Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
File: 3BAvYTHOWnRutZgd1MHWtOF7Az8.mft (raw, json)
Hash identifier: z6kYky+2iwE0C/0gUqbzs0xvPz/Nq5QZOvZPXaEKpMg=
Subject key identifier: 90:56:A1:30:43:6B:27:5B:5A:84:3B:23:30:A2:30:B3:26:E8:0E:AA
Authority key identifier: DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F
Certificate issuer: /CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f
Certificate serial: 01A1C96936C358218C7B218FAF4E9BA2ABAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
Manifest number: 1AED
Signing time: Wed 11 Nov 2026 07:01:17 +0000
Manifest this update: Wed 11 Nov 2026 07:01:17 +0000
Manifest next update: Thu 12 Nov 2026 07:01:17 +0000
Files and hashes: 1: 3BAvYTHOWnRutZgd1MHWtOF7Az8.crl (hash: 0byrx3ay5ZQeiv6u+SDjGoEVuexLD+AYZ6hXJMkJ210=)
2: Wdloadg_jaSIWNimJpIr6kOshxY.roa (hash: xgmHkwMMNOck0R3y8/daNlcMrAkpPhMbZk/5vahLUtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c9:69:36:c3:58:21:8c:7b:21:8f:af:4e:9b:a2:ab:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f
Validity
Not Before: Nov 11 07:01:17 2026 GMT
Not After : Nov 12 07:01:17 2026 GMT
Subject: CN=9056a130436b275b5a843b2330a230b326e80eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:09:5e:c0:2c:78:f2:66:63:cf:df:df:d9:c3:
f8:eb:bc:eb:4e:6b:c7:fd:d6:8d:f6:22:d6:4c:54:
66:c8:e1:05:c0:a6:17:42:cb:d2:d0:0a:a2:58:0e:
ff:58:bc:ac:de:46:3b:fb:2a:48:47:ec:b4:c8:ec:
80:71:05:7c:f9:5b:ae:e6:5d:e5:da:b1:28:75:8f:
75:72:0b:20:95:e3:27:6f:07:42:b5:e9:bc:97:ed:
22:72:6c:70:9a:d0:7b:46:1d:2b:08:59:aa:88:54:
a9:f5:67:0b:66:c8:0b:c4:6c:bf:1b:35:34:c2:d9:
bf:8a:5e:32:fe:c3:7a:5b:84:30:31:75:91:dd:4c:
b7:9d:3b:1f:f1:01:5a:4f:cf:e5:39:e1:d3:de:9f:
b0:c5:a4:c4:6e:6e:a0:bb:e5:7e:69:ab:ba:00:98:
ce:e0:c7:40:07:0e:9d:f1:aa:58:c0:1d:ac:51:eb:
8b:8f:64:c2:f4:66:9b:d4:2e:a1:05:83:66:65:d3:
99:b6:24:fe:81:41:2a:f3:3a:57:b1:f6:74:e9:41:
cb:f0:b1:e3:81:63:96:e4:1a:42:ff:80:2c:20:fc:
7c:b9:2b:e4:9e:1a:79:04:62:52:52:2e:50:b0:86:
f1:c4:cf:97:2f:6a:22:6a:2f:c3:f8:51:27:08:b6:
40:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:56:A1:30:43:6B:27:5B:5A:84:3B:23:30:A2:30:B3:26:E8:0E:AA
X509v3 Authority Key Identifier:
keyid:DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:63:dc:37:0a:ce:2