Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.mft
File: 3kK6kvCUZ8GIi16eNEiVB0SweYE.mft (raw, json)
Hash identifier: zE6Xkk1bpG4ZXS3zPEMcctfjoq1VfqUj9rBq8XT+4yQ=
Subject key identifier: 32:3A:E4:8D:33:3F:A0:36:8A:B9:DC:09:ED:6E:80:42:6C:A7:EE:F4
Authority key identifier: DE:42:BA:92:F0:94:67:C1:88:8B:5E:9E:34:48:95:07:44:B0:79:81
Certificate issuer: /CN=de42ba92f09467c1888b5e9e3448950744b07981
Certificate serial: 01A1C10AD6A9B3614EED0D4E7EA55C730CF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3kK6kvCUZ8GIi16eNEiVB0SweYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.mft
Manifest number: 1557
Signing time: Mon 09 Nov 2026 16:01:15 +0000
Manifest this update: Mon 09 Nov 2026 16:01:15 +0000
Manifest next update: Tue 10 Nov 2026 16:01:15 +0000
Files and hashes: 1: 3kK6kvCUZ8GIi16eNEiVB0SweYE.crl (hash: gYQQA+ElQj7R9J1a8/RgPwpni2R1Rt7Ch4Oj1aR/hik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3kK6kvCUZ8GIi16eNEiVB0SweYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 15:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:0a:d6:a9:b3:61:4e:ed:0d:4e:7e:a5:5c:73:0c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de42ba92f09467c1888b5e9e3448950744b07981
Validity
Not Before: Nov 9 16:01:15 2026 GMT
Not After : Nov 10 16:01:15 2026 GMT
Subject: CN=323ae48d333fa0368ab9dc09ed6e80426ca7eef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7f:78:5f:03:5f:ee:04:97:6b:be:61:63:74:
a0:8c:71:fb:36:67:a4:00:7f:4b:0c:75:47:e6:83:
dd:b9:2f:df:1f:3b:5c:22:cb:2b:d3:a7:8c:c5:df:
da:64:b7:01:6e:21:52:44:df:e7:5c:0a:e0:ba:6a:
b1:e9:04:b0:42:53:3c:5c:df:34:65:81:d4:c1:b3:
b3:53:da:6c:db:5e:ab:e3:1a:e8:06:f4:f0:27:2e:
6f:c1:79:b7:96:c6:60:2f:50:7a:d9:ad:46:87:58:
3c:66:5c:ad:c4:03:12:25:a8:68:33:3f:b8:f5:ea:
38:f6:a6:fa:a0:05:26:35:09:48:1d:ac:20:1d:23:
32:bc:a0:c7:63:e7:3d:e3:b7:ff:9c:6a:62:a5:45:
7c:43:d2:07:3d:da:cd:a2:4c:35:98:96:49:75:c7:
0f:31:9d:cc:07:b1:52:88:69:89:ba:f2:74:76:d3:
64:1e:a1:5e:97:9f:e8:f2:de:6c:9b:13:1f:14:c6:
f8:34:fe:65:00:64:7f:b8:5c:45:a8:ad:bf:ca:19:
a2:d8:61:5c:e8:30:4d:8a:6e:d3:5a:f2:c2:c2:22:
a6:19:92:e0:ee:10:7f:b7:99:48:d0:e6:56:c9:6a:
1e:cf:ec:42:ad:79:0b:cb:08:b0:36:b9:8d:05:6a:
5a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3A:E4:8D:33:3F:A0:36:8A:B9:DC:09:ED:6E:80:42:6C:A7:EE:F4
X509v3 Authority Key Identifier:
keyid:DE:42:BA:92:F0:94:67:C1:88:8B:5E:9E:34:48:95:07:44:B0:79:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kK6kvCUZ8GIi16eNEiVB0SweYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/3ff463-0e3d-4e77-bd13-5b3b4b913cf8/1/3kK6kvCUZ8GIi16eNEiVB0SweYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f2:af:57:85:db:da:f9:30:b8:7f:73:37:e2:64:57:f4:c5:
b6:a1:14:3a:3e:cb:3c:af:30:32:0d:4c:00:7e:6f:76:2c:42:
3f:b4:7b:16:5b:90:60:38:d7:93:a0:c5:04:17:0a:9c:a6:66:
08:29:7a:be:41:59:f2:d8:6e:c4:88:86:5a:36:5c:d1:51:26:
99:59:f1:58:21:ac:41:bf:23:48:59:15:fd:3c:19:9d:e7:5e:
49:d6:16:bd:8f:45:d9:7b:b1:22:8f:3c:a3:26:44:cf:14:51:
92:de:b6:4d:e9:f8:f8:44:b8:a9:c1:85:87:33:dd:3d:46:2e:
50:48:85:a5:1a:ae:ec:67:6d:fb:c1:71:4e:f1:4e:28:68:fa:
55:52:71:9c:5f:1b:f9:45:0a:1c:72:97:d6:9a:2e:b9:f2:bf:
41:c6:04:c1:53:44:fd:20:43:3d:e7:06:b2:b2:1e:9d:8c:1d:
a7:43:c1:07:dd:00:49:2e:be:36:da:5e:46:fb:a2:57:37:b3:
f6:5d:dc:95:51:37:cb:43:17:85:b3:d0:1d:39:47:7c:ae:0d:
70:c2:07:78:11:f6:c6:d1:d5:f1:66:b0:9a:5c:c7:59:b2:83:
52:cf:9a:39:77:8c:9c:5e:cb:1f:e6:e5:14:58:17:23:c9:bc:
a2:00:4c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 23:25:43 2026 by rpki-client