:16:2b:1e:5f:9e:8f:15:86:ea:38:39:23:
0c:e3:29:5b:0f:8b:0e:94:66:b6:23:ed:06:ab:eb:57:2d:ed:
4f:15:15:1a:0d:0a:8f:43:2b:05:df:14:77:83:c1:52:6f:b8:
b7:c7:9b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:58:49 2026 by rpki-client