Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
File: 3hL5ZansM-LC6HthYb7vuL4obKM.mft (raw, json)
Hash identifier: zNaJrrtG3vhiyiwvJMW7ynAO2XK5IHJNdL8fDzdFAaw=
Subject key identifier: 4D:F4:28:88:47:AE:C2:DC:04:6D:80:61:DE:7D:B2:6A:E7:B5:01:A1
Authority key identifier: DE:12:F9:65:A9:EC:33:E2:C2:E8:7B:61:61:BE:EF:B8:BE:28:6C:A3
Certificate issuer: /CN=de12f965a9ec33e2c2e87b6161beefb8be286ca3
Certificate serial: 01A1D9EEF306E277CA5C8CA404C85B14E271
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
Manifest number: 1919
Signing time: Sat 14 Nov 2026 12:01:17 +0000
Manifest this update: Sat 14 Nov 2026 12:01:17 +0000
Manifest next update: Sun 15 Nov 2026 12:01:17 +0000
Files and hashes: 1: 3hL5ZansM-LC6HthYb7vuL4obKM.crl (hash: hQ0VXd4bjArEJEC0xncpRwDFftewmZDKHa8PT6XPjYk=)
2: dQKWrb4274MA9TnUoPK0iLguRN8.roa (hash: iabYGi8dw6jC4+Zg8izYgwpn552JIuXwr1GRxu62hag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:ee:f3:06:e2:77:ca:5c:8c:a4:04:c8:5b:14:e2:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de12f965a9ec33e2c2e87b6161beefb8be286ca3
Validity
Not Before: Nov 14 12:01:17 2026 GMT
Not After : Nov 15 12:01:17 2026 GMT
Subject: CN=4df4288847aec2dc046d8061de7db26ae7b501a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:43:cd:90:32:dc:5b:9a:0f:94:96:0d:de:cd:
88:81:e7:98:e7:9d:3b:23:cb:0d:2a:f7:72:53:2e:
76:2e:2c:d8:48:7b:ea:b7:67:d7:d9:63:58:79:e8:
2f:73:a7:e0:9d:46:e6:fc:d5:b3:7b:d3:bc:a1:c8:
e7:e2:de:35:dd:35:f4:26:d6:c2:9c:19:88:7f:e7:
cc:87:bd:35:42:df:83:d8:c1:05:fc:c3:18:8f:e3:
38:8f:d4:66:a1:bb:d9:ac:19:47:0f:73:18:b5:8e:
2e:ef:1f:16:a6:55:60:20:05:9a:9d:4c:64:3c:8d:
41:c4:72:18:0c:3d:fa:c8:d2:74:29:3a:43:9d:8e:
1f:ab:4c:ac:20:d9:99:1b:cd:68:07:11:12:e3:7c:
75:64:21:7a:58:2e:b0:61:a0:9f:0c:5c:1c:4b:2b:
9f:e3:58:d6:85:60:f1:3c:1b:71:4c:a0:26:83:3d:
c1:3a:72:cc:e7:2c:ff:a5:cc:9e:d4:e2:ec:23:5b:
9c:d7:a7:1e:08:01:08:b1:dd:45:80:71:db:4c:7f:
e4:a9:1d:36:bc:6d:bc:f5:6e:51:6b:d1:15:42:de:
31:a9:72:31:50:c0:3c:71:c1:30:60:21:b8:c2:41:
dc:cd:92:ee:84:a3:4b:c4:e1:f1:12:90:74:01:5b:
c5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F4:28:88:47:AE:C2:DC:04:6D:80:61:DE:7D:B2:6A:E7:B5:01:A1
X509v3 Authority Key Identifier:
keyid:DE:12:F9:65:A9:EC:33:E2:C2:E8:7B:61:61:BE:EF:B8:BE:28:6C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:47:98:19:bc:64:32:66:3e:df:16:68:53:88:17:87:d3:13:
