Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
File: 03h3GhBvaw0FSld4U1aSLK8C40M.mft (raw, json)
Hash identifier: 6S+9t32+rWi7bEzBSPJKgRm1hi+GPNsPjVohuESmUFE=
Subject key identifier: 36:5F:6D:3D:DF:AE:C0:C9:AB:61:38:0B:23:2F:04:54:9F:9E:C3:1C
Authority key identifier: D3:78:77:1A:10:6F:6B:0D:05:4A:57:78:53:56:92:2C:AF:02:E3:43
Certificate issuer: /CN=d378771a106f6b0d054a57785356922caf02e343
Certificate serial: 01A1DE705D7DA3BD3F913DBF86F4ECFC4FB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03h3GhBvaw0FSld4U1aSLK8C40M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
Manifest number: 0EA1
Signing time: Sun 15 Nov 2026 09:01:08 +0000
Manifest this update: Sun 15 Nov 2026 09:01:08 +0000
Manifest next update: Mon 16 Nov 2026 09:01:08 +0000
Files and hashes: 1: 03h3GhBvaw0FSld4U1aSLK8C40M.crl (hash: 0JarkZyzTrtLMyptW75EVdQedwG8vG7MCcmBamIXVw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
rsync://rpki.ripe.net/repository/DEFAULT/03h3GhBvaw0FSld4U1aSLK8C40M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:5d:7d:a3:bd:3f:91:3d:bf:86:f4:ec:fc:4f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d378771a106f6b0d054a57785356922caf02e343
Validity
Not Before: Nov 15 09:01:08 2026 GMT
Not After : Nov 16 09:01:08 2026 GMT
Subject: CN=365f6d3ddfaec0c9ab61380b232f04549f9ec31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b2:28:9a:55:e0:b2:7b:dd:e0:d7:24:7b:b9:
e7:48:4a:ce:6e:fe:81:67:c1:47:42:30:bc:96:e4:
1e:6c:fa:b8:f1:74:2f:23:ba:52:46:e6:b6:ce:32:
b4:dd:cb:09:4c:4d:2f:20:ba:1f:d5:7b:9b:11:1d:
d1:d8:21:21:54:36:a8:32:28:fc:3a:0c:fa:84:ae:
a8:14:ed:5b:8d:e7:ad:ae:ee:32:6d:1e:7e:d6:4a:
69:5f:25:5f:66:14:56:13:b1:4e:11:31:e5:e5:45:
cf:c4:65:e8:de:8b:3d:2b:88:1e:cd:2e:41:89:41:
8d:45:39:5f:77:75:d5:11:3a:06:67:82:8a:c9:a8:
19:bc:33:69:a2:6d:39:27:d9:73:36:58:b0:2f:f3:
18:58:a9:4e:bd:ef:3f:6d:0b:84:cd:ac:ba:5f:f7:
71:b0:82:d7:cf:d5:b4:df:a2:22:3e:7b:b0:bd:0b:
d6:68:4c:5c:ed:73:72:d4:e5:36:7c:3d:54:fb:f6:
34:f0:29:05:97:a3:da:b8:3b:59:f4:d0:a7:66:6d:
cb:5c:6a:cb:ce:41:b8:92:88:86:65:12:68:98:ea:
ed:db:45:cc:51:fd:a3:e2:88:1b:71:32:c4:27:5d:
7a:25:ec:c7:f8:63:dd:84:ff:b5:6b:c6:d8:f2:1e:
22:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5F:6D:3D:DF:AE:C0:C9:AB:61:38:0B:23:2F:04:54:9F:9E:C3:1C
X509v3 Authority Key Identifier:
keyid:D3:78:77:1A:10:6F:6B:0D:05:4A:57:78:53:56:92:2C:AF:02:E3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03h3GhBvaw0FSld4U1aSLK8C40M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:64:42:83:0b:73:12:e6:16:4c:d9:c4:70:21:16:a6:57:8c:
b3:a3:e5:56:e2:e8:93:6d:ab:73:ff:73:e2:69:ee:19:32:2e:
50:96:3e:ee:33:c2:a6:f0:d5:ec:60:f1:d3:51:13:f7:34:6a:
2f:f0:52:33:d5:8c:fc:33:61:0b:e4:cd:e9:bd:6c:9a:fc:f1:
28:24:b8:99:15:5e:c1:0c:e4:c9:9a:6c:c0:78:cd:26:38:83:
1f:39:5e:7e:09:7f:f8:2a:82:c0:b7:36:6c:1e:fd:cc:bc:43:
8a:67:17:91:b1:01:5b:cb:ef:70:7c:6d:4c:60:d3:1e:e0:ba:
0b:00:95:10:c8:51:a2:f7:74:55:14:80:09:8b:f3:6d:13:2b:
e6:73:89:98:aa:1e:4f:80:e7:8a:b3:1a:2f:5a:41:b7:18:7e:
89:60:39:e6:35:46:54:8b:29:93:c0:85:36:aa:71:71:22:12:
90:58:72:4c:9d:f4:fa:2f:5f:4e:80:d1:3f:39:14:cb:c1:2e:
da:f4:30:ae:87:19:d1:47:79:5f:42:72:25:2e:54:2e:a0:a6:
40:0b:95:bc:a8:b7:a4:8a:c4:0e:3f:78:9d:69:f7:63:dc:33:
d0:5f:93:47:e3:3b:4b:b5:95:89:08:60:63:89:79:2b:ae:e8:
a8:be:71:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:39:39 2026 by rpki-client