Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.mft
File: 3fwxxRjdlxX93slYJSfshEjXhA0.mft (raw, json)
Hash identifier: j3f0wrYdfrQT18l3wfviwWIU0S9hPs/KKUYogvyE3gc=
Subject key identifier: 70:2E:DF:C6:30:CE:F1:6A:E0:54:13:51:F7:8A:52:94:DC:9D:A6:84
Authority key identifier: DD:FC:31:C5:18:DD:97:15:FD:DE:C9:58:25:27:EC:84:48:D7:84:0D
Certificate issuer: /CN=ddfc31c518dd9715fddec9582527ec8448d7840d
Certificate serial: 01A1DA93F3FAA2C23231DDB908217F7C1CB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fwxxRjdlxX93slYJSfshEjXhA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.mft
Manifest number: 016F
Signing time: Sat 14 Nov 2026 15:01:31 +0000
Manifest this update: Sat 14 Nov 2026 15:01:31 +0000
Manifest next update: Sun 15 Nov 2026 15:01:31 +0000
Files and hashes: 1: 2rI5z9MKWkWLbN4Ac0mrTh9wI0Q.asa (hash: gEb+fnmGtGeQVf4nv5uRoOoaQszHv4xPq/xVWvjZho4=)
2: 3fwxxRjdlxX93slYJSfshEjXhA0.crl (hash: QVMWZzwpBxhTXLJEheEKdK8dr0BnNlbHryZzGywYcs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fwxxRjdlxX93slYJSfshEjXhA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:93:f3:fa:a2:c2:32:31:dd:b9:08:21:7f:7c:1c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfc31c518dd9715fddec9582527ec8448d7840d
Validity
Not Before: Nov 14 15:01:31 2026 GMT
Not After : Nov 15 15:01:31 2026 GMT
Subject: CN=702edfc630cef16ae0541351f78a5294dc9da684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2b:9c:9b:6b:40:d2:f3:b8:a9:e3:a0:ca:dd:
a4:c8:d3:b2:d7:05:ce:63:ea:05:4c:b8:39:0a:3f:
ef:a2:d2:dd:b9:27:45:a2:47:02:1e:c8:da:ab:8d:
be:d6:22:8c:3e:78:64:78:5f:4c:80:c4:bc:3f:67:
54:fd:bb:b5:57:f8:a7:06:12:4a:cc:f9:96:f1:14:
18:af:c9:dc:27:62:ec:49:92:c2:36:09:a4:3a:1c:
39:c6:bc:7d:5a:c4:38:40:c0:07:b2:b4:b8:90:a8:
11:30:a7:56:45:87:e7:73:13:a6:8b:f2:a7:75:58:
80:ea:8a:66:fb:67:aa:33:52:32:cc:0c:9c:44:a0:
80:4d:31:14:f3:90:49:a3:55:ae:63:b9:f2:1d:04:
0a:5a:22:f8:dc:1d:16:dd:c0:8d:50:a8:4d:de:3d:
76:c0:aa:4f:98:e5:da:70:a5:ad:c8:38:21:a1:4a:
56:94:aa:03:5d:5a:37:ed:72:4b:60:4e:30:9e:dc:
83:26:56:00:42:63:6e:7b:6a:d5:36:a0:78:47:7c:
fa:40:9a:28:ad:80:5c:78:03:54:cd:b2:fb:80:96:
66:12:94:d5:47:33:a7:c4:43:4a:26:34:21:de:b7:
39:28:75:34:ff:d7:83:0d:04:c7:0f:9b:ce:60:b2:
2e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2E:DF:C6:30:CE:F1:6A:E0:54:13:51:F7:8A:52:94:DC:9D:A6:84
X509v3 Authority Key Identifier:
keyid:DD:FC:31:C5:18:DD:97:15:FD:DE:C9:58:25:27:EC:84:48:D7:84:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fwxxRjdlxX93slYJSfshEjXhA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:1d:ce:5b:cb:a8:ff:5c:b6:8c:2d:da:92:a2:d8:08:77:19:
d8:d8:ec:77:c3:ba:ec:c7:4a:df:91:fb:a9:14:a6:4d:af:eb:
4a:17:f6:e4:d2:81:5a:71:b2:23:2b:c1:d2:bb:a6:f4:ed:22:
d0:57:0f:66:b4:27:39:3e:a5:56:58:78:05:c8:bf:2e:fe:dd:
45:80:2e:01:80:68:cb:98:5c:7d:7f:a3:69:ab:da:5d:72:9f:
f5:96:2f:25:b4:b9:cd:22:d8:bb:53:81:bd:6c:7a:da:d3:15:
f6:01:65:b3:4f:40:73:24:7c:92:3c:7d:4d:dd:5e:1d:ab:cd:
7d:4e:75:9f:d4:09:4f:6a:f5:40:db:7d:13:05:36:a0:c3:5a:
ee:fb:03:b7:57:f9:43:ac:85:46:fc:12:68:48:d0:53:d3:a0:
69:c1:f0:f6:3d:8d:b3:d6:e2:de:d8:9d:5b:d1:48:a8:96:78:
9f:eb:b7:c8:42:cd:90:ad:16:92:69:ac:9a:6f:37:92:61:50:
35:b8:95:1f:33:2e:d9:ae:de:80:bd:26:89:3e:72:b0:56:10:
b4:5a:63:4d:89:62:0f:65:a0:2c:8b:77:1d:22:ce:ac:7c:61:
5f:00:f6:ca:26:5d:72:c9:97:ba:f4:fc:01:41:36:71:06:cb:
1a:78:16:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:45:00 2026 by rpki-client