Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
File: 3qSlB60VhloLLuwJ67TnVFf0AYs.mft (raw, json)
Hash identifier: kdNEhB2ArSLrYRcsmNNtZEocWxafjITeSEwFKH/OHOo=
Subject key identifier: 9D:9A:7D:69:D0:89:6A:9B:01:73:E1:EA:87:9B:B1:72:16:30:94:A8
Authority key identifier: DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B
Certificate issuer: /CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
Certificate serial: 01A1DE712D428E674D7377029D28C9A82E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
Manifest number: 051C
Signing time: Sun 15 Nov 2026 09:02:01 +0000
Manifest this update: Sun 15 Nov 2026 09:02:01 +0000
Manifest next update: Mon 16 Nov 2026 09:02:01 +0000
Files and hashes: 1: 3qSlB60VhloLLuwJ67TnVFf0AYs.crl (hash: 9mTmimbz8S60iamxRVu7uH2r/3/K4/mXKbIqONHANTM=)
2: UcfLZ7L91GVWjLGWEYmlJV2c10o.roa (hash: uVZ/PpG6ROCuILZTxmMA8qXeD47uyabcF2INsekoGNc=)
3: n_N9Ah4Rw1Wp9Z-3SVYIy6Y0wC4.roa (hash: 2wd1XBjZMp+nPiV7QP5P7/6ushDvOEw3Nbs3DojVSrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:71:2d:42:8e:67:4d:73:77:02:9d:28:c9:a8:2e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
Validity
Not Before: Nov 15 09:02:01 2026 GMT
Not After : Nov 16 09:02:01 2026 GMT
Subject: CN=9d9a7d69d0896a9b0173e1ea879bb172163094a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:38:fc:b8:cc:c7:8b:33:f7:63:2c:7f:3e:4f:
4a:21:2f:98:6f:f9:09:e5:08:23:05:3f:4c:c7:38:
81:41:c3:c5:ef:e6:18:3b:2b:96:d1:48:a2:63:f9:
ca:3e:81:e4:96:0f:c1:6d:56:c4:26:e5:81:57:c6:
ba:cd:d1:16:14:99:30:81:6a:28:00:7f:2c:d4:38:
c7:6e:79:76:3e:b2:eb:22:47:7e:12:40:28:14:77:
18:33:d1:be:9c:1b:01:4e:4f:62:85:ce:ca:05:0d:
f7:56:33:53:d2:dd:f0:1d:f6:4d:13:86:50:04:d2:
78:8b:6a:7b:7c:d3:c9:0e:e1:0d:12:1f:3e:c2:f3:
69:23:5c:3b:e4:73:61:93:70:61:1d:7e:0a:b8:99:
1d:1b:3f:ad:93:02:fc:b6:5e:4a:a4:39:3f:dc:9a:
7f:7c:19:16:da:7c:17:ce:45:3d:c9:4a:1d:ee:61:
e1:39:ff:1f:29:6a:24:a9:54:13:b0:ad:86:88:4f:
b3:2e:5c:85:d5:2d:74:b6:18:2d:fe:09:8f:a1:61:
36:27:dd:69:53:93:e6:19:9e:e3:b6:11:b7:5b:f7:
35:ff:a6:a6:10:e5:eb:23:8a:bb:fe:b4:f1:82:9a:
93:f6:d2:8f:6b:e4:82:85:73:e3:94:c6:62:76:01:
61:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:9A:7D:69:D0:89:6A:9B:01:73:E1:EA:87:9B:B1:72:16:30:94:A8
X509v3 Authority Key Identifier:
keyid:DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:0b:d6:ef:0d:58:7e:eb:b4:fe:30:02:76:ca:f0:00:a4:8c:
be:42:4c:be:b6:eb:7b:c1:d6:cf:15:eb:96:e4:ed:5c:fb:55:
2d:c0:36:f5:76:00:0b:ad:f2:72:6c:27:25:3a:51:29:00:cd:
29:ea:1e:cd:4c:cf:77:2f:ae:df:32:98:d0:e7:98:ae:5b:39:
b4:59:c4:30:f9:fc:5b:dd:b1:04:13:70:aa:b7:03:b8:60:50:
cc:a0:2c:9e:9d:90:64:03:fb:c2:01:f1:79:94:f2:26:bd:78:
8c:25:de:2f:4a:80:79:9d:06:2d:e0:0d:92:5d:38:42:09:7d:
dd:b0:1f:3a:33:eb:f1:b2:36:ed:8c:6e:90:cb:d5:d1:00:c1:
66:9a:ec:d4:bd:44:88:83:84:ca:60:74:8c:05:24:28:28:61:
65:56:08:91:0b:70:77:57:01:11:fc:54:18:34:0e:43:cf:c0:
d5:3f:7d:3b:0c:68:71:79:f8:4d:da:58:98:e3:9c:a1:2b:54:
69:da:10:b4:86:1e:a6:98:e1:a3:81:ef:5f:c3:2a:4d:2a:3b:
46:e3:ba:1d:2f:ec:9d:b5:fd:fb:9f:ad:ed:6a:9e:33:e2:0a:
5e:94:5b:1f:01:ed:13:c1:f2:ae:0b:00:a9:85:f2:73:a0:02:
ab:07:c5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:35:55 2026 by rpki-client