Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
File: b-3wt2FSkK76zF9qprQdnRhD8bY.mft (raw, json)
Hash identifier: tcHhdS+Wjeup3yYdsZwoE+dyC2r6e+yrALD3ppr07jk=
Subject key identifier: 02:45:0C:C8:C3:3C:82:09:F8:CC:52:24:50:8D:96:FF:30:69:A9:9F
Authority key identifier: 6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6
Certificate issuer: /CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
Certificate serial: 01A1DE0279B8B2292611818AD435B0A536DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
Manifest number: 1AFE
Signing time: Sun 15 Nov 2026 07:01:06 +0000
Manifest this update: Sun 15 Nov 2026 07:01:06 +0000
Manifest next update: Mon 16 Nov 2026 07:01:06 +0000
Files and hashes: 1: 3JCprLbCd_JV3m7EK4otwaRJ6FI.asa (hash: C7m74US1J4rnzhzyN9c9AXYlLYYU1lK9Uvvic8/k1+0=)
2: 5EKQPrPNwyvCBR3SFmiV77L19bE.roa (hash: 7kjfjqomqFD/efQnWdT+7ek8PZzhOejx7JJd6FEa/kA=)
3: b-3wt2FSkK76zF9qprQdnRhD8bY.crl (hash: VnphJ58XrweC/0A4/wCb0+p+1ctU8+QiOIis6ewFgWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:79:b8:b2:29:26:11:81:8a:d4:35:b0:a5:36:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
Validity
Not Before: Nov 15 07:01:06 2026 GMT
Not After : Nov 16 07:01:06 2026 GMT
Subject: CN=02450cc8c33c8209f8cc5224508d96ff3069a99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a6:72:18:ba:ef:bf:f6:36:04:d4:d5:a3:6f:
a4:03:25:16:7a:ef:7d:26:a4:2c:80:a6:70:57:d3:
2a:66:12:9c:a9:b1:5d:ce:4e:a1:2e:71:51:ce:8c:
8b:04:ab:d3:c6:34:82:37:e3:e3:13:4b:b6:49:e3:
2d:7d:59:33:10:b8:a1:80:ad:ef:4e:db:92:f5:cd:
35:1b:0c:7f:18:22:d2:aa:ab:36:5d:b4:da:98:b7:
25:5b:f6:d0:bf:cd:17:74:85:84:e4:a4:fb:5e:59:
23:4a:8a:d8:1b:a2:03:2f:3e:00:54:b6:f3:e4:84:
b2:f0:f7:f1:00:85:09:3a:f9:11:e6:c4:74:ab:f7:
6e:df:f7:a2:8e:84:9f:f4:92:fe:15:01:6e:d2:0f:
18:d0:74:7c:10:52:ee:3f:19:47:7a:b1:62:cf:8e:
90:54:56:d8:ff:47:10:cf:ac:81:91:d8:a6:c6:dc:
41:86:28:f9:17:30:1c:aa:c3:e9:34:e2:96:63:7d:
31:d8:a4:f7:f5:f6:68:9b:9c:b7:3b:b4:f2:f1:19:
d9:4a:7d:23:35:a5:e7:2c:0b:54:0a:94:38:60:7a:
c0:26:e3:ad:59:98:a5:0e:05:6e:bb:c3:d4:bc:2e:
77:92:e9:41:f9:db:e5:57:42:1e:08:2e:be:8e:1e:
9e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:45:0C:C8:C3:3C:82:09:F8:CC:52:24:50:8D:96:FF:30:69:A9:9F
X509v3 Authority Key Identifier:
keyid:6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:88:0e:22:50:16:f8:6c:0b:81:d8:30:c8:d2:52:95:7b:00:
93:ac:29:8a:a9:78:b5:4f:7f:03:3f:89:35:7e:38:ba:e3:5b:
03:d4:20:b6:c8:b1:c8:2d:b4:7f:e5:a8:30:6e:ea:b6:9d:f7:
95:a3:bd:a5:d9:db:23:33:45:82:fb:e0:c2:86:e0:3d:46:91:
66:af:4c:64:51:33:57:b7:1c:5a:4f:63:6c:ec:6a:c5:d3:d1:
dc:cf:ea:53:1d:aa:c5:5c:64:e0:86:c1:ba:98:11:ba:74:34:
06:e9:bd:05:99:d0:e4:01:ec:d9:4a:b9:af:41:6b:46:7a:c4:
31:c2:ee:60:31:e9:16:3c:fc:53:ed:4d:f4:c6:17:a4:4d:13:
cc:33:c7:b6:20:e6:16:e9:1c:72:82:86:39:10:49:8c:aa:95:
ce:e5:23:8a:ee:21:f2:41:54:06:82:d2:03:fe:71:23:85:89:
3c:a3:32:5a:d8:f8:60:18:12:68:0c:90:c6:94:fe:d2:c5:46:
77:3f:82:1b:0c:e6:b6:32:78:1b:55:b5:e5:41:9e:d3:10:a1:
c3:5a:26:0a:a1:9c:54:3d:62:75:fc:43:79:cf:58:14:82:6c:
b4:02:99:97:c5:6b:4c:75:4e:01:90:e9:76:3c:78:44:0c:4e:
6f:1e:9b:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHeAnm4sikmEYGK1DWwpTbfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZWRmMGI3NjE1MjkwYWVmYWNjNWY2YWE2YjQxZDlkMTg0
M2YxYjYwHhcNMjYxMTE1MDcwMTA2WhcNMjYxMTE2MDcwMTA2WjAzMTEwLwYDVQQD
EygwMjQ1MGNjOGMzM2M4MjA5ZjhjYzUyMjQ1MDhkOTZmZjMwNjlhOTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKZyGLrvv/Y2BNTVo2+kAyUWeu99
JqQsgKZwV9MqZhKcqbFdzk6hLnFRzoyLBKvTxjSCN+PjE0u2SeMtfVkzELihgK3v
TtuS9c01Gwx/GCLSqqs2XbTamLclW/bQv80XdIWE5KT7XlkjSorYG6IDLz4AVLbz
5ISy8PfxAIUJOvkR5sR0q/du3/eijoSf9JL+FQFu0g8Y0HR8EFLuPxlHerFiz46Q
VFbY/0cQz6yBkdimxtxBhij5FzAcqsPpNOKWY30x2KT39fZom5y3O7Ty8RnZSn0j
NaXnLAtUCpQ4YHrAJuOtWZilDgVuu8PUvC53kulB+dvlV0IeCC6+jh6esQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJFDMjDPIIJ+MxSJFCNlv8waamfMB8GA1UdIwQY
MBaAFG/t8LdhUpCu+sxfaqa0HZ0YQ/G2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYi0zd3QyRlNrSzc2ekY5cXByUWRuUmhEOGJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mNGY4OTctODJhNy00YTI3LWIxZjEt
Nzg0ZGI5YjFkYTJiLzEvYi0zd3QyRlNrSzc2ekY5cXByUWRuUmhEOGJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9mNGY4OTctODJhNy00YTI3LWIxZjEtNzg0ZGI5YjFkYTJi
LzEvYi0zd3QyRlNrSzc2ekY5cXByUWRuUmhEOGJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQIgOIlAW
+GwLgdgwyNJSlXsAk6wpiql4tU9/Az+JNX44uuNbA9QgtsixyC20f+WoMG7qtp33
laO9pdnbIzNFgvvgwobgPUaRZq9MZFEzV7ccWk9jbOxqxdPR3M/qUx2qxVxk4IbB
upgRunQ0Bum9BZnQ5AHs2Uq5r0FrRnrEMcLuYDHpFjz8U+1N9MYXpE0TzDPHtiDm
FukccoKGORBJjKqVzuUjiu4h8kFUBoLSA/5xI4WJPKMyWtj4YBgSaAyQxpT+0sVG
dz+CGwzmtjJ4G1W15UGe0xChw1omCqGcVD1idfxDec9YFIJstAKZl8VrTHVOAZDp
djx4RAxObx6b8Q==
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:46:18 2026 by rpki-client