Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.mft
File: 3XGhKciwiZWUIZnqbRsigmU1DQs.mft (raw, json)
Hash identifier: neC28ubq9BDxXjbH3WVmoTNyhEAB7yR5WcizYMFxRDI=
Subject key identifier: 77:B3:0D:64:7B:E4:94:5F:0D:5A:B6:93:A0:8A:88:7E:AD:E8:6A:38
Authority key identifier: DD:71:A1:29:C8:B0:89:95:94:21:99:EA:6D:1B:22:82:65:35:0D:0B
Certificate issuer: /CN=dd71a129c8b08995942199ea6d1b228265350d0b
Certificate serial: 01A1DD950B11D9C72ACF6CD9763547A89E85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XGhKciwiZWUIZnqbRsigmU1DQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.mft
Manifest number: 1AF6
Signing time: Sun 15 Nov 2026 05:01:34 +0000
Manifest this update: Sun 15 Nov 2026 05:01:34 +0000
Manifest next update: Mon 16 Nov 2026 05:01:34 +0000
Files and hashes: 1: 3XGhKciwiZWUIZnqbRsigmU1DQs.crl (hash: UsOFf8U/4Abi7PoF3Hwt4oVTcTkP0mAY1t6/9uzyrLI=)
2: BVmlLvTO3TnwU-WykyLWkZijiEQ.roa (hash: GjheiEWnUhL3hO3K8TeuKDirKE8ozbAnofhtWixZIn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XGhKciwiZWUIZnqbRsigmU1DQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:95:0b:11:d9:c7:2a:cf:6c:d9:76:35:47:a8:9e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd71a129c8b08995942199ea6d1b228265350d0b
Validity
Not Before: Nov 15 05:01:34 2026 GMT
Not After : Nov 16 05:01:34 2026 GMT
Subject: CN=77b30d647be4945f0d5ab693a08a887eade86a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:66:5d:db:57:19:c9:66:5e:82:cc:0d:b0:ef:
55:c6:31:0b:8d:14:c3:c0:a8:b6:e1:7c:6d:5a:c3:
fd:c2:3a:fb:84:d0:fe:c7:0c:64:97:54:74:62:1e:
a3:f9:57:a3:af:1b:9a:65:15:e6:dc:e6:64:4f:d3:
54:7f:bc:51:13:fb:c3:23:82:32:c2:fc:d9:a2:a0:
52:38:56:c8:40:e7:6b:04:9b:69:1e:8d:e3:46:5c:
be:80:15:e0:4f:66:ac:16:90:6d:53:a8:52:67:72:
bd:9b:ea:b7:d7:92:b9:86:68:76:41:71:67:b4:0e:
91:98:b9:e8:2e:19:69:2c:f2:aa:be:4f:92:76:68:
12:6a:20:34:4c:1b:13:0d:89:67:75:7a:85:40:58:
6e:8b:64:11:3f:24:0a:7f:3c:f1:63:ad:b8:12:a1:
6e:e3:66:c9:fd:16:7e:1a:7a:35:8f:99:6a:28:d7:
22:ce:75:0a:ff:0e:69:d9:4e:3c:9b:d6:67:84:82:
5e:67:a3:55:71:f4:53:2d:d8:75:74:ab:9e:c5:45:
37:b5:72:f5:08:6d:57:2b:a7:d9:6c:89:ba:ad:1f:
41:a9:3b:f4:4c:b2:fe:d2:af:68:a7:dd:6c:fd:d1:
c3:f0:34:82:48:ba:03:ca:8a:53:27:f4:80:06:8f:
a5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B3:0D:64:7B:E4:94:5F:0D:5A:B6:93:A0:8A:88:7E:AD:E8:6A:38
X509v3 Authority Key Identifier:
keyid:DD:71:A1:29:C8:B0:89:95:94:21:99:EA:6D:1B:22:82:65:35:0D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XGhKciwiZWUIZnqbRsigmU1DQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b499b6-01f4-442c-be76-c0d8c866893f/1/3XGhKciwiZWUIZnqbRsigmU1DQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e1:70:bc:0a:00:a7:c9:b3:a1:35:09:da:8f:c5:4a:c8:f4:
17:22:a6:88:8c:e7:1c:48:21:7c:55:a2:4b:1c:6c:9a:24:ab:
11:22:c3:9f:d8:fa:1e:5b:df:67:0c:19:6d:61:e8:21:ac:8f:
52:de:0e:03:34:ee:88:d8:a6:fb:94:9d:2a:87:26:f6:ea:21:
15:8b:9c:e4:1b:80:c4:eb:25:a3:71:c7:a2:6c:be:df:d3:17:
b6:ef:b9:26:94:32:1e:40:91:24:3e:bb:2f:23:7a:d3:dd:77:
d1:80:3f:26:04:ac:4e:b8:71:cb:47:85:bc:47:6f:6c:49:09:
78:0f:89:78:cf:f6:22:ab:d5:cc:2c:8e:8e:aa:2e:db:8d:a9:
16:5b:a1:8a:d3:7e:0d:dd:c7:f5:20:f9:07:da:b8:15:dc:fd:
5f:bf:7d:4b:15:5c:f6:9c:b3:58:6f:5d:4c:2a:54:09:f5:1c:
97:74:6a:e0:fc:29:69:38:33:f0:07:ec:62:be:33:67:f0:4b:
c9:aa:14:cb:bd:8d:f0:0f:18:51:86:31:03:a7:99:0b:7d:2f:
cd:52:37:47:fd:27:8f:ba:72:d1:53:99:46:d0:9d:5a:28:50:
a7:54:4d:f0:1e:78:ac:eb:02:32:05:3d:c5:df:20:66:9b:3d:
d9:85:b4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:04:48 2026 by rpki-client