Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft
File: 3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft (raw, json)
Hash identifier: Bnau9TwsJGON+Uh5ekf3u3uyGQHah4HQZ+KQR46pVr8=
Subject key identifier: 16:9A:0C:03:CC:0D:CF:AD:A8:DB:60:9A:4A:F2:29:BA:07:FD:84:78
Authority key identifier: DE:AD:4C:89:F7:AE:D8:68:1D:02:02:D2:24:79:D8:6E:14:62:F8:89
Certificate issuer: /CN=dead4c89f7aed8681d0202d22479d86e1462f889
Certificate serial: 01A1DFF0C3C417EA763A782D6E5F107A1EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft
Manifest number: 1AF7
Signing time: Sun 15 Nov 2026 16:01:00 +0000
Manifest this update: Sun 15 Nov 2026 16:01:00 +0000
Manifest next update: Mon 16 Nov 2026 16:01:00 +0000
Files and hashes: 1: 3q1Mifeu2GgdAgLSJHnYbhRi-Ik.crl (hash: jKCKwFzcKNDHHIXyYtL4RQV4gtf3dNa8JPy5XwCwQg4=)
2: nGLpAbzPIa0fYIAvBp2NmfsMLMY.roa (hash: kwgj2EY4C+VKLivxvxueFyLeX+WYaalA75ogbGHFJJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:f0:c3:c4:17:ea:76:3a:78:2d:6e:5f:10:7a:1e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dead4c89f7aed8681d0202d22479d86e1462f889
Validity
Not Before: Nov 15 16:01:00 2026 GMT
Not After : Nov 16 16:01:00 2026 GMT
Subject: CN=169a0c03cc0dcfada8db609a4af229ba07fd8478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7c:20:a6:af:75:4f:1a:79:c7:fa:b1:21:d4:
75:8a:72:18:09:ec:2e:c7:fd:51:9c:63:d5:64:3b:
92:14:18:a9:22:e1:b1:d4:25:3a:fa:d9:3d:06:a2:
43:0d:21:a8:d4:77:a4:b5:fb:5a:d9:3b:ca:57:36:
14:54:d9:65:4f:31:6f:c6:be:28:b6:08:6e:73:ba:
b7:2d:f0:4b:b7:6c:2c:8f:fe:45:61:27:4e:9e:d6:
40:ed:1b:8d:52:1f:7d:b6:0a:dc:3c:21:0d:2b:30:
77:f8:55:bf:f4:d7:5a:7f:80:b5:99:68:8e:21:f9:
f6:77:b9:9e:a9:c7:b2:42:49:57:44:70:cc:1c:e2:
45:34:d6:72:60:21:02:36:02:2c:26:85:70:13:24:
57:59:a9:2a:89:3b:45:84:ff:d3:83:a0:f5:5a:b7:
c1:10:70:f5:20:d8:f5:c0:a8:03:06:e2:95:e7:54:
93:d1:2d:5a:35:18:6d:74:ed:2f:3f:1d:bf:83:d1:
1d:3f:e0:a5:2d:e9:06:37:9b:ed:d4:7c:17:50:8a:
ab:25:ac:10:28:8a:1e:73:f3:f9:a9:b5:a5:34:0b:
6d:f2:db:b5:81:31:5d:38:2c:03:36:8d:02:fa:c7:
7c:30:22:ed:12:09:7e:b8:16:28:8c:ca:e9:5a:5a:
75:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9A:0C:03:CC:0D:CF:AD:A8:DB:60:9A:4A:F2:29:BA:07:FD:84:78
X509v3 Authority Key Identifier:
keyid:DE:AD:4C:89:F7:AE:D8:68:1D:02:02:D2:24:79:D8:6E:14:62:F8:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cea65f-eca1-4f80-874e-5bcfce5ca2c7/1/3q1Mifeu2GgdAgLSJHnYbhRi-Ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e2:3c:f4:33:8b:7c:28:49:90:7d:10:c9:4f:dc:8e:0d:b3:
c7:5d:6f:38:17:7c:bc:01:12:43:e4:a6:4c:82:ab:cc:fa:ea:
9b:c1:dc:85:6e:bc:49:85:c7:4d:86:74:c7:28:e5:21:0c:ca:
58:2b:7d:e7:e3:94:98:86:46:69:f1:19:6d:93:f5:8a:0a:07:
6e:82:62:51:8c:72:2c:20:4e:a8:9f:c8:e0:ac:7c:48:a7:ef:
e9:4b:20:16:c2:bf:d5:cc:54:c7:7f:fa:26:7e:f2:30:bd:c1:
b2:7c:84:5b:3f:c5:62:28:73:12:48:29:4f:57:6e:b5:3a:38:
c9:2c:23:39:52:75:85:e6:7b:fa:90:29:7f:3b:95:d7:a8:b2:
73:33:ef:31:b8:8c:2c:6d:b8:bb:45:8e:60:4f:38:fa:00:40:
f5:e1:d6:44:b3:12:b1:3e:fe:f9:ea:26:c7:6a:1b:be:3f:ce:
f3:68:9a:51:13:44:5b:80:2d:c1:67:84:d3:b3:af:6a:11:2f:
16:3d:ed:4a:7d:eb:e5:0e:ae:cc:18:ea:d4:83:60:10:c9:fd:
ae:f8:f5:a4:b9:b0:da:3b:12:b3:f7:9a:92:bc:07:89:cf:b0:
c4:ba:ad:63:1a:61:6d:d7:e9:2a:21:fb:07:da:db:c0:05:22:
56:80:37:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:52:09 2026 by rpki-client