Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
File: rr3q1PHRyN2pbRzReJ2d0-I78VM.mft (raw, json)
Hash identifier: /rfUCeY7Rs/cVMDSYfyl/z2YbOR1PtIwZOWfmkD9+bE=
Subject key identifier: E0:6B:8B:C0:EB:A1:F9:2E:27:FC:5F:E4:EA:AE:2E:72:0A:E5:33:EA
Authority key identifier: AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53
Certificate issuer: /CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
Certificate serial: 01A1DD5DC80809A7CB6296D05005C0001F46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
Manifest number: 11DE
Signing time: Sun 15 Nov 2026 04:01:13 +0000
Manifest this update: Sun 15 Nov 2026 04:01:13 +0000
Manifest next update: Mon 16 Nov 2026 04:01:13 +0000
Files and hashes: 1: 2XECgtpjsen86VkC8yydIYPOl1c.roa (hash: BPZBQJjMYkB0nrNJVAIozX1sKQI4gxMXxsPOFyAaAE0=)
2: _2RVkv-dG4-YIAymCk1yOs7NK58.roa (hash: o6HUJs0cl57DuL7YAIkgRklqKfSqkx4WuloF1lwdZUE=)
3: rr3q1PHRyN2pbRzReJ2d0-I78VM.crl (hash: hNwKIFs4KgBp7imRDCGQKKZcfcP4vLJnFAO9pGyhzB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5d:c8:08:09:a7:cb:62:96:d0:50:05:c0:00:1f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
Validity
Not Before: Nov 15 04:01:13 2026 GMT
Not After : Nov 16 04:01:13 2026 GMT
Subject: CN=e06b8bc0eba1f92e27fc5fe4eaae2e720ae533ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4b:60:b4:24:41:43:2c:88:29:39:24:7c:8c:
50:37:5b:91:04:31:54:80:d7:35:21:9b:51:e5:7d:
ec:f3:c3:9c:bc:79:b2:45:b2:51:e5:62:f7:51:14:
5c:5b:51:5c:5a:a9:f7:65:66:ce:04:91:1e:34:4c:
60:d2:27:fd:19:70:9e:73:46:ad:5b:2f:55:7e:63:
d5:0f:8a:eb:12:08:36:29:bc:86:9a:2b:6a:a7:76:
6e:c9:53:e6:c7:a6:73:35:20:43:53:f4:b7:58:c0:
51:6a:ee:4a:8d:58:e1:16:0b:b1:62:f3:e0:c9:9b:
40:1d:34:cb:da:14:8f:63:4a:62:28:9f:e0:69:df:
95:1d:32:c6:c9:fb:70:71:9c:1b:3d:07:1e:b9:42:
9a:b3:0a:9b:e7:6b:84:31:4c:a4:f0:db:4e:38:99:
38:23:e1:b8:ae:f0:21:a4:2f:be:76:1b:e1:08:d2:
19:04:5c:02:42:00:d3:98:77:8e:3e:3e:8f:c0:85:
3c:1b:2c:ee:a9:d2:aa:c8:60:cd:14:bf:96:d3:1f:
8a:6f:f5:29:76:a3:f5:d2:3b:9c:67:8a:81:e1:00:
00:d5:51:73:8b:88:3b:84:7c:22:ed:c7:da:25:8c:
3f:be:11:a9:a6:32:ec:28:7b:de:4f:15:df:45:e1:
13:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6B:8B:C0:EB:A1:F9:2E:27:FC:5F:E4:EA:AE:2E:72:0A:E5:33:EA
X509v3 Authority Key Identifier:
keyid:AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:2a:20:09:06:5d:a6:66:14:e0:ce:76:77:22:94:13:10:02:
07:15:2e:a1:07:3f:98:75:28:66:a1:cc:e6:9b:6e:bc:4c:51:
95:5b:13:5b:87:98:31:32:9f:42:be:09:fa:ae:3d:1d:66:76:
fe:db:ec:c7:32:89:a5:b0:19:5c:e3:42:32:a4:26:d3:a5:75:
e2:61:b4:dd:0e:9a:1e:a1:32:32:e0:da:57:71:37:bc:ea:b4:
46:b4:a0:40:8c:ff:9e:c8:c7:8b:d1:c7:cf:6b:61:d7:2c:8f:
8c:b2:52:bc:d1:e7:18:63:89:dc:85:ea:32:1e:6d:70:c1:6c:
76:30:3a:0f:3a:90:52:af:73:fd:9d:9f:5c:cf:a2:24:6e:30:
97:b2:fd:c1:f5:66:89:3c:92:61:31:c4:58:36:4c:78:5d:6e:
49:26:9f:b7:21:67:49:9c:09:55:ce:58:e4:b3:c4:d8:0f:66:
5a:60:e1:4a:20:87:cc:94:d0:4f:11:7c:70:7a:65:a8:1d:6b:
ba:43:94:94:cf:19:86:8e:2a:3c:c4:c3:20:56:0e:b4:dc:04:
fa:4b:9b:a9:f3:97:be:98:c8:69:85:8c:d9:26:67:73:b2:3c:
75:08:8b:75:d2:6a:2a:4f:66:fa:22:34:db:cf:63:0c:5d:b8:
88:21:0f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:25:39 2026 by rpki-client