Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
File: 3xRM6OjkQV5chqCygEmaOFwU7_I.mft (raw, json)
Hash identifier: +LY749sw/ZdcBKfJLQwCfoO5UToawS56NZHbwjxdTck=
Subject key identifier: 61:06:91:B0:F2:F8:1D:56:0C:79:EC:FC:13:DF:9E:5E:B2:0B:82:FA
Authority key identifier: DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
Certificate issuer: /CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Certificate serial: 01A1DF82EFC98BFADD689F26B8B881E97510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
Manifest number: 1170
Signing time: Sun 15 Nov 2026 14:01:02 +0000
Manifest this update: Sun 15 Nov 2026 14:01:02 +0000
Manifest next update: Mon 16 Nov 2026 14:01:02 +0000
Files and hashes: 1: 3xRM6OjkQV5chqCygEmaOFwU7_I.crl (hash: vUU9zEKbBgvJuEDgM0tNM9PXGnraY2wCaVaOUWIBoIE=)
2: IFcPSJLrXOIb360qpvfjslM8AeU.asa (hash: Uoj3vnQ4WI4zOKZ/VBdpJT4g8J+jbJ0SehrMNsQWEOg=)
3: mN6LPum92-oppYTfVnse9pFdGGY.roa (hash: Az1RSnzhomoH0PRWVFUSJEmI0WtwP1548LAxILCV7N4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:82:ef:c9:8b:fa:dd:68:9f:26:b8:b8:81:e9:75:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Validity
Not Before: Nov 15 14:01:02 2026 GMT
Not After : Nov 16 14:01:02 2026 GMT
Subject: CN=610691b0f2f81d560c79ecfc13df9e5eb20b82fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3c:0b:7a:d3:a4:82:d2:1f:00:4e:53:13:e9:
ea:96:90:79:21:75:83:00:ea:65:db:b4:66:dc:d4:
30:c7:ab:ed:5b:77:7e:1b:fe:68:f8:ce:03:d9:5a:
55:92:64:7a:4f:7b:c4:1f:69:50:da:17:bd:85:6a:
f9:3a:c8:e5:bd:55:10:27:f3:6e:36:28:ad:ef:5c:
44:49:d0:f9:92:02:29:7f:12:64:9a:b7:20:b0:93:
87:e5:23:fb:ba:a6:60:12:5f:47:ec:c0:3a:c6:ab:
e0:45:44:78:dc:e4:b3:8c:83:c1:23:fd:53:aa:a7:
ba:a6:4b:a1:61:82:fa:ff:cd:1d:ff:ed:2c:03:ab:
34:69:5a:a9:10:07:c6:73:ab:4f:2b:5f:43:31:4a:
0d:87:11:54:ff:33:45:9a:1b:90:20:0c:bd:ee:88:
28:a0:33:fe:54:89:09:e1:74:dd:b7:da:58:6b:df:
56:22:b1:d7:0a:b1:c5:c8:d2:28:cc:19:ea:31:a3:
43:47:71:1c:4a:c3:a4:6d:f7:9c:3f:2c:f1:f2:66:
91:9e:24:99:01:dd:ba:65:b5:0d:87:40:1c:2e:4c:
ab:53:2d:d4:ee:92:5c:7e:a2:9f:22:16:65:e7:b2:
eb:94:fb:d2:3f:2c:06:fc:60:b3:ea:31:63:53:75:
c4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:06:91:B0:F2:F8:1D:56:0C:79:EC:FC:13:DF:9E:5E:B2:0B:82:FA
X509v3 Authority Key Identifier:
keyid:DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7a:6e:48:ee:e9:a9:69:30:4d:f3:6b:82:39:03:86:67:74:
