Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
File: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft (raw, json)
Hash identifier: E3xIzWjMsyg0j+mKh7860yLOVprdjCtP80hp/9ttjuI=
Subject key identifier: 6C:50:B5:A7:FF:1F:09:7C:F3:D2:19:12:08:2C:64:5B:A1:D6:29:17
Authority key identifier: DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
Certificate issuer: /CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Certificate serial: 01A1DF4C29D9FCCF5A44379065278BB0394F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
Manifest number: 140E
Signing time: Sun 15 Nov 2026 13:01:12 +0000
Manifest this update: Sun 15 Nov 2026 13:01:12 +0000
Manifest next update: Mon 16 Nov 2026 13:01:12 +0000
Files and hashes: 1: 3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl (hash: tznT5cFh/r5KA0bki3iFbgwvubIb10AZ8ZjfLdpX6pI=)
2: f8-DGeBP35-N3w51zaELLHTWQhA.roa (hash: p45bmNjagtDF3HgTTRtJcWFVXkd0k7P3PfW1B+YfWgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:29:d9:fc:cf:5a:44:37:90:65:27:8b:b0:39:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd48d508215340eac0f14f0b74749d1c8ec9f566
Validity
Not Before: Nov 15 13:01:12 2026 GMT
Not After : Nov 16 13:01:12 2026 GMT
Subject: CN=6c50b5a7ff1f097cf3d21912082c645ba1d62917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:78:16:35:47:36:47:77:43:17:3a:22:8e:e6:
c7:e4:2c:9b:51:3a:d8:b3:0b:fe:ad:8a:3f:0e:a5:
fb:f1:dd:3f:ab:b0:b3:cc:3d:3f:df:ad:aa:07:70:
58:ab:29:d9:7d:de:bd:11:a7:f8:26:95:e5:be:f3:
92:33:88:1d:34:56:33:f7:59:e6:b9:34:57:fb:8e:
0a:87:e9:1a:93:08:ef:60:95:c8:f1:96:6c:9c:bb:
86:d7:fb:cb:a6:c6:b5:13:52:86:b5:bd:63:96:ec:
88:c9:10:60:6d:03:46:92:06:b1:6f:cc:28:9e:7e:
26:6d:ad:af:80:b2:a9:75:5f:95:88:5c:ec:e2:89:
a5:b0:72:69:f8:1b:e1:00:b5:7d:87:c3:10:3e:4b:
2a:a7:0e:46:cc:c6:97:e4:57:ce:c3:cf:e5:ea:32:
6c:91:7e:be:71:02:f6:a3:1d:17:17:4a:4a:0e:63:
c0:b6:e5:98:d0:19:39:c4:f6:71:58:25:f2:fc:70:
81:0c:37:b0:8d:90:79:fa:45:8f:82:00:60:d9:40:
52:82:a8:a0:2b:4a:99:be:e2:3a:fa:c1:a7:7a:fe:
a8:b5:20:73:75:3c:22:48:0d:9d:cc:d3:01:b5:a9:
d9:17:d5:ca:20:46:32:40:3a:96:f4:69:a6:f7:ca:
69:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:50:B5:A7:FF:1F:09:7C:F3:D2:19:12:08:2C:64:5B:A1:D6:29:17
X509v3 Authority Key Identifier:
keyid:DD:48:D5:08:21:53:40:EA:C0:F1:4F:0B:74:74:9D:1C:8E:C9:F5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UjVCCFTQOrA8U8LdHSdHI7J9WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ba16ba-a8c8-442a-bab9-45e4740023db/1/3UjVCCFTQOrA8U8LdHSdHI7J9WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:98:57:d0:1e:cc:14:72:4b:4e:e7:72:d2:c8:9a:39:d3:e6:
c1:be:1b:c7:01:7d:c0:d6:23:09:3c:83:ef:64:2e:c1:60:65:
6c:16:02:75:76:ba:11:82:92:f3:42:64:ca:26:c6:8f:6e:b3:
b7:c5:30:0b:2b:42:b8:11:8a:10:17:06:b7:89:af:f1:3d:7d:
1f:97:95:09:2c:73:4d:51:af:b5:54:72:bd:97:c9:a2:a6:d6:
3a:a2:7b:ab:05:b6:a0:bf:9e:24:cc:f3:ad:95:32:11:40:82:
84:17:4c:c2:6e:dd:81:86:67:ff:31:22:68:3c:35:34:cf:8f:
d2:c1:ee:0b:67:95:d5:48:c7:6c:18:7b:0f:1c:d5:1b:2d:d5:
12:ac:55:57:3e:3d:01:63:48:7a:0a:f6:24:00:29:fc:72:ee:
6b:8e:59:d5:78:10:aa:29:d9:61:37:e9:92:7d:2e:ef:db:76:
96:03:02:fe:e6:56:db:88:4d:ef:4c:fd:fc:d6:2b:f6:93:c5:
4e:de:92:fd:da:6d:24:5d:3e:46:d1:fa:03:cf:17:ff:0b:07:
85:37:a0:83:fe:07:f4:2d:04:c6:8a:f9:d2:65:2c:9a:4d:0f:
cc:0f:1d:9e:7f:4b:32:6e:b7:25:70:d8:ec:02:86:23:27:4b:
3f:ac:f7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:24:59 2026 by rpki-client