Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/c3d99b-dc39-45fc-beeb-099e67bc39e7/1/3tgv9VpEt7dIjiDp_yVO4NH0XWY.mft
File: 3tgv9VpEt7dIjiDp_yVO4NH0XWY.mft (raw, json)
Hash identifier: jV+I8yhaQS21Rq/BArSZfrNBpWSEej06bspHVtaD5HY=
Subject key identifier: 0B:64:76:62:09:00:89:0D:FE:FF:9B:90:C1:B9:C4:C4:3C:69:F7:C8
Authority key identifier: DE:D8:2F:F5:5A:44:B7:B7:48:8E:20:E9:FF:25:4E:E0:D1:F4:5D:66
Certificate issuer: /CN=ded82ff55a44b7b7488e20e9ff254ee0d1f45d66
Certificate serial: 01A1DE702580D02FDF35B090505AB03D42C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tgv9VpEt7dIjiDp_yVO4NH0XWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c3d99b-dc39-45fc-beeb-099e67bc39e7/1/3tgv9VpEt7dIjiDp_yVO4NH0XWY.mft
Manifest number: 0171
Signing time: Sun 15 Nov 2026 09:00:53 +0000
Manifest this update: Sun 15 Nov 2026 09:00:53 +0000
Manifest next update: Mon 16 Nov 2026 09:00:53 +0000
Files and hashes: 1: 3tgv9VpEt7dIjiDp_yVO4NH0XWY.crl (hash: XBJcZ7PsVigaQdO0+GmMzLtTexaJoO5r57juUpn7wrg=)
2: jMO6VVlm3HsEOrRN6wSSP0bIcbs.roa (hash: CBnpz7gcb9dPLoNgRFhsVVGmsFE7G/hIyF1S73+vDXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/c3d99b-dc39-45fc-beeb-099e67bc39e7/1/3tgv9VpEt7dIjiDp_yVO4NH0XWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/c3d99b-dc39-45fc-beeb-099e67bc39e7/1/3tgv9VpEt7dIjiDp_yVO4NH0XWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tgv9VpEt7dIjiDp_yVO4NH0XWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:25:80:d0:2f:df:35:b0:90:50:5a:b0:3d:42:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded82ff55a44b7b7488e20e9ff254ee0d1f45d66
Validity
Not Before: Nov 15 09:00:53 2026 GMT
Not After : Nov 16 09:00:53 2026 GMT
Subject: CN=0b6476620900890dfeff9b90c1b9c4c43c69f7c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:68:ca:d2:ca:af:a1:97:e2:ee:27:a4:ac:3e:
aa:ba:41:c6:b3:5a:89:9f:10:7a:dc:f4:33:ac:41:
79:41:bb:6e:ff:6a:22:d6:a3:c0:fe:bf:c5:c0:96:
f2:5d:90:67:33:2e:8f:9b:6f:a5:16:1b:16:5a:9d:
1f:16:ea:c8:81:10:5a:2f:41:3d:e3:6a:17:d6:e6:
b0:b3:ad:9b:9b:6d:c6:22:e2:21:2c:e6:c0:03:81:
5a:85:82:62:a7:3d:11:3c:72:64:77:f3:e1:a5:af:
48:08:09:0d:48:13:08:43:10:5c:0b:b3:88:66:68:
99:f3:d8:e7:8c:af:fc:52:1e:36:6f:0b:4f:4b:c6:
3d:bb:e9:bc:1a:07:d7:84:0b:4e:1a:41:2a:8e:0d:
f9:48:bd:86:a5:50:d2:14:b2:69:47:d4:91:17:e6:
38:e4:f1:75:9e:f7:ce:97:a5:f5:a4:37:a5:f6:68:
0e:43:b1:0f:67:c3:3d:4a:46:5d:6f:6a:34:10:1e:
78:cb:84:a7:88:36:99:32:8d:6e:49:06:75:ef:f5:
04:c3:7d:ee:28:3c:ca:32:2e:28:26:be:66:08:fd:
e7:e5:d9:f0:28:d9:80:44:57:8c:75:fa:e3:1f:eb:
20:c6:bc:c4:ad:a8:7d:f5:12:b3:07:f6:6e:f0:51:
1b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:64:76:62:09:00:89:0D:FE:FF:9B:90:C1:B9:C4:C4:3C:69:F7:C8
X509v3 Authority Key Identifier:
keyid:DE:D8:2F:F5:5A:44:B7:B7:48:8E:20:E9:FF:25:4E:E0:D1:F4:5D:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tgv9VpEt7dIjiDp_yVO4NH0XWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c3d99b-dc39-45fc-beeb-099e67bc39e7/1/3tgv9VpEt7dIjiDp_yVO4NH0XWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c3d99b-dc39-45fc-beeb-099e67bc39e7/1/3tgv9VpEt7dIjiDp_yVO4NH0XWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:81:4c:d0:40:22:ed:1a:78:50:22:d9:d0:53:b7:9b:42:fa:
1a:bc:df:b3:d0:a2:b7:1e:81:3e:97:bf:dd:7b:e4:fe:d1:a2:
f4:4d:cd:d7:e4:be:60:ae:cb:49:e9:cd:09:77:03:01:b7:b8:
97:7f:f7:ee:62:a4:04:48:eb:09:35:f4:b4:18:15:17:ea:dc:
b0:3f:23:44:11:62:35:83:43:1e:4a:c7:69:d4:39:48:96:63:
7a:f5:40:43:d2:fc:54:bd:c1:ea:4c:46:a8:b7:86:1d:1e:60:
81:80:e9:d2:0b:c9:59:25:88:66:d1:ef:01:08:14:82:07:28:
2d:0c:ac:dc:2d:dc:68:2f:93:77:84:64:31:17:6b:68:27:17:
15:76:16:d3:f8:ea:a8:85:26:0b:69:0b:a1:80:12:d2:8c:c9:
15:07:8e:3d:fe:52:29:56:6f:a8:0c:e4:a4:ce:e3:1b:73:9c:
6c:87:90:c4:19:37:3c:f7:5f:4c:16:77:e0:6b:ba:f2:e3:5b:
f5:6b:fd:79:66:95:53:fc:f1:a7:02:90:5d:e9:77:cb:a4:7a:
c3:34:2d:c1:3e:fa:9d:67:a1:d2:5d:d9:c6:c4:7e:06:9f:69:
0c:06:7a:63:ee:7c:89:50:96:d6:87:71:26:59:7f:84:27:3b:
40:3a:97:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:06:35 2026 by rpki-client