10:d2:a0:92:5d:05:4d:07:9f:2a:4d:ac:2a:d0:1d:8e:08:f4:
17:97:1a:7a:35:81:64:09:c1:30:f3:dc:5c:85:32:2b:48:6f:
1a:b1:7f:42:a5:1c:a0:76:db:c0:bc:d0:45:14:5f:23:5a:d7:
cb:10:b2:7e:56:28:70:1c:f4:45:ff:ba:98:d6:1a:8c:cc:ac:
32:19:30:ef:d5:ec:c2:8f:7d:a4:58:4b:51:82:11:07:1a:bc:
50:71:b5:cc:24:5f:29:a1:53:cd:fa:f6:f9:e7:e0:5b:f3:26:
27:7b:64:06:58:13:6f:60:10:a1:39:8f:14:db:0e:c6:1b:fc:
65:d9:7e:d7:87:88:d6:8d:97:48:1c:61:44:6f:f7:72:00:0d:
c3:9c:c0:7e:3e:7b:f9:9b:49:a6:59:a1:70:ce:b4:54:4c:bf:
38:d0:a0:3e:30:aa:41:52:d2:c5:6d:e7:bb:22:ac:37:bb:f1:
83:cd:9a:da:e7:09:41:bf:dd:59:73:3a:97:f9:2f:83:e8:45:
ef:4e:fc:11:ad:4a:0b:30:05:15:0a:71:4c:14:42:b0:8a:d6:
3c:6a:7d:20:02:54:ab:ac:6d:1a:0a:1b:81:89:1d:9c:f4:0e:
13:71:a3:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfgu/Ji/rdaJ8muLiB6XUQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMTQ0Y2U4ZThlNDQxNWU1Yzg2YTBiMjgwNDk5YTM4NWMx
NGVmZjIwHhcNMjYxMTE1MTQwMTAyWhcNMjYxMTE2MTQwMTAyWjAzMTEwLwYDVQQD
Eyg2MTA2OTFiMGYyZjgxZDU2MGM3OWVjZmMxM2RmOWU1ZWIyMGI4MmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTwLetOkgtIfAE5TE+nqlpB5IXWD
AOpl27Rm3NQwx6vtW3d+G/5o+M4D2VpVkmR6T3vEH2lQ2he9hWr5OsjlvVUQJ/Nu
Niit71xESdD5kgIpfxJkmrcgsJOH5SP7uqZgEl9H7MA6xqvgRUR43OSzjIPBI/1T
qqe6pkuhYYL6/80d/+0sA6s0aVqpEAfGc6tPK19DMUoNhxFU/zNFmhuQIAy97ogo
oDP+VIkJ4XTdt9pYa99WIrHXCrHFyNIozBnqMaNDR3EcSsOkbfecPyzx8maRniSZ
Ad26ZbUNh0AcLkyrUy3U7pJcfqKfIhZl57LrlPvSPywG/GCz6jFjU3XEKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGEGkbDy+B1WDHns/BPfnl6yC4L6MB8GA1UdIwQY
MBaAFN8UTOjo5EFeXIagsoBJmjhcFO/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3hSTTZPamtRVjVjaHFDeWdFbWFPRndVN19JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wZjQzMDItNDFhMi00ZGE0LTg3OGUt
NTg2N2JlNzAzNmIzLzEvM3hSTTZPamtRVjVjaHFDeWdFbWFPRndVN19JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wZjQzMDItNDFhMi00ZGE0LTg3OGUtNTg2N2JlNzAzNmIz
LzEvM3hSTTZPamtRVjVjaHFDeWdFbWFPRndVN19JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHpuSO7p
qWkwTfNrgjkDhmd0ENKgkl0FTQefKk2sKtAdjgj0F5caejWBZAnBMPPcXIUyK0hv
GrF/QqUcoHbbwLzQRRRfI1rXyxCyflYocBz0Rf+6mNYajMysMhkw79Xswo99pFhL
UYIRBxq8UHG1zCRfKaFTzfr2+efgW/MmJ3tkBlgTb2AQoTmPFNsOxhv8Zdl+14eI
1o2XSBxhRG/3cgANw5zAfj57+ZtJplmhcM60VEy/ONCgPjCqQVLSxW3nuyKsN7vx
g82a2ucJQb/dWXM6l/kvg+hF7078Ea1KCzAFFQpxTBRCsIrWPGp9IAJUq6xtGgob
gYkdnPQOE3GjFA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:28:08 2026 by rpki-client