Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
File: 3K5LBHGmGHLEBBQuH5D1B08NbxU.mft (raw, json)
Hash identifier: x2YUv3413fauc/SQV+7n7h3mlgd8l2P4hCqxtdEqdnQ=
Subject key identifier: 7D:06:4D:21:48:44:54:C2:C9:B8:A4:CD:CB:7A:45:70:63:E8:8A:C3
Authority key identifier: DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
Certificate issuer: /CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Certificate serial: 01A1D9EED340997E1A058037057A5C274686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
Manifest number: 1AF6
Signing time: Sat 14 Nov 2026 12:01:09 +0000
Manifest this update: Sat 14 Nov 2026 12:01:09 +0000
Manifest next update: Sun 15 Nov 2026 12:01:09 +0000
Files and hashes: 1: 3K5LBHGmGHLEBBQuH5D1B08NbxU.crl (hash: NFBieqdLLwykrI2MmnaUWbPCY9O9AavfKQTKJkS8dBo=)
2: 9ZJf1K0dS9GGEr-7vJUqYcT4VlM.roa (hash: 4biyXnO/yjSxTlfFAVtaFC6Bi7sH2DQW0oH896Enc7I=)
3: qsdjnJflN-hqMusJ8mRO3QvIelE.roa (hash: SE6UiCw/dJG6vG+istEe6e9u75qYp7RLjIy5NUM722g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:ee:d3:40:99:7e:1a:05:80:37:05:7a:5c:27:46:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Validity
Not Before: Nov 14 12:01:09 2026 GMT
Not After : Nov 15 12:01:09 2026 GMT
Subject: CN=7d064d21484454c2c9b8a4cdcb7a457063e88ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:03:58:97:4f:bd:05:1b:b9:85:54:b2:63:13:
2f:19:5f:90:ef:57:32:95:8c:71:9c:ec:01:00:8f:
89:ba:b6:48:05:bc:41:7f:4b:e0:d4:3a:be:c3:93:
f7:12:32:9b:53:5b:e4:a9:ba:fa:1f:db:b9:c6:71:
af:59:88:88:f0:0c:89:8d:bd:13:b5:44:79:35:12:
56:23:51:c9:bc:fa:09:26:13:f0:1b:8d:aa:13:96:
95:18:58:dc:b7:03:33:5b:5f:9a:33:3e:72:2e:9e:
e3:de:c8:26:4c:d4:b4:9e:ab:48:bd:9c:65:83:1c:
15:66:04:93:1e:5a:40:48:1e:19:48:d4:02:04:11:
80:f7:f9:ad:ac:3f:53:c4:11:55:d6:ea:26:42:a9:
54:77:68:96:d9:23:8f:99:80:34:42:85:b2:f8:65:
39:e2:db:13:d8:b4:ee:b8:2c:e6:04:b9:ec:d0:59:
e3:5f:2f:f7:e7:a4:dc:70:c1:f2:27:69:d1:7b:dd:
ec:ff:05:d5:f9:e2:44:2e:b0:bf:11:4d:b9:17:d1:
51:b4:8e:04:d9:74:90:c7:1c:25:65:b1:1a:ae:b7:
8a:77:e3:e9:28:de:2e:9e:b4:22:44:95:13:36:40:
e4:7f:32:6a:4e:d8:a3:62:92:62:8d:17:d3:44:5a:
a2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:06:4D:21:48:44:54:C2:C9:B8:A4:CD:CB:7A:45:70:63:E8:8A:C3
X509v3 Authority Key Identifier:
keyid:DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:eb:ca:ce:da:66:6f:e6:b7:c4:43:c4:92:74:5e:41:d1:1a:
9a:50:c3:83:1b:8c:05:dd:26:a4:ed:8d:7f:87:79:c7:c6:06:
0a:3c:b0:45:84:f2:79:20:9e:85:64:a8:5e:e0:b0:89:60:5e:
c7:76:73:51:77:38:9b:53:e0:b1:4f:73:08:5c:68:a0:b5:dd:
31:43:7b:03:7e:a0:2c:80:22:13:e8:8b:79:72:33:58:1c:7f:
60:0d:f2:ed:2d:e0:9e:c3:7d:a0:c6:77:1e:78:3a:2e:2a:ac:
48:c9:2e:f9:1d:19:f4:1f:02:cf:91:1c:e5:d5:ee:bd:db:a0:
0f:e3:20:37:ca:7f:15:f3:47:b4:30:39:ec:07:19:36:c1:38:
6b:23:0a:1b:6c:98:3c:d1:8c:f4:7a:d8:79:5e:96:b9:d0:26:
02:98:48:a5:ce:3a:ae:1c:75:de:2e:bb:2b:e4:fc:41:17:71:
b0:3c:04:0b:dd:cf:c2:a5:e9:25:5b:aa:0f:d5:87:94:64:c1:
d9:05:6f:b2:01:47:91:a0:aa:ef:83:12:8a:fe:ea:29:ee:8d:
b6:2d:25:fd:40:3c:15:d1:a5:f3:8b:99:62:eb:27:0b:22:0e:
66:f5:16:f1:d5:ff:83:df:e1:74:bc:07:98:53:72:e6:96:ba:
e6:c0:05:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:27:01 2026 by rpki-client