Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft
File: 3kVs200UA0XD3K6_x2NNTnzcuRM.mft (raw, json)
Hash identifier: 3b85M0FM/8qv3a3ucxEJz792bh6EQrBPrxI30L84wVs=
Subject key identifier: 3D:73:52:31:8C:C6:44:33:60:13:93:4D:91:3B:06:25:DD:DE:F4:84
Authority key identifier: DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13
Certificate issuer: /CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913
Certificate serial: 01A1C58C8C1A69862EF10F2C5B2F0FDDFC51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft
Manifest number: 1AF7
Signing time: Tue 10 Nov 2026 13:01:24 +0000
Manifest this update: Tue 10 Nov 2026 13:01:24 +0000
Manifest next update: Wed 11 Nov 2026 13:01:24 +0000
Files and hashes: 1: 3kVs200UA0XD3K6_x2NNTnzcuRM.crl (hash: DbBqjwNf7Nrfukxwo+e1/EO9Ump7KUqtNlefka9I7Y4=)
2: C6zjpcBdZcRudxtmosvZuextZiI.roa (hash: zfnjDDGxVh2c7H/SnJCHldm/s9nx6Q4NSeuXoVoEuIA=)
3: EgdF3_zRLfplMDskKLXWWxT1Tyw.roa (hash: eShS1avsd7lspsl2gt1UyJJOPaFtk29Q65/drj/gSnk=)
4: HVeaPRGScqoeTxasRC7FtT7Oevw.roa (hash: ZQiBIa09vjaeX5NqaOpdrBAiwYMoL3wpAhEDSy6DOE8=)
5: g2A1nTWxNrbMC-tqMTYkTbSwLhE.roa (hash: x/I2NpciYmuJ2+ZCbrzBxxulkHo2MJfUChPtravpSw8=)
6: muToDVYHSFG7Iu6PcKczO1n_uA8.roa (hash: kfU2WDCosJv7C3pmCG7wZj4O3i1ktUmx7bgAeXZk4Mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:8c:8c:1a:69:86:2e:f1:0f:2c:5b:2f:0f:dd:fc:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913
Validity
Not Before: Nov 10 13:01:24 2026 GMT
Not After : Nov 11 13:01:24 2026 GMT
Subject: CN=3d7352318cc644336013934d913b0625dddef484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1e:10:59:8c:e7:47:33:55:92:33:aa:69:69:
69:8a:4f:07:ba:12:57:ac:d2:97:70:81:70:a2:1e:
5d:11:57:e6:7c:d0:ba:45:0d:12:24:12:95:1e:37:
35:e8:1e:ed:10:1c:96:a0:df:16:3d:16:07:79:38:
6f:f7:e4:3b:50:68:d9:95:94:48:a0:8e:db:62:7b:
e8:95:b0:8d:31:ce:2a:cb:19:b0:d6:d9:80:6c:17:
40:f6:2b:99:81:92:b6:e3:5c:f5:68:28:6c:4c:f2:
f2:8c:c9:49:6d:da:fa:fa:65:cb:80:25:5f:87:84:
1d:51:18:a6:d4:18:6b:61:c9:8b:6d:1c:1a:33:07:
6a:2f:d8:8c:c6:be:19:dc:33:ce:f9:ea:b4:bc:08:
59:a0:26:b3:8b:d1:ae:bb:19:90:cf:17:5a:66:76:
cb:39:82:8a:d5:5d:20:85:96:37:d7:55:a9:c6:64:
a7:f0:29:b5:5b:6c:7c:96:98:82:31:2d:3e:d6:4d:
ab:f1:49:e2:df:8e:d2:22:f3:13:54:08:65:fd:0d:
9d:ee:cb:97:2d:25:ec:60:f8:74:98:55:87:18:91:
e1:25:2e:e9:1f:b9:e5:d1:08:9d:85:09:88:22:8f:
91:59:23:a3:d7:04:f5:59:d5:91:ea:43:ea:da:d4:
dd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:73:52:31:8C:C6:44:33:60:13:93:4D:91:3B:06:25:DD:DE:F4:84
X509v3 Authority Key Identifier:
keyid:DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:cb:7e:e1:1e:81:9e:01:8e:86:59:a1:40:e9:02:cf:f5:04:
44:37:57:dc:b7:fa:65:4c:0e:7b:cb:af:98:a6:b9:66:17:0c:
17:b6:a3:fe:41:85:35:c1:bb:31:d0:7c:b2:8e:c4:2a:d9:e2:
5e:42:c6:b7:35:c9:46:2e:fa:45:db:65:94:09:2e:1c:78:6e:
ef:0c:82:2c:7c:cf:29:f6:80:17:d4:92:09:6a:50:aa:44:82:
9a:72:a4:b3:c7:23:ce:a5:42:e4:6b:1c:63:a7:d0:b6:bd:2b:
93:c9:90:3c:26:00:65:c8:98:60:92:0e:60:3e:05:ab:d0:8d:
f2:99:7f:14:89:ad:59:35:b6:9f:c5:ea:d6:d1:69:df:86:e2:
40:20:dc:af:5b:3b:9e:d2:b1:75:7e:22:26:dd:9a:26:f6:c1:
b8:d2:4c:4c:c7:51:22:00:e5:3e:76:ac:a0:51:85:5a:68:0c:
d3:f2:1c:f9:ed:86:64:6d:53:ab:ef:68:21:4f:52:fd:8b:ad:
da:8d:82:0d:7c:34:64:61:b9:d2:8b:73:97:53:1d:a4:94:6f:
25:5e:bd:fe:6e:f9:43:6b:ca:49:ed:f9:ba:ad:e8:33:d0:a7:
9e:b7:8b:f2:1a:81:57:27:a6:fe:00:dd:52:3c:8e:bc:9e:43:
86:d3:86:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 17:18:18 2026 by rpki-client