Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
File: 3Feh-cEhycK2-U04p1-_3MVN8Fs.mft (raw, json)
Hash identifier: 38VQZKweQOqzbZA6wg+z1V34eWyyTJbztqCpNUe/GPw=
Subject key identifier: 9A:96:73:91:1A:2A:23:36:B4:1C:D0:D2:AB:C8:3E:BE:B6:C5:72:6A
Authority key identifier: DC:57:A1:F9:C1:21:C9:C2:B6:F9:4D:38:A7:5F:BF:DC:C5:4D:F0:5B
Certificate issuer: /CN=dc57a1f9c121c9c2b6f94d38a75fbfdcc54df05b
Certificate serial: 01A1DE70B96EE9B349ACE47B09D07FBB153E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
Manifest number: 0F6D
Signing time: Sun 15 Nov 2026 09:01:31 +0000
Manifest this update: Sun 15 Nov 2026 09:01:31 +0000
Manifest next update: Mon 16 Nov 2026 09:01:31 +0000
Files and hashes: 1: 3Feh-cEhycK2-U04p1-_3MVN8Fs.crl (hash: fXcxeC6ER4ZMQpGwD0JE0Ra8HCj80XXiIfZZU/jYDsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:b9:6e:e9:b3:49:ac:e4:7b:09:d0:7f:bb:15:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc57a1f9c121c9c2b6f94d38a75fbfdcc54df05b
Validity
Not Before: Nov 15 09:01:31 2026 GMT
Not After : Nov 16 09:01:31 2026 GMT
Subject: CN=9a9673911a2a2336b41cd0d2abc83ebeb6c5726a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e1:c5:1f:18:65:4d:27:26:22:3d:66:1d:d0:
3f:66:3c:5f:0b:f5:ee:08:d9:b8:9e:c1:f4:6d:3f:
05:14:0e:73:69:83:55:c3:4e:d4:59:b1:3d:2d:67:
af:bb:9d:87:59:2b:c9:ff:38:16:b8:ce:aa:b3:7b:
32:e3:ae:ca:74:1d:f5:38:a1:09:21:45:85:47:f1:
87:aa:ed:46:79:52:9a:46:af:6a:09:2a:16:ad:13:
32:43:53:6f:f2:96:ca:c9:cb:7d:d0:8f:db:c3:86:
6f:b0:c3:65:10:4a:3f:a9:2f:f2:ff:9b:2b:5f:55:
7c:16:ac:ee:61:81:d8:f9:66:51:72:7f:d7:fd:d1:
3f:8e:9e:31:3e:f2:96:97:36:6d:f6:6b:8e:41:82:
02:4f:c0:a7:75:b8:66:fb:e0:95:29:35:b9:ea:dd:
17:c7:34:b3:f3:da:49:06:f9:35:ac:01:36:08:e3:
5b:b3:55:23:73:2f:5e:6a:59:44:cd:2a:d2:9f:37:
c8:b8:ad:d2:2e:d3:92:3c:f9:c5:3e:92:18:47:8a:
7e:0f:15:17:8a:3c:cc:f4:5f:81:cf:0e:17:97:84:
40:c4:d3:71:a2:83:90:34:cd:80:22:96:29:06:98:
1a:71:47:90:1d:b5:d6:6e:6f:34:e1:d9:30:80:90:
4b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:96:73:91:1A:2A:23:36:B4:1C:D0:D2:AB:C8:3E:BE:B6:C5:72:6A
X509v3 Authority Key Identifier:
keyid:DC:57:A1:F9:C1:21:C9:C2:B6:F9:4D:38:A7:5F:BF:DC:C5:4D:F0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:44:00:c5:cd:3d:0f:a2:79:c2:a2:8a:30:29:2e:d5:db:e8:
36:70:2d:32:10:72:2b:44:52:c0:42:93:68:6b:cf:51:89:18:
7e:cd:36:ca:11:3c:da:05:f0:ac:28:66:56:60:22:90:45:f1:
f4:3e:2e:2c:df:5a:bd:a3:d1:5b:b2:d5:99:98:fa:8f:57:91:
fa:bf:9a:83:1e:7d:99:18:ef:50:5c:c1:34:7f:c4:8f:b9:c6:
18:a7:80:43:c7:5e:74:49:f6:d5:d4:08:28:20:94:08:d2:eb:
32:1b:f1:c1:0d:c0:44:a6:d7:d7:83:5a:7d:c8:df:03:2a:1b:
5e:02:43:40:fe:3e:ca:84:e1:7e:42:aa:6e:ee:ff:c1:4f:4a:
30:7f:82:f9:2d:3a:b6:f7:9c:50:7f:78:6f:7b:23:bc:67:87:
95:80:13:a2:42:d3:67:62:78:49:36:01:1b:53:17:56:9e:46:
30:ee:e6:6c:15:f2:a7:08:d5:53:73:4c:e4:79:57:89:13:85:
49:08:58:9a:c5:ff:86:36:c1:5e:6d:cd:8a:43:16:ff:3e:1f:
d0:36:2b:d0:55:c7:3d:2a:fb:a6:10:67:02:96:c9:e9:f1:61:
42:7d:cf:c8:5b:88:a0:ea:58:d8:f8:1d:f1:d5:67:d2:fa:48:
0f:aa:fd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:45:13 2026 by rpki-client