Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
File: 3rGA3ccUMQPwLmnLnNoZwjleV6E.mft (raw, json)
Hash identifier: 2OU55QXvyeYnMN3mzw3z2qCEJ2Kvl5k13z2Y3iqKNWc=
Subject key identifier: 31:F4:FE:75:4A:4B:EC:BC:40:A5:B7:9C:8F:C8:BF:57:4A:EA:73:26
Authority key identifier: DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
Certificate issuer: /CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Certificate serial: 01A1DF82FC8574AC17C6D3B56D007F76A5C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
Manifest number: 1AF7
Signing time: Sun 15 Nov 2026 14:01:05 +0000
Manifest this update: Sun 15 Nov 2026 14:01:05 +0000
Manifest next update: Mon 16 Nov 2026 14:01:05 +0000
Files and hashes: 1: 3rGA3ccUMQPwLmnLnNoZwjleV6E.crl (hash: JaA3MdrtW0DKgd8ihrVy4zqPHH8bsnafm4q0Xr3hN1I=)
2: 4Qc85N4EwfShTiGhUnkvPvcjOEs.roa (hash: 5gcG+cc/9htcQzQfIk5Lbs8J3j2mNNeVz49M8qI81nA=)
3: dHkvv2AfkDDcX-uBDSlHxgyE9BM.roa (hash: MkJGi0URj4efKyUrfGEHvlM7u0U0Wn9mOiKm3NgF9Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:82:fc:85:74:ac:17:c6:d3:b5:6d:00:7f:76:a5:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Validity
Not Before: Nov 15 14:01:05 2026 GMT
Not After : Nov 16 14:01:05 2026 GMT
Subject: CN=31f4fe754a4becbc40a5b79c8fc8bf574aea7326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:87:a9:1a:fd:dc:c7:66:cf:56:cb:47:86:b4:
56:6d:b0:8d:bc:cd:de:4d:72:25:5b:0b:75:5b:e8:
cd:cc:c9:e7:70:12:d8:56:0b:5e:7a:71:56:9c:d0:
fc:02:3c:ee:f2:36:79:b5:8d:c1:d2:48:48:c0:81:
d0:14:90:25:a7:7c:7a:9b:23:f3:90:6e:05:d7:51:
ca:ab:42:5c:91:d5:9d:78:82:bc:c6:67:73:c8:98:
53:8e:0b:f5:18:b8:bd:eb:71:06:b9:a6:7e:de:28:
95:ff:c7:02:14:7b:89:46:20:c0:88:09:7c:51:d5:
71:0f:f3:52:38:29:d3:cd:ed:18:3b:6f:c0:bb:f6:
87:28:29:29:34:95:23:40:9d:eb:20:14:95:15:ae:
44:d3:64:c9:f2:e5:ed:79:9c:c4:4e:4f:4b:a5:d0:
68:95:96:ef:dc:c9:38:64:0a:c3:9d:f0:68:89:02:
4d:c6:ed:4a:b7:5f:68:16:36:45:86:c1:46:a9:6d:
5a:2a:11:69:f9:6b:a7:ed:31:c4:4b:34:88:21:0e:
74:b5:25:ee:73:91:a8:af:ff:2c:95:f0:3d:cd:2e:
49:c2:6b:5f:f3:f7:ac:b7:a0:b8:2f:3d:42:02:c9:
db:ed:02:b6:c8:d9:c8:a0:fb:83:54:ee:b6:b3:51:
ca:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F4:FE:75:4A:4B:EC:BC:40:A5:B7:9C:8F:C8:BF:57:4A:EA:73:26
X509v3 Authority Key Identifier:
keyid:DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:9d:20:1c:d1:ef:d6:77:3a:92:10:9b:46:86:5c:60:19:90:
2e:b6:8a:46:40:a1:a4:4d:f7:74:2d:cd:29:6d:86:b4:df:dd:
2a:1a:7c:eb:1b:d8:17:58:c1:42:4d:d7:35:d9:d6:8d:8c:fd:
9f:71:6a:7d:00:22:de:af:e4:ec:c4:5c:a8:bf:22:76:93:8c:
e8:5d:6e:56:11:76:7e:31:0c:16:39:8e:54:50:5e:4a:c7:d5:
fa:3c:20:8a:79:7e:5c:9e:2a:bb:be:89:65:5f:ef:bf:f8:80:
e9:2d:a5:f1:80:0d:bc:2e:08:4c:5f:61:4d:ba:0b:11:1a:12:
d0:ae:b7:f8:59:b2:82:a1:67:72:00:59:32:31:9d:02:27:37:
b3:71:dc:15:3a:71:ce:e1:d7:e3:99:14:99:96:cd:ad:0f:3b:
2a:6b:8c:3d:0f:85:04:3e:8e:21:ff:88:14:bb:90:e5:26:c9:
cc:b5:5d:9a:34:83:06:76:23:a2:ae:02:10:81:83:14:b6:31:
31:03:ec:02:b4:9c:a6:a1:29:72:2e:8d:9d:6d:a5:c2:52:74:
df:1c:df:4d:50:d0:58:39:c0:e6:61:01:df:19:e5:a0:ed:df:
d0:00:30:76:31:b4:54:21:6a:56:b3:6a:89:cc:6c:b5:67:c7:
45:60:a1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:22:07 2026 by rpki-client