Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
File: 3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft (raw, json)
Hash identifier: 0h/S6jSUd76nIYPZpd9TAHBvmNhXj/+vnfy43m7V5nk=
Subject key identifier: E2:31:2C:C9:91:08:F6:8F:F6:B2:03:89:9B:8E:69:5F:64:88:94:B0
Authority key identifier: DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0
Certificate issuer: /CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0
Certificate serial: 01A1DEDE46F67745CDBFB473B67D85E83689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
Manifest number: 1AFF
Signing time: Sun 15 Nov 2026 11:01:11 +0000
Manifest this update: Sun 15 Nov 2026 11:01:11 +0000
Manifest next update: Mon 16 Nov 2026 11:01:11 +0000
Files and hashes: 1: 3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl (hash: aIq09gU5sd0dq7IRw5UgrrzrOXR8EwWEeL4jhqP340A=)
2: 5bMMnYCiOuMr6CInKxk8XanOrXI.roa (hash: rE5NhVQccppUaz2fcs8r5lFIY4gPBHIjf5wnNcdQD60=)
3: 6qswnHV8JvW6cu6cSwBLoqp6-Ng.roa (hash: IUM2z/m3IjX5AfUXwWnD2PsPO+D6A7StpRGqMV8Cn/Q=)
4: c-q-1btZT4jua2JDzrYBPweRMfo.roa (hash: T3Vq03V1v96UVyz+QAoFvPmYD+d9eRiyCI2mm1ddpyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:46:f6:77:45:cd:bf:b4:73:b6:7d:85:e8:36:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0
Validity
Not Before: Nov 15 11:01:11 2026 GMT
Not After : Nov 16 11:01:11 2026 GMT
Subject: CN=e2312cc99108f68ff6b203899b8e695f648894b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5e:99:8e:32:7b:e4:01:93:c4:43:5b:74:21:
b7:77:00:e3:42:65:48:fb:d3:d7:65:a1:0c:36:ad:
14:1a:3d:e2:d1:15:b5:ac:a8:5e:bd:87:9e:06:80:
11:e7:9d:2b:c3:18:aa:9f:ff:ca:2a:02:03:9e:53:
c6:10:da:cd:bb:1c:ea:b6:88:70:7b:64:49:79:c2:
d7:90:81:c5:a5:04:7c:3f:19:30:27:47:9f:52:38:
e4:fb:51:60:49:a2:43:da:a5:0a:80:bb:28:36:26:
57:64:d9:37:78:24:9e:67:1a:77:60:c5:34:27:ae:
8a:e9:7c:e3:f5:8c:1d:10:d7:ea:7c:fa:37:d0:5d:
0b:eb:c4:fc:2a:64:24:21:6c:f2:8b:d2:22:65:1b:
56:d8:66:89:b2:ea:16:a1:73:85:69:d1:f7:6a:48:
14:43:af:c0:14:23:35:2b:46:c5:38:22:a8:b8:cc:
a9:63:39:35:a1:c0:91:e5:61:4a:2e:0f:20:7d:42:
c5:ad:d2:99:53:70:86:b7:6a:d1:0c:4d:22:9f:e6:
a8:cf:3d:54:ed:73:a7:e4:b4:a7:99:8e:2a:74:58:
bd:90:e1:89:d9:7d:43:61:fd:2f:e3:cd:ef:b4:2a:
5e:68:eb:53:ab:be:c6:82:96:76:26:58:a3:40:d2:
41:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:31:2C:C9:91:08:F6:8F:F6:B2:03:89:9B:8E:69:5F:64:88:94:B0
X509v3 Authority Key Identifier:
keyid:DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a3:e9:37:e6:73:b5:ed:8b:c2:8a:1b:26:bf:09:ff:5d:cf:
c3:a3:92:96:84:2d:58:ca:b8:25:39:16:50:fc:7c:4b:0e:ed:
8e:0c:d6:b1:50:b3:a1:7b:5c:65:27:45:e7:17:f2:fe:e9:8f:
08:56:d0:bf:2a:ed:19:c7:72:bb:95:0c:35:1a:60:48:36:2d:
59:61:a7:90:52:6a:53:ec:39:33:fd:65:b1:49:75:72:3a:47:
93:94:6a:cf:d9:bb:ed:43:35:f7:cc:25:64:6f:a5:d4:0d:b9:
b7:b3:c7:b1:2f:0f:fb:70:84:c2:6e:de:e6:0f:8f:5c:78:8b:
3a:6f:13:71:a9:d5:22:16:5c:d3:3a:47:29:39:0a:f9:96:6e:
bb:fc:52:32:8b:70:b4:21:09:89:39:32:6b:aa:f5:d6:60:06:
da:6a:b4:b1:25:52:d6:5b:0b:5d:94:b7:3c:b3:1d:de:00:07:
90:d3:f0:1f:5d:da:65:a5:a4:47:50:c7:dc:93:62:2c:3e:be:
d5:42:27:22:13:15:64:b8:6b:96:36:56:30:91:03:a9:fc:4b:
bb:b0:58:ad:31:79:69:38:73:d5:29:f9:bf:fd:6c:5b:a5:55:
e8:40:16:3b:0b:28:07:f2:a8:ad:f4:52:6e:47:1f:e7:e8:37:
61:79:d8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:35:13 2026 by rpki-client