Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
File: 3svvNSysca1brg6LHAIkbjtlAlA.mft (raw, json)
Hash identifier: cG/18xvtX+gjuQMgJetNKuWO2syBkKvzM5nb0ELxfLU=
Subject key identifier: 66:37:BC:65:59:BD:2B:AA:F8:E2:C7:A0:2C:22:C4:DC:4A:72:7F:C8
Authority key identifier: DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50
Certificate issuer: /CN=decbef352cac71ad5bae0e8b1c02246e3b650250
Certificate serial: 01A1E0282B1F73D43F6CFF664FF8B7214F32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
Manifest number: 0E76
Signing time: Sun 15 Nov 2026 17:01:31 +0000
Manifest this update: Sun 15 Nov 2026 17:01:31 +0000
Manifest next update: Mon 16 Nov 2026 17:01:31 +0000
Files and hashes: 1: 3svvNSysca1brg6LHAIkbjtlAlA.crl (hash: IV5xknhfJe7OOiX3hHKqGLBpYicxub98tZCAjAdxjBs=)
2: VuX4J2QukxsOIE5nfEx2tHa_6Dc.roa (hash: /6Cm3xSVnWhJDBO1jxzYWi2+tCHbHsChrmLHN+jeMKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:28:2b:1f:73:d4:3f:6c:ff:66:4f:f8:b7:21:4f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=decbef352cac71ad5bae0e8b1c02246e3b650250
Validity
Not Before: Nov 15 17:01:31 2026 GMT
Not After : Nov 16 17:01:31 2026 GMT
Subject: CN=6637bc6559bd2baaf8e2c7a02c22c4dc4a727fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7c:09:ed:32:f3:8f:3c:aa:4d:63:31:51:ee:
3d:ac:84:6d:ec:56:7b:16:ce:a6:d0:17:f0:4a:a7:
61:aa:01:19:1e:3f:b8:ca:4e:96:8c:a0:7c:32:ff:
3a:68:b5:54:91:a5:83:47:5c:98:12:ae:6f:72:fd:
52:0a:aa:b0:bb:e9:f0:f9:31:06:24:22:d7:5c:10:
73:49:e8:df:7f:9c:19:c3:f7:44:af:dd:6e:67:6a:
c6:bd:b3:e5:17:a2:50:1b:e5:76:02:9d:9b:f9:35:
e2:3e:4d:af:2d:3b:07:b1:f7:40:8d:2d:3a:66:b7:
e0:96:b0:16:e4:5f:e3:04:56:26:71:04:e5:db:41:
94:af:50:b2:15:ec:55:81:c7:d2:b3:17:40:cd:df:
b7:b7:55:d3:44:17:15:88:b8:1d:02:31:b0:42:51:
8e:6a:97:8a:4a:db:cd:f2:f1:73:12:76:6f:3c:3e:
59:f3:ce:c0:91:b1:69:8f:f6:da:ab:e7:d2:26:d0:
94:4d:97:27:83:96:9f:19:95:37:6c:5b:eb:e1:3f:
0b:10:44:91:92:a8:16:40:3f:16:ea:21:b1:2a:05:
12:01:fe:9e:7f:bf:cb:a1:19:5d:8f:9e:24:22:fd:
1c:6b:5f:a7:b4:a6:ee:1c:f2:fe:77:b1:35:8f:a1:
48:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:37:BC:65:59:BD:2B:AA:F8:E2:C7:A0:2C:22:C4:DC:4A:72:7F:C8
X509v3 Authority Key Identifier:
keyid:DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:6d:d5:e4:73:0c:76:d8:7e:7d:56:a6:b4:4e:9d:88:9a:69:
30:6a:c9:64:4a:35:d3:01:d9:de:d4:a5:4c:8c:18:a6:c3:46:
22:d4:5a:8a:32:0c:20:c4:0c:74:de:00:f3:da:6c:5d:02:b3:
af:b0:9d:86:66:d8:6c:0d:69:84:3a:0a:18:15:e6:ae:3a:ba:
68:d1:ca:be:c0:e6:94:fa:7d:43:e1:0d:35:af:79:f5:56:e1:
90:6f:8c:3f:67:77:98:cc:80:e9:70:77:26:07:22:48:79:d4:
a2:51:10:d1:15:11:30:2b:13:cb:47:4b:85:df:d6:59:82:6a:
14:87:1a:76:bf:d6:85:a4:58:ab:42:95:58:d9:7d:1e:a1:ca:
8a:a1:b8:a6:4e:b0:fe:bc:49:c6:12:57:9f:10:00:37:34:f5:
e8:20:93:17:16:be:51:a3:55:18:7e:2b:ba:fd:d9:70:dd:fc:
71:89:44:1e:cf:a7:d3:0b:1e:c6:40:6a:c0:e1:76:2e:d7:a2:
f8:be:0d:38:aa:ff:a4:b5:b7:aa:67:2f:fe:69:90:02:92:9f:
86:67:d4:00:c1:40:ea:8e:c1:94:b8:6d:3f:10:aa:c7:a1:a3:
e1:35:79:00:d6:36:d7:d2:0f:ab:ee:0f:8d:b7:88:0c:c2:81:
6b:49:64:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:27:20 2026 by rpki-client