Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
File: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft (raw, json)
Hash identifier: GYiFH/PtErepiIJgqqimhAwPioVsd1K72IyFTUgm6cw=
Subject key identifier: AF:C3:8A:6C:6F:52:8D:54:68:F0:05:32:D4:D5:46:63:3C:E7:14:B1
Authority key identifier: DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
Certificate issuer: /CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Certificate serial: 01A1C47921BF66C81F62ED007841C2E89308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
Manifest number: 1A2B
Signing time: Tue 10 Nov 2026 08:00:35 +0000
Manifest this update: Tue 10 Nov 2026 08:00:35 +0000
Manifest next update: Wed 11 Nov 2026 08:00:35 +0000
Files and hashes: 1: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl (hash: vaFKOXr4wDIjysoX6Y6jHYfm8ES7jRbLDF9nSo5Q9/4=)
2: 6xKBRhcPGOW0-ef_87nk8nPvflA.roa (hash: ljMD+xiZ4YQ7UeRE1RQr2u8g+4zja/CKtgOQ244SoZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:79:21:bf:66:c8:1f:62:ed:00:78:41:c2:e8:93:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Validity
Not Before: Nov 10 08:00:35 2026 GMT
Not After : Nov 11 08:00:35 2026 GMT
Subject: CN=afc38a6c6f528d5468f00532d4d546633ce714b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:10:a6:c8:09:fa:3d:ee:06:74:b8:33:6d:61:
b6:26:b0:f8:49:c2:be:ed:53:74:7f:c8:ed:1a:83:
41:be:0c:69:b8:ab:fb:aa:8f:63:47:a7:ee:18:8f:
ae:f5:a7:de:00:9e:07:fb:be:78:0d:4e:43:48:b0:
6f:5e:de:27:b8:ed:d8:e5:d2:70:24:da:5a:69:49:
d4:b7:6e:d3:a7:ee:8a:f2:9b:56:06:97:be:80:6a:
8f:36:95:2e:33:8f:66:f1:b5:a7:e0:66:91:7a:23:
fe:ca:61:ff:a9:76:6f:d8:45:4e:34:27:5a:f2:64:
f0:3b:1a:7b:3a:f9:53:20:cf:b6:3c:f9:67:9d:56:
cb:2a:b8:d4:e5:a1:ff:35:11:d9:90:20:34:cf:df:
42:e0:49:e1:7a:73:a3:6a:d1:76:19:dc:bf:08:4b:
48:d8:fe:b2:c2:a0:1b:27:e0:74:0a:1b:31:24:93:
61:1c:3e:b3:f0:7d:5c:86:59:ef:11:38:4e:2b:df:
21:31:3e:26:91:d2:f0:42:b6:1f:19:bb:87:81:12:
c3:d3:78:d9:06:26:a4:bc:40:9e:0b:0f:a0:60:c9:
55:91:05:e0:cd:d5:0e:f4:18:58:f6:3f:e6:49:8d:
8f:7d:2c:39:cc:02:f4:dc:a6:b9:9c:b5:55:93:6c:
b4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C3:8A:6C:6F:52:8D:54:68:F0:05:32:D4:D5:46:63:3C:E7:14:B1
X509v3 Authority Key Identifier:
keyid:DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a1:9b:84:16:a7:90:34:a4:df:c9:c0:ad:c8:7d:5f:9e:5a:
1a:89:52:74:30:6e:82:01:8c:9b:6a:76:6b:98:63:99:e7:46:
64:a1:c8:11:37:96:89:04:4a:2b:2c:5b:2c:bc:76:c3:be:aa:
04:1b:70:c0:c5:4d:09:a9:66:65:8a:15:b2:0b:d5:7b:cf:99:
15:e9:0b:01:35:90:08:b8:55:1c:1b:90:b8:87:96:d9:24:65:
f5:e9:3b:fe:1f:d5:eb:19:df:8b:6e:42:d4:60:a8:0b:63:02:
8c:6d:a1:22:e8:5a:cd:48:65:cd:a9:5b:b1:69:38:a2:6f:ec:
b4:23:33:71:99:0b:66:e1:6c:68:8e:0c:c1:59:af:7b:7a:6a:
88:78:b1:b9:ee:ee:27:7c:82:7a:f0:5b:0b:eb:38:3e:a5:32:
9d:1d:c0:90:49:2e:cf:59:91:0e:ad:fb:0d:1a:cc:d9:08:0c:
35:17:94:3e:5a:e3:ca:6a:51:c9:11:5f:78:04:2d:c2:e4:f6:
80:7e:6f:67:eb:44:57:83:0a:2e:b5:ef:24:5a:ee:64:b2:cc:
9b:a0:0a:12:3c:dd:4b:70:0d:f9:bf:5f:7f:a6:46:6d:b4:39:
0d:c5:05:a1:52:10:78:20:77:7a:6f:a6:59:43:66:4c:d5:fe:
b3:94:ce:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 11:50:34 2026 by rpki-client