Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
File: 3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft (raw, json)
Hash identifier: wnF+18+FMHfu7D4y0UYZy5UMJL6ujqMCZPwXbMzeY4c=
Subject key identifier: 90:47:D1:24:0A:A3:BA:09:F7:27:0B:B3:C5:C0:27:E4:61:E9:D8:9D
Authority key identifier: DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
Certificate issuer: /CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Certificate serial: 01A1C4426EF10BCAD6E9578E5431484B9F2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
Manifest number: 12CB
Signing time: Tue 10 Nov 2026 07:00:50 +0000
Manifest this update: Tue 10 Nov 2026 07:00:50 +0000
Manifest next update: Wed 11 Nov 2026 07:00:50 +0000
Files and hashes: 1: 3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl (hash: +wO+4osdx39UNscJPTPuMZhf8Hkgd0bpPMz5FiqDRy0=)
2: ZupcI2nbSj0kv3bOiTJw_7ju_nM.roa (hash: 8lfURhp4+6wvfeyaLwrd59nHvD9zLaiHI+8CWa149w4=)
3: uRzlID_nfuupcIGUXbHpyyUrxts.roa (hash: 5LvqBXGtCHTt2jvIwKxCsctM10tlaiQJ5CWlpcE9cx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:42:6e:f1:0b:ca:d6:e9:57:8e:54:31:48:4b:9f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Validity
Not Before: Nov 10 07:00:50 2026 GMT
Not After : Nov 11 07:00:50 2026 GMT
Subject: CN=9047d1240aa3ba09f7270bb3c5c027e461e9d89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5a:e5:f9:ca:8d:7c:be:89:38:54:50:c4:72:
bd:63:e2:55:7b:c3:77:3b:17:05:9b:0b:9e:cf:70:
b9:ea:c1:89:70:08:31:7a:04:74:e1:2d:ec:bc:47:
44:f4:e0:68:88:d5:4c:eb:e7:0e:fc:ce:d9:09:1a:
37:19:e0:c2:7f:51:1c:ed:f3:06:c5:a3:dc:b5:5e:
60:27:28:96:03:6d:ed:97:36:a3:62:d6:e3:ec:ef:
84:4a:6f:3b:d4:5f:1a:94:02:bd:8a:38:7d:3e:58:
6b:9b:a9:9f:0f:36:e9:2e:e2:df:b4:03:5d:0a:df:
43:1f:2e:92:92:ff:e4:bb:df:20:9e:73:54:d1:2a:
48:6b:07:9d:20:7b:8c:3d:86:44:5c:85:60:f2:01:
c8:39:3f:f2:bb:fe:6c:ba:12:1d:8f:91:48:d1:a5:
ca:92:80:88:4a:c7:c9:40:86:53:06:93:70:6d:c9:
a4:f5:c6:7e:e3:54:0c:46:96:26:25:7e:fd:5f:da:
b7:3d:84:89:2a:dd:02:61:1b:0a:ab:92:81:0b:79:
5a:02:21:e1:aa:30:02:9c:71:10:9d:fd:b7:61:88:
8d:fa:5a:ea:ff:7c:91:e8:b4:90:ec:35:a0:3d:d1:
e4:53:bf:c6:f7:3f:67:16:bb:ee:c5:4b:03:8b:9f:
1f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:47:D1:24:0A:A3:BA:09:F7:27:0B:B3:C5:C0:27:E4:61:E9:D8:9D
X509v3 Authority Key Identifier:
keyid:DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:1a:01:d6:33:29:55:62:14:52:e8:6f:f3:78:25:81:ce:1b:
04:4e:82:6e:43:bc:1e:7c:27:dd:9b:ab:d9:1f:12:54:bb:45:
a5:38:a8:8b:2f:a0:f3:1a:df:cd:65:99:5f:9e:00:bd:09:c5:
d1:28:60:25:b5:7a:fa:12:e8:e0:02:5d:16:ae:1c:54:d4:3a:
7f:85:1b:16:83:05:b8:98:a8:11:15:0d:99:8c:89:85:1a:38:
d4:d1:49:e2:42:c9:f7:dd:1d:8c:27:e9:83:65:34:ea:ec:a0:
e0:d5:15:c2:c7:4a:28:4a:61:76:22:53:64:4b:c5:76:90:88:
ea:d7:bc:6e:05:f1:d3:12:93:38:30:55:0e:06:14:2a:37:4c:
f6:d3:c1:d8:30:e0:0b:12:b0:eb:d0:59:bd:23:66:6e:37:87:
da:66:ce:1c:49:b5:c7:48:4a:3e:60:34:71:01:6e:50:c3:a6:
b6:5d:6f:bf:f2:7a:81:a0:1d:be:97:7b:1b:08:11:65:44:fa:
1c:a8:c7:36:d4:30:f5:f8:fe:b4:f9:bb:bf:b3:e8:1e:89:44:
8d:78:c7:47:7d:7e:fb:ee:ba:95:5b:3f:e4:56:ad:e0:07:dc:
6b:cb:80:02:09:90:a3:ca:b9:cc:25:36:e4:11:f2:35:87:35:
7b:e8:54:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 14:33:30 2026 by rpki-client