Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
File: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft (raw, json)
Hash identifier: eU8Q47QI97dspe/epvJvJlLedcNz9vZya7crF2bJR5w=
Subject key identifier: D6:A4:8C:B1:0C:55:63:B4:BE:D6:AD:D8:80:C6:7D:87:82:82:CE:C6
Authority key identifier: DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95
Certificate issuer: /CN=de0ccd2391fa32c0ade297c5fc883090b3991395
Certificate serial: 01A1DA5C91D517273DE1FD37A216F913B14F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
Manifest number: 1AF6
Signing time: Sat 14 Nov 2026 14:01:01 +0000
Manifest this update: Sat 14 Nov 2026 14:01:01 +0000
Manifest next update: Sun 15 Nov 2026 14:01:01 +0000
Files and hashes: 1: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl (hash: c/xG7mH/IRvBlbWAnSzGHBLlDl3L2dBaD67RI/Q16nk=)
2: 9unExc-u2klcvykG9A7nqtJ0jEo.roa (hash: fK53zNSLF8dtN9JmssE7wAYgASom2B/ybWqpgUFg/kU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:5c:91:d5:17:27:3d:e1:fd:37:a2:16:f9:13:b1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0ccd2391fa32c0ade297c5fc883090b3991395
Validity
Not Before: Nov 14 14:01:01 2026 GMT
Not After : Nov 15 14:01:01 2026 GMT
Subject: CN=d6a48cb10c5563b4bed6add880c67d878282cec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:78:80:6a:66:45:35:29:4e:21:f6:72:7f:07:
55:35:b8:c2:aa:ca:f7:80:16:cd:e8:d3:61:65:5e:
d7:96:28:29:13:d6:ca:49:ef:00:2e:3b:11:49:2c:
a2:21:f6:64:02:9d:77:d7:d6:95:46:5b:7d:9a:22:
40:80:20:17:6b:5e:1b:a7:d1:02:c3:53:ab:e0:a0:
df:4d:7a:b6:81:95:9e:ce:7b:27:c2:f6:90:46:dc:
6c:e4:56:69:a3:e8:75:a2:de:df:82:33:b2:17:2a:
37:3e:f2:60:97:f9:d6:f2:bb:d6:8f:68:59:f5:4d:
a8:3a:d3:4d:25:9a:f2:2b:ed:8a:61:07:cb:a7:83:
14:dd:c8:63:b1:82:e1:67:34:86:2b:9d:7d:ff:99:
87:a3:03:91:35:40:a0:82:cb:74:4d:91:95:91:72:
6f:22:77:a2:42:a0:21:66:38:0e:5f:8f:75:d6:5f:
45:52:9a:04:ba:fb:d8:4a:8f:0f:8c:52:75:d3:5b:
d1:c7:75:0e:42:ea:8e:1e:5f:11:c7:fc:96:af:9d:
a1:5f:ca:58:94:9c:0d:17:21:4e:ab:70:c8:d9:9a:
ed:92:48:0f:27:67:9d:88:a4:73:f4:8d:73:15:31:
d5:6f:de:26:5e:45:c9:88:0a:ed:8e:2c:3c:bb:03:
9c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A4:8C:B1:0C:55:63:B4:BE:D6:AD:D8:80:C6:7D:87:82:82:CE:C6
X509v3 Authority Key Identifier:
keyid:DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f0:27:8c:78:8c:e8:fd:63:b6:66:2e:30:54:70:96:7d:5f:
2f:df:83:1c:16:37:35:bb:a3:21:f6:4d:82:79:6d:07:48:26:
41:e8:f0:df:3c:e0:8f:2a:f9:20:20:69:59:b9:1e:71:d8:ff:
37:bc:19:24:02:91:41:19:44:a2:58:2d:5c:e6:51:7f:14:a0:
8f:e5:0f:93:22:28:6a:19:e9:3a:85:93:4c:5d:07:ce:bf:a7:
e9:eb:64:d5:fd:be:21:8d:ae:5b:0b:ac:f8:6f:1a:d3:03:47:
cc:ed:59:13:a3:ea:81:73:be:04:73:1a:39:9d:a3:92:6b:d6:
17:eb:60:e8:d9:c0:0f:1b:77:b7:f6:f5:4c:bc:89:ae:a8:f7:
81:8e:b4:03:fb:17:eb:f5:8a:fd:a5:bf:f4:2d:2a:37:52:c3:
e5:bd:f4:f3:6e:82:1b:99:a7:74:63:37:48:9f:f5:4d:0c:ff:
e1:4a:14:f5:4f:4c:d3:da:4f:38:d7:f6:5a:64:b6:a1:37:f6:
11:55:18:72:c4:03:ea:f6:33:60:19:46:57:95:9a:f8:34:65:
e0:33:a0:19:e7:74:22:38:c4:8e:95:8e:43:ae:0d:75:9b:f1:
3c:ae:d1:5f:f7:73:9e:f9:99:95:0b:62:52:d4:96:b8:1a:69:
11:90:7e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:42:43 2026 by rpki-client