Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
File: 3L-wBIqNpVb9nT3xB3QC-EP11wM.mft (raw, json)
Hash identifier: veBf95/OexnVxGK8WRAf82FBW/8SmJ9IB+TYAH1dWb0=
Subject key identifier: D7:3B:55:67:51:91:D5:45:69:70:8D:5E:1A:E9:8C:A9:AC:2F:03:5D
Authority key identifier: DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
Certificate issuer: /CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Certificate serial: 01A1DCB8E09F74ABF1D619B3BE75906208BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
Manifest number: 1AFC
Signing time: Sun 15 Nov 2026 01:01:05 +0000
Manifest this update: Sun 15 Nov 2026 01:01:05 +0000
Manifest next update: Mon 16 Nov 2026 01:01:05 +0000
Files and hashes: 1: 3L-wBIqNpVb9nT3xB3QC-EP11wM.crl (hash: WliF+Oj4Gv5K8VxLubk576XzCRG2kyB6AJba9fJA6tM=)
2: M2jXc0NhZkPSY8HF_AES6Z2QgY4.roa (hash: IaTjBLUpeVPvAQsCn4UJQ4zSezVEpOlxAezx7/pK0RA=)
3: Sq-ujidV3DDsRqOSLpPxqfz8Glg.roa (hash: 6PSBv//QP4qZRXvWnrG7tint+pXX8yUVg9OL2IFvirQ=)
4: diKa-1w5ElMvlcPYjK3PRVqYmi4.roa (hash: ZihAuU6a+sRKBgVaTd6H1m0T3csQ2DHl/3OILvkWxBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:b8:e0:9f:74:ab:f1:d6:19:b3:be:75:90:62:08:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Validity
Not Before: Nov 15 01:01:05 2026 GMT
Not After : Nov 16 01:01:05 2026 GMT
Subject: CN=d73b55675191d54569708d5e1ae98ca9ac2f035d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c8:7d:f4:73:bf:ba:a8:5e:83:bf:b3:8c:a5:
48:3e:5c:01:88:62:bd:8f:61:b5:99:7c:04:d8:e5:
87:48:97:be:53:95:53:fb:0e:0f:c7:c4:77:55:ed:
d2:c3:fd:51:9e:9a:77:f7:ce:6f:b5:d3:bc:c6:88:
86:ba:c9:0f:fd:b7:14:fa:a6:30:5e:1b:6e:21:0a:
d6:d8:e8:a4:73:a9:6f:3e:e7:ff:6e:53:55:7f:19:
91:18:f8:1b:63:3f:91:72:ca:cf:ad:a1:f8:00:c7:
c3:6f:3d:6f:d3:b9:c2:60:7b:f5:92:b6:f7:49:9e:
81:d4:fa:87:ce:a3:37:bf:00:ef:5e:cc:ee:26:1d:
46:86:05:e2:75:15:97:29:80:36:82:36:ab:ad:eb:
5e:39:74:a0:4f:f4:cd:6f:0c:76:e0:a4:cb:f6:e0:
b5:59:b7:6c:4c:d8:a5:38:a0:e2:25:56:34:c8:15:
46:a6:a6:ce:e6:7f:2a:21:3b:f3:18:c1:bd:33:6a:
47:3d:bc:a2:47:49:73:fa:73:0d:0d:11:46:f3:bf:
e9:c3:08:df:21:e9:88:43:ca:5a:16:a6:f3:83:4c:
8f:6c:82:09:94:07:07:24:59:6e:cf:a6:1c:3e:e2:
59:aa:fb:3e:bf:af:fe:33:6b:86:61:2c:71:18:88:
2b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3B:55:67:51:91:D5:45:69:70:8D:5E:1A:E9:8C:A9:AC:2F:03:5D
X509v3 Authority Key Identifier:
keyid:DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f5:c7:20:d7:00:43:4e:30:75:8c:c1:47:c8:09:a4:9c:ab:
21:a5:62:b7:6d:aa:82:5c:fb:db:51:84:34:00:e9:c1:7f:c4:
89:bc:2f:66:0f:b5:9f:82:ed:c3:43:34:f8:a8:9c:6d:87:00:
ca:d8:47:3c:8d:d5:75:fd:d4:1a:e1:c3:c3:ed:39:fe:43:15:
02:0e:36:b2:92:32:74:92:cc:7d:9c:90:46:37:5d:f6:5e:b6:
4a:d4:18:99:ce:84:81:89:ea:0d:90:6b:9c:f4:5c:53:9a:a8:
34:39:83:3d:a4:0f:f9:22:a8:f6:0d:c0:01:86:f5:05:51:71:
b4:27:51:2b:82:9a:3e:ec:80:bd:b2:77:56:7c:12:e8:44:cf:
55:45:b7:b9:4b:06:9b:b7:b1:27:1c:b7:7a:e2:8d:4f:a0:e1:
ff:09:05:2f:48:84:41:14:07:6a:7d:53:50:52:1f:e6:ea:05:
2d:8a:ad:7c:a5:79:84:78:54:f0:0b:6f:56:e9:b1:f7:12:3a:
92:ab:3e:bf:f0:2b:69:57:e3:6a:38:e7:a1:19:98:c6:97:29:
a8:01:fb:0d:96:37:3c:14:ab:90:af:19:fe:07:3d:2f:f9:35:
11:f4:bc:d5:52:66:22:83:9b:9b:45:34:3c:38:d4:9b:43:d7:
63:40:0d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:33:26 2026 by rpki-client