Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
File: 3UftWIupBpRXoqiY_HoMuXfR-B4.mft (raw, json)
Hash identifier: cJ7kqE+CbisYeAokVXljIISBpLG7Xy/8o/4fd8M6eXY=
Subject key identifier: B3:68:72:C4:26:21:77:03:92:80:49:E0:51:97:D1:C1:11:50:9A:E2
Authority key identifier: DD:47:ED:58:8B:A9:06:94:57:A2:A8:98:FC:7A:0C:B9:77:D1:F8:1E
Certificate issuer: /CN=dd47ed588ba9069457a2a898fc7a0cb977d1f81e
Certificate serial: 01A1D9EECD2599D4BD92CC61E4C66F7F8242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
Manifest number: 1AFA
Signing time: Sat 14 Nov 2026 12:01:08 +0000
Manifest this update: Sat 14 Nov 2026 12:01:08 +0000
Manifest next update: Sun 15 Nov 2026 12:01:08 +0000
Files and hashes: 1: 3UftWIupBpRXoqiY_HoMuXfR-B4.crl (hash: Vk9L1gqRbF0+mDlekHi8MgOuPQad2HfQaACTu3mmFBg=)
2: DX5ooE9ZIZJaF02Q9CvGnKIWcNY.roa (hash: wTDsCt307bisN+gK3/IsNzSToPiLxzeSSNZDltvG+zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:ee:cd:25:99:d4:bd:92:cc:61:e4:c6:6f:7f:82:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd47ed588ba9069457a2a898fc7a0cb977d1f81e
Validity
Not Before: Nov 14 12:01:08 2026 GMT
Not After : Nov 15 12:01:08 2026 GMT
Subject: CN=b36872c426217703928049e05197d1c111509ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:33:ff:69:a3:3f:d3:70:e9:92:40:72:50:b9:
3e:6d:36:04:73:c5:b4:b2:a7:e1:f5:35:5c:bd:fc:
31:c7:12:61:66:71:0a:32:6f:95:49:ec:07:61:0e:
51:2b:ef:33:fb:9a:37:75:8f:e1:46:72:96:3c:9e:
09:7e:94:c5:d4:e4:78:47:9d:39:18:00:f6:a2:7b:
76:61:04:38:f8:b0:20:0b:70:e8:84:f1:f6:20:f4:
62:40:a7:bc:80:cf:58:e8:1d:04:1e:c9:18:c3:16:
e0:11:c7:1d:a1:b2:98:81:2a:00:89:87:ce:31:3c:
a8:ec:06:94:2f:23:4b:d3:9d:17:dd:51:51:61:18:
26:79:7f:15:ed:f4:91:f3:74:8e:7a:b8:65:d1:b1:
ab:a8:ba:db:a6:d5:5c:b7:21:8d:61:a3:a5:0c:cc:
69:17:eb:17:bd:29:3a:ad:a4:1a:35:7b:bc:c1:75:
b4:f5:0f:9d:b1:51:fd:47:88:6a:38:42:71:f0:28:
81:05:09:d1:4e:35:98:ee:b5:60:0a:6a:e4:d3:aa:
c2:32:51:5b:d4:51:31:57:1f:3d:22:d5:dd:0f:59:
0e:4f:b9:f8:ba:93:50:00:00:b1:83:83:9c:ec:95:
61:dc:6c:5a:7e:10:d3:24:b8:00:85:60:c8:c8:c0:
44:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:68:72:C4:26:21:77:03:92:80:49:E0:51:97:D1:C1:11:50:9A:E2
X509v3 Authority Key Identifier:
keyid:DD:47:ED:58:8B:A9:06:94:57:A2:A8:98:FC:7A:0C:B9:77:D1:F8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UftWIupBpRXoqiY_HoMuXfR-B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4581b7-35bc-4bc8-85b3-f4596e7767a8/1/3UftWIupBpRXoqiY_HoMuXfR-B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:99:94:f5:72:9d:eb:bd:b8:63:7d:7a:9a:93:c4:f1:0a:e6:
25:b2:60:7d:75:35:46:2a:74:5c:dd:3e:c0:27:9c:c3:7a:ef:
a3:b1:86:5c:3f:b4:5e:fb:cc:5d:f3:82:14:0b:1a:ab:84:fd:
2c:90:a6:b8:13:42:3f:39:e4:a1:da:48:cd:f4:99:c2:7d:0f:
5f:34:85:68:6e:4b:79:87:11:9e:ee:66:3e:e1:d6:09:a3:17:
53:25:a1:bb:a0:ec:e4:2d:4c:3b:82:b2:aa:c2:a0:c0:99:03:
51:e4:83:65:43:43:b2:6e:ad:a9:f2:b9:a6:98:27:39:7c:ef:
d2:dd:67:3b:86:3c:2e:63:56:09:62:b9:01:c9:16:e6:e8:40:
53:9a:26:9b:a4:c1:f4:eb:ce:ed:51:85:67:b0:05:1d:c2:4a:
b1:2a:77:09:ac:51:ba:9e:8a:e0:ac:5b:be:18:2c:02:e4:9c:
49:f5:ff:20:95:df:f7:b9:71:2b:fb:4d:41:0e:05:8f:74:ea:
60:a4:b6:34:96:23:63:eb:ff:5b:72:0c:92:4f:72:1d:6c:0b:
ac:6b:6a:e9:33:5a:4b:ff:99:88:db:72:32:87:38:2c:5c:4d:
08:ca:c9:14:d0:4f:b9:30:f4:5e:58:7d:85:ab:52:0e:b0:93:
b3:b0:25:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:46:07 2026 by rpki-client