
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
File: 0Xrp3J9DomnrCszzSI6GH0_w6J4.mft (raw, json)
Hash identifier: 9UimnsHZpclp//lboTpAYvVg7OU3RnZaXVMZDZlYE2c=
Subject key identifier: C8:94:5E:92:4D:86:F5:2C:22:71:BB:21:B3:2C:06:77:C4:AC:04:BF
Authority key identifier: D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E
Certificate issuer: /CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
Certificate serial: 01A1DEDE87EF686A5B6F799A5DA13BF234CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
Manifest number: 0A7D
Signing time: Sun 15 Nov 2026 11:01:28 +0000
Manifest this update: Sun 15 Nov 2026 11:01:28 +0000
Manifest next update: Mon 16 Nov 2026 11:01:28 +0000
Files and hashes: 1: 0HODiJ6zETUxB5V-7gVm2tivJwY.roa (hash: qGeG3nhf+YLEqzJKX+7cT8wuG9iiTSfd9cCIvKbcpI4=)
2: 0Xrp3J9DomnrCszzSI6GH0_w6J4.crl (hash: gOqbPGn+QncYBVi4VNpuwm5OUmkAkXUXgyoSqBHnlzU=)
3: UwYA2ZqOaaqxV-SbROLNU0LYhKs.roa (hash: yo5jrp46t5eed1f0aD/LDv5fDkeM+5705upQY6SakhI=)
4: VVzdT8i8Ic0mJD0Mcn7QSzTVqqg.roa (hash: 2cduIqBhGdf+BQ9zIXwABKUp5BhlSqCikGKIR7rcdp8=)
5: jguZW_JXxXZXEs7UeDtL_uxFA7E.roa (hash: Di5fz7I66QZtyKR+rBwTjQSM3JlDgDmbsZZusapxtVw=)
6: s3WGIAUoxaXezGvnamEPgxxSe6s.roa (hash: m+UVZt/8nZjpbFNEjpwY5nsDKhbrb260ASrF4yP760c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:87:ef:68:6a:5b:6f:79:9a:5d:a1:3b:f2:34:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
Validity
Not Before: Nov 15 11:01:28 2026 GMT
Not After : Nov 16 11:01:28 2026 GMT
Subject: CN=c8945e924d86f52c2271bb21b32c0677c4ac04bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:14:6b:5c:25:a8:9b:8a:aa:42:4c:a1:8a:ff:
1c:d7:e9:1f:0e:ad:e2:5b:b2:c8:26:7e:5b:14:a4:
ee:2f:ef:5d:f2:06:14:13:ea:1f:73:37:eb:e3:dd:
b5:88:25:02:77:ff:c3:7a:91:29:e6:e8:7b:47:40:
45:3a:14:25:b9:ff:26:78:5d:83:71:d5:c6:04:14:
3a:a8:b6:38:dd:03:43:42:82:fc:21:4b:6f:6c:6b:
be:38:08:a2:4c:09:b0:c4:35:9e:1a:a3:a0:3a:62:
5a:30:bb:24:d3:98:c9:d8:52:b8:f8:24:37:f4:8d:
ee:fc:77:27:a1:80:76:9c:25:89:50:80:8d:0f:57:
e4:60:b2:f8:10:13:f6:b8:ee:33:0b:ae:b5:85:48:
f6:ae:41:41:8d:82:9e:b8:08:a1:19:31:dc:85:95:
a9:a4:b4:6d:4f:58:d7:87:0d:a0:7a:27:3a:b1:78:
2b:ba:27:65:e4:68:3a:b5:c2:cf:1e:a9:9d:08:14:
4d:7c:e4:71:91:62:91:8d:f6:00:a7:76:de:65:50:
24:00:3b:ea:d4:58:a1:5f:72:74:89:fe:5b:71:4d:
d6:54:0b:be:73:ff:97:7e:72:87:aa:0b:b9:ef:db:
e2:41:56:b2:11:92:5a:5d:9d:99:c3:cd:43:25:c9:
87:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:94:5E:92:4D:86:F5:2C:22:71:BB:21:B3:2C:06:77:C4:AC:04:BF
X509v3 Authority Key Identifier:
keyid:D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:d9:fd:7d:c1:0e:eb:68:0e:20:38:1c:9f:e0:6a:19:82:05:
e3:68:d4:47:6c:f4:bf:c3:c0:25:90:9a:0e:f9:f9:12:4f:83:
21:c0:43:82:5b:04:ef:62:b5:88:c2:38:0a:3f:2e:02:d5:c3:
59:e2:5f:b3:6d:fe:ce:d0:ce:2f:51:ae:67:6a:8d:e0:50:91:
38:17:3a:25:17:e4:22:64:e3:4c:d3:98:55:03:7b:fa:ac:e8:
66:1f:46:3d:e0:dd:b5:25:7f:a7:de:5e:74:f3:61:5a:bd:e4:
58:68:38:72:d8:4d:c2:50:39:15:ce:08:e2:14:99:10:84:d5:
dd:38:6b:30:cc:cf:13:fb:9a:e1:27:b2:5c:23:49:7f:7f:58:
36:a5:2c:5d:8e:b6:2d:c1:a0:7b:65:47:5c:c9:2f:b8:f0:f9:
8f:4b:a3:e2:f1:91:3d:b2:05:c6:61:96:18:9c:7d:9e:21:12:
d6:c1:4d:8a:f8:28:61:f7:e2:53:86:a9:09:5d:42:b1:5c:e1:
ca:05:56:c4:97:1b:90:c1:a6:64:55:2c:50:fc:e6:f3:1d:25:
1b:20:c4:b7:2e:64:0e:78:d3:36:ac:e1:2f:17:bd:b3:8f:f9:
bc:82:02:89:74:ca:bf:da:5c:9e:ba:6c:4c:35:f7:97:74:db:
ff:6f:46:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:27:55 2026 by rpki-client