Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/b5662a-61a5-48a9-877b-c4453afb2933/1/3APMhzX27sAjqfI6BLLpDVOpIVI.mft
File: 3APMhzX27sAjqfI6BLLpDVOpIVI.mft (raw, json)
Hash identifier: lfklgCPr0eGAJpXX6R4ZxA+l5JyGOHM5XERnG+iG+58=
Subject key identifier: 34:83:D2:79:0F:09:A6:F9:D4:2A:8D:EF:72:ED:26:D2:9D:FE:C5:CA
Authority key identifier: DC:03:CC:87:35:F6:EE:C0:23:A9:F2:3A:04:B2:E9:0D:53:A9:21:52
Certificate issuer: /CN=dc03cc8735f6eec023a9f23a04b2e90d53a92152
Certificate serial: 01A1DE02F660F0F45B0B5F592F70BF784630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3APMhzX27sAjqfI6BLLpDVOpIVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b5662a-61a5-48a9-877b-c4453afb2933/1/3APMhzX27sAjqfI6BLLpDVOpIVI.mft
Manifest number: 0B88
Signing time: Sun 15 Nov 2026 07:01:38 +0000
Manifest this update: Sun 15 Nov 2026 07:01:38 +0000
Manifest next update: Mon 16 Nov 2026 07:01:38 +0000
Files and hashes: 1: 3APMhzX27sAjqfI6BLLpDVOpIVI.crl (hash: qRyuJ0R1CfSGj/evDV6Ms6nAd0RiAAQOnSPoBOuf2S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/b5662a-61a5-48a9-877b-c4453afb2933/1/3APMhzX27sAjqfI6BLLpDVOpIVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/b5662a-61a5-48a9-877b-c4453afb2933/1/3APMhzX27sAjqfI6BLLpDVOpIVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3APMhzX27sAjqfI6BLLpDVOpIVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 07:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:f6:60:f0:f4:5b:0b:5f:59:2f:70:bf:78:46:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc03cc8735f6eec023a9f23a04b2e90d53a92152
Validity
Not Before: Nov 15 07:01:38 2026 GMT
Not After : Nov 16 07:01:38 2026 GMT
Subject: CN=3483d2790f09a6f9d42a8def72ed26d29dfec5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6c:f8:35:21:cb:01:be:f0:31:0b:09:d6:cf:
90:63:95:70:19:16:7d:17:b8:5c:96:17:09:de:cc:
81:97:1b:93:da:e6:35:06:9b:c8:41:0b:4e:8d:79:
5d:2c:ed:31:1e:bd:a2:5b:21:bc:58:5a:cb:68:52:
ba:99:82:cd:b9:e2:4b:ff:a3:83:7b:08:38:02:d6:
3b:10:bc:93:23:15:4d:d7:45:58:c4:1b:20:03:db:
99:da:94:bd:e0:8f:0a:ed:e2:fd:f4:79:b8:e2:21:
6d:e8:7b:e7:6f:76:3b:ac:a7:5d:55:4a:fd:90:78:
2d:5c:7e:a0:7a:a3:3a:d8:05:40:2b:54:cb:37:91:
96:80:de:7e:47:e7:67:33:f2:1d:a2:56:37:92:54:
e3:58:15:eb:28:a7:56:61:71:7d:02:7a:f8:06:41:
14:ef:e3:58:b3:cb:4f:36:83:b9:03:df:01:74:38:
ef:64:20:d6:ea:ee:cd:3f:62:3f:d1:7a:4c:8d:88:
6b:36:ad:dd:67:81:05:f8:a3:e6:c7:2f:15:cb:bc:
06:73:d1:db:45:b8:81:ce:59:14:ac:13:4e:ed:91:
88:9b:5e:18:4d:9a:0f:e1:7c:d6:5d:a9:b0:86:ba:
55:5e:40:38:49:69:27:b0:98:f2:f3:19:9b:f0:b1:
b6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:83:D2:79:0F:09:A6:F9:D4:2A:8D:EF:72:ED:26:D2:9D:FE:C5:CA
X509v3 Authority Key Identifier:
keyid:DC:03:CC:87:35:F6:EE:C0:23:A9:F2:3A:04:B2:E9:0D:53:A9:21:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3APMhzX27sAjqfI6BLLpDVOpIVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b5662a-61a5-48a9-877b-c4453afb2933/1/3APMhzX27sAjqfI6BLLpDVOpIVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b5662a-61a5-48a9-877b-c4453afb2933/1/3APMhzX27sAjqfI6BLLpDVOpIVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ea:56:c8:75:d2:a8:99:d1:8a:1d:6e:40:b7:71:84:c3:f0:
1a:69:e3:64:dc:38:9b:44:e1:68:6b:4c:cf:08:32:8a:94:3b:
03:00:6e:a4:ec:5f:c3:77:94:9a:b7:1c:86:5d:c0:21:d8:6d:
a1:38:4f:73:f0:2e:65:2d:bf:a1:f9:d6:89:2e:3d:6a:81:a7:
c0:09:8c:b6:f3:07:14:6b:ae:da:0e:1a:15:42:87:fe:da:63:
67:5c:62:cc:c4:f5:96:4d:9a:d3:76:87:a3:78:89:5d:60:29:
1d:ac:26:9b:1e:a0:1d:f1:9b:8d:43:1e:7f:ad:d5:9c:13:10:
c1:3b:7c:9c:1e:8b:4e:0a:7e:a2:00:0d:7b:41:fc:82:1f:d8:
22:08:64:d1:d7:48:6f:49:e1:23:d6:0b:5d:2d:f3:db:37:df:
c1:27:73:da:fe:98:ca:f5:b5:22:78:37:d6:1a:ac:7e:25:01:
55:e7:f2:6c:fe:05:29:e6:ca:88:97:7c:65:31:28:05:93:f5:
ea:78:19:27:d2:d1:c7:9d:21:10:df:fe:16:e6:79:87:88:ad:
ad:9c:0d:0a:06:51:18:6d:b6:c0:aa:d7:53:e1:eb:f5:c9:11:
45:67:57:0e:6a:70:3f:54:5d:42:ae:6e:e2:e2:19:b9:a5:dd:
72:f4:19:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHeAvZg8PRbC19ZL3C/eEYwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMDNjYzg3MzVmNmVlYzAyM2E5ZjIzYTA0YjJlOTBkNTNh
OTIxNTIwHhcNMjYxMTE1MDcwMTM4WhcNMjYxMTE2MDcwMTM4WjAzMTEwLwYDVQQD
EygzNDgzZDI3OTBmMDlhNmY5ZDQyYThkZWY3MmVkMjZkMjlkZmVjNWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWz4NSHLAb7wMQsJ1s+QY5VwGRZ9
F7hclhcJ3syBlxuT2uY1BpvIQQtOjXldLO0xHr2iWyG8WFrLaFK6mYLNueJL/6OD
ewg4AtY7ELyTIxVN10VYxBsgA9uZ2pS94I8K7eL99Hm44iFt6Hvnb3Y7rKddVUr9
kHgtXH6geqM62AVAK1TLN5GWgN5+R+dnM/IdolY3klTjWBXrKKdWYXF9Anr4BkEU
7+NYs8tPNoO5A98BdDjvZCDW6u7NP2I/0XpMjYhrNq3dZ4EF+KPmxy8Vy7wGc9Hb
RbiBzlkUrBNO7ZGIm14YTZoP4XzWXamwhrpVXkA4SWknsJjy8xmb8LG2OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSD0nkPCab51CqN73LtJtKd/sXKMB8GA1UdIwQY
MBaAFNwDzIc19u7AI6nyOgSy6Q1TqSFSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0FQTWh6WDI3c0FqcWZJNkJMTHBEVk9wSVZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iNTY2MmEtNjFhNS00OGE5LTg3N2It
YzQ0NTNhZmIyOTMzLzEvM0FQTWh6WDI3c0FqcWZJNkJMTHBEVk9wSVZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iNTY2MmEtNjFhNS00OGE5LTg3N2ItYzQ0NTNhZmIyOTMz
LzEvM0FQTWh6WDI3c0FqcWZJNkJMTHBEVk9wSVZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMOpWyHXS
qJnRih1uQLdxhMPwGmnjZNw4m0ThaGtMzwgyipQ7AwBupOxfw3eUmrcchl3AIdht
oThPc/AuZS2/ofnWiS49aoGnwAmMtvMHFGuu2g4aFUKH/tpjZ1xizMT1lk2a03aH
o3iJXWApHawmmx6gHfGbjUMef63VnBMQwTt8nB6LTgp+ogANe0H8gh/YIghk0ddI
b0nhI9YLXS3z2zffwSdz2v6YyvW1Ing31hqsfiUBVefybP4FKebKiJd8ZTEoBZP1
6ngZJ9LRx50hEN/+FuZ5h4itrZwNCgZRGG22wKrXU+Hr9ckRRWdXDmpwP1RdQq5u
4uIZuaXdcvQZjg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:41:14 2026 by rpki-client