Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft
File: 3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft (raw, json)
Hash identifier: Mqu/KkTgI13K1p0703Rbme0FSAwlnQH/STsWoaFppNY=
Subject key identifier: 6A:77:84:46:01:12:F0:7E:A5:59:AD:23:1C:C5:DC:1C:F4:B7:4D:3E
Authority key identifier: DD:38:73:30:3D:2D:6E:23:8A:5B:D8:5E:D5:86:7B:64:31:58:FC:14
Certificate issuer: /CN=dd3873303d2d6e238a5bd85ed5867b643158fc14
Certificate serial: 01A1DE399E77C79B801657BB58F949E66716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft
Manifest number: 04B4
Signing time: Sun 15 Nov 2026 08:01:20 +0000
Manifest this update: Sun 15 Nov 2026 08:01:20 +0000
Manifest next update: Mon 16 Nov 2026 08:01:20 +0000
Files and hashes: 1: 3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.crl (hash: P6npTttRj31H6CUOh0mCu2AuolITBRENEk5rFYqltmk=)
2: 5rDoSOJ0aQP4R8djRUFtYmZuYW4.asa (hash: BRER7hZy1AOp7GZFPLOd7AJj0PbPgdtQ3xZz9AolytM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:9e:77:c7:9b:80:16:57:bb:58:f9:49:e6:67:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd3873303d2d6e238a5bd85ed5867b643158fc14
Validity
Not Before: Nov 15 08:01:20 2026 GMT
Not After : Nov 16 08:01:20 2026 GMT
Subject: CN=6a7784460112f07ea559ad231cc5dc1cf4b74d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:39:ed:21:97:2c:8f:fb:42:db:a2:1c:74:1b:
e7:7c:d2:31:b7:fa:39:f9:52:d2:54:8c:3d:16:39:
c7:91:50:87:1a:cd:f2:5a:4d:7e:9a:99:b1:51:0a:
6b:d4:ce:d0:f5:11:dc:b3:ae:4c:2e:b4:7c:ec:2b:
5b:a9:72:78:3d:8a:1b:04:f5:05:e8:86:4d:a7:c8:
52:05:d5:77:2a:f5:6d:3e:23:06:a2:7f:a6:0a:f2:
a4:53:b9:91:2b:56:f6:45:34:7d:6c:4c:b0:86:1d:
09:69:e0:31:c4:8a:c3:6d:9a:6e:70:08:2c:c1:6e:
d7:8b:a3:90:51:46:20:9b:6c:51:f1:e1:c3:5e:12:
f3:4e:8e:6e:ba:94:58:3d:23:e2:57:c1:20:70:f6:
8c:97:1f:7f:76:4e:be:3d:ba:4a:0d:56:6d:61:8a:
6f:ee:49:64:a9:97:d2:8d:de:4d:82:45:c0:6d:f6:
27:28:95:69:d7:25:0c:8f:52:6c:ed:2a:57:85:cd:
d5:a0:0b:d1:b7:06:5b:2c:07:d6:da:12:ff:f0:7e:
20:2b:0b:3b:a3:fe:51:08:f6:b2:67:40:ad:48:24:
0c:28:32:b4:9d:20:96:43:81:30:54:ab:6e:d1:d5:
4c:c4:86:de:74:42:ab:42:26:b7:10:b6:3b:5b:7e:
49:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:77:84:46:01:12:F0:7E:A5:59:AD:23:1C:C5:DC:1C:F4:B7:4D:3E
X509v3 Authority Key Identifier:
keyid:DD:38:73:30:3D:2D:6E:23:8A:5B:D8:5E:D5:86:7B:64:31:58:FC:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/5e28da-32e1-40b9-bb30-d3db277ecdfa/1/3ThzMD0tbiOKW9he1YZ7ZDFY_BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:1f:14:4b:53:b6:7a:72:f5:21:2b:c4:b5:a3:61:79:49:1d:
ee:87:e7:ab:0c:67:d4:3d:e2:e7:b1:03:6c:bb:80:ca:4b:a9:
c4:f3:8d:93:7c:7e:44:5e:ca:b2:c8:a5:be:27:07:a6:e3:0b:
51:96:d7:32:16:51:32:9f:61:73:b0:5a:5d:a7:b2:ed:f7:e6:
45:85:c7:f7:74:22:cb:04:fd:3d:48:47:fd:05:ff:e5:83:0f:
32:35:9e:c6:d5:fd:31:7a:b5:6e:60:5a:e1:a8:48:6e:4f:fa:
1a:40:ce:82:a7:8b:da:a2:0d:ee:1c:2f:d6:6e:83:d2:26:79:
af:fe:58:f1:63:ad:92:7c:8a:b3:60:bd:8c:94:3b:94:02:8f:
9f:1f:8d:2d:21:51:46:61:7c:13:93:06:20:8e:e2:83:90:56:
2c:1f:d3:04:4f:87:3f:7f:4b:58:9d:2b:ff:eb:7c:6e:e5:54:
05:f9:2c:e3:1f:44:4a:74:5b:a6:db:c9:50:55:76:02:b7:da:
ad:3a:de:c3:35:ba:d1:d9:fd:0f:53:f0:86:ed:7a:c2:0e:7f:
41:84:c5:4c:cc:7e:f0:ac:bb:91:6c:c9:5f:a7:6a:86:bc:10:
4b:5f:1d:d3:de:13:4a:44:4a:45:d1:7d:a9:64:90:54:fd:f6:
ac:4b:14:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:00:13 2026 by rpki-client