ea:5f:c6:3a:82:73:ec:01:d0:0c:1a:82:58:8e:05:93:29:84:
c0:58:76:93:01:db:4f:94:c9:6a:e2:6a:71:41:31:63:89:dd:
d9:87:5f:87:b7:d6:da:11:b3:5d:b5:32:36:14:e2:73:46:39:
45:59:e5:95:e7:4c:b3:3a:48:c7:c2:2f:36:51:29:a6:d3:7d:
ec:24:6b:79:29:39:1c:b7:8b:99:77:db:e3:4b:ac:74:59:67:
57:a9:3c:b0:c5:cf:21:37:58:e3:11:b4:16:4c:7c:fd:8b:65:
eb:8d:f9:96:aa:ee:96:7b:5f:75:b2:58:6b:06:c7:c9:6b:48:
3c:9b:c2:ae:c1:5f:97:21:1c:c5:2f:07:97:96:17:f5:dd:ea:
f7:8f:38:65:e6:e8:c0:2d:0b:3c:7d:40:4c:1f:0f:b9:eb:29:
db:10:8e:a3:a6:c4:3d:f0:47:08:6a:13:ab:58:bb:5a:d8:62:
39:83:80:24:aa:55:ba:84:b4:8e:a6:9e:5a:9d:46:56:e6:e3:
be:4c:f7:cc:37:10:22:57:b0:7b:4c:40:f8:9e:af:b9:98:6a:
bd:86:db:9c:08:1c:14:73:67:ee:47:89:06:c6:4c:7e:12:a0:
af:61:46:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHZ7vMG4nfKXIykBMhbFOJxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMTJmOTY1YTllYzMzZTJjMmU4N2I2MTYxYmVlZmI4YmUy
ODZjYTMwHhcNMjYxMTE0MTIwMTE3WhcNMjYxMTE1MTIwMTE3WjAzMTEwLwYDVQQD
Eyg0ZGY0Mjg4ODQ3YWVjMmRjMDQ2ZDgwNjFkZTdkYjI2YWU3YjUwMWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEPNkDLcW5oPlJYN3s2IgeeY5507
I8sNKvdyUy52LizYSHvqt2fX2WNYeegvc6fgnUbm/NWze9O8ocjn4t413TX0JtbC
nBmIf+fMh701Qt+D2MEF/MMYj+M4j9RmobvZrBlHD3MYtY4u7x8WplVgIAWanUxk
PI1BxHIYDD36yNJ0KTpDnY4fq0ysINmZG81oBxES43x1ZCF6WC6wYaCfDFwcSyuf
41jWhWDxPBtxTKAmgz3BOnLM5yz/pcye1OLsI1uc16ceCAEIsd1FgHHbTH/kqR02
vG289W5Ra9EVQt4xqXIxUMA8ccEwYCG4wkHczZLuhKNLxOHxEpB0AVvFmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE30KIhHrsLcBG2AYd59smrntQGhMB8GA1UdIwQY
MBaAFN4S+WWp7DPiwuh7YWG+77i+KGyjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2hMNVphbnNNLUxDNkh0aFliN3Z1TDRvYktNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8wZjAzNzMtZGI2ZC00Nzk3LTgyMGQt
YjZkMTJhYzY2ODMxLzEvM2hMNVphbnNNLUxDNkh0aFliN3Z1TDRvYktNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8wZjAzNzMtZGI2ZC00Nzk3LTgyMGQtYjZkMTJhYzY2ODMx
LzEvM2hMNVphbnNNLUxDNkh0aFliN3Z1TDRvYktNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASUeYGbxk
MmY+3xZoU4gXh9MT6l/GOoJz7AHQDBqCWI4FkymEwFh2kwHbT5TJauJqcUExY4nd
2Ydfh7fW2hGzXbUyNhTic0Y5RVnlledMszpIx8IvNlEpptN97CRreSk5HLeLmXfb
40usdFlnV6k8sMXPITdY4xG0Fkx8/Ytl6435lqrulntfdbJYawbHyWtIPJvCrsFf
lyEcxS8Hl5YX9d3q9484ZebowC0LPH1ATB8Puesp2xCOo6bEPfBHCGoTq1i7Wthi
OYOAJKpVuoS0jqaeWp1GVubjvkz3zDcQIlewe0xA+J6vuZhqvYbbnAgcFHNn7keJ
BsZMfhKgr2FGaQ==
-----END CERTIFICATE-----
Generated at Sat Nov 14 20:44:45 2026 by rpki-client