Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/d00e92-76fc-4f42-9408-7a836680922d/1/3FZTz7Ck7lRSXq73s3C0y9mqB4E.mft
File: 3FZTz7Ck7lRSXq73s3C0y9mqB4E.mft (raw, json)
Hash identifier: FSvTSDJG7pYbx0VBZA8UU+LZgkr/KtH3c6kKZ/FewBk=
Subject key identifier: 70:F5:6D:CB:69:3D:11:1D:3B:D9:4A:F6:ED:E9:66:5B:62:C0:6A:75
Authority key identifier: DC:56:53:CF:B0:A4:EE:54:52:5E:AE:F7:B3:70:B4:CB:D9:AA:07:81
Certificate issuer: /CN=dc5653cfb0a4ee54525eaef7b370b4cbd9aa0781
Certificate serial: 01A1DF8325C49F4B9250F6E22A3A54042E96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FZTz7Ck7lRSXq73s3C0y9mqB4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d00e92-76fc-4f42-9408-7a836680922d/1/3FZTz7Ck7lRSXq73s3C0y9mqB4E.mft
Manifest number: 0171
Signing time: Sun 15 Nov 2026 14:01:16 +0000
Manifest this update: Sun 15 Nov 2026 14:01:16 +0000
Manifest next update: Mon 16 Nov 2026 14:01:16 +0000
Files and hashes: 1: 3FZTz7Ck7lRSXq73s3C0y9mqB4E.crl (hash: /t6io1SR3QbH2kRnqhLZDK9kJ03oeiFYdVDUOGE2zj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/d00e92-76fc-4f42-9408-7a836680922d/1/3FZTz7Ck7lRSXq73s3C0y9mqB4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/d00e92-76fc-4f42-9408-7a836680922d/1/3FZTz7Ck7lRSXq73s3C0y9mqB4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3FZTz7Ck7lRSXq73s3C0y9mqB4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:25:c4:9f:4b:92:50:f6:e2:2a:3a:54:04:2e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5653cfb0a4ee54525eaef7b370b4cbd9aa0781
Validity
Not Before: Nov 15 14:01:16 2026 GMT
Not After : Nov 16 14:01:16 2026 GMT
Subject: CN=70f56dcb693d111d3bd94af6ede9665b62c06a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:89:cf:c8:d7:c0:56:cc:f9:42:52:df:5c:6e:
c0:6d:15:42:cb:49:c0:a9:52:d7:e4:e2:c0:f1:1e:
a5:56:92:9f:fa:59:9d:35:22:e0:57:42:f2:23:5e:
97:36:99:b2:bc:a9:91:2b:a2:cd:22:fc:b9:14:58:
8f:9f:60:1c:69:d2:6a:10:40:9e:dd:73:bd:bf:a4:
36:35:cd:20:3b:43:3e:84:6c:55:e7:9a:80:2a:b1:
d2:2a:e9:10:bd:14:c1:d5:be:74:8f:90:7c:b1:e4:
6f:ee:a8:1b:1c:d8:f8:91:c5:45:6b:07:55:72:12:
df:87:f3:5f:df:a3:ad:72:cb:d8:91:a3:bd:58:f9:
f4:c4:11:48:f5:d2:67:13:1a:97:4e:23:03:0f:c0:
c5:5a:aa:4e:59:3f:ff:c4:b4:c5:8d:1f:c8:a1:65:
af:d0:a8:72:02:21:a2:7f:5f:e6:4c:f1:4f:06:e2:
28:7e:84:2e:24:6d:a4:54:ab:13:b6:63:b7:9a:fc:
cd:e6:78:6b:58:41:77:94:d5:11:c0:ba:88:cc:72:
64:c3:80:bf:db:d8:24:7b:45:20:63:1b:53:68:48:
6c:07:28:f4:7c:93:00:c5:2a:f5:5b:bf:82:cd:28:
cd:69:64:3c:34:23:89:a5:c6:eb:ea:73:20:7d:05:
6f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F5:6D:CB:69:3D:11:1D:3B:D9:4A:F6:ED:E9:66:5B:62:C0:6A:75
X509v3 Authority Key Identifier:
keyid:DC:56:53:CF:B0:A4:EE:54:52:5E:AE:F7:B3:70:B4:CB:D9:AA:07:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FZTz7Ck7lRSXq73s3C0y9mqB4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d00e92-76fc-4f42-9408-7a836680922d/1/3FZTz7Ck7lRSXq73s3C0y9mqB4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d00e92-76fc-4f42-9408-7a836680922d/1/3FZTz7Ck7lRSXq73s3C0y9mqB4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:60:75:05:f4:47:ca:00:5e:02:2d:28:f5:44:c5:e0:45:b1:
b4:b4:39:07:55:bb:97:70:2b:ba:ad:02:d1:aa:00:6f:71:62:
61:97:07:9b:ee:f0:18:26:84:30:10:4e:2f:54:15:e5:56:d3:
59:65:bb:06:67:90:5a:03:b7:be:35:ac:97:e0:fb:c3:48:6a:
e6:e5:66:34:5a:a7:86:f8:96:b2:37:e5:1f:94:c2:a0:b6:a9:
d2:da:b8:b6:fe:30:37:ff:0b:6b:e1:e7:b8:76:91:86:a6:88:
18:33:66:25:a3:94:52:2a:95:11:bc:cb:8d:ae:6b:c0:4d:45:
34:b7:51:50:53:b3:48:c6:0b:99:ff:c4:a6:fe:80:1c:58:8a:
d1:8b:2c:ab:da:02:9f:8f:dd:6e:0e:66:0e:ad:7f:49:0d:56:
0d:f3:dd:a0:f8:ae:27:08:bd:a8:c9:1d:2a:3c:79:80:e1:04:
ef:41:67:bc:4b:32:b8:2c:48:ff:5e:bd:2f:5e:72:5b:16:85:
8a:2b:5d:9f:77:82:14:3a:13:62:56:92:30:36:24:e7:40:18:
a7:ac:d2:47:ff:6d:4b:f2:96:86:6a:94:63:1f:43:0d:12:c7:
b6:8c:61:20:af:0a:65:a9:e9:9f:5f:16:02:2d:3b:af:19:57:
6b:dd:ff:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:45:40 2026 by rpki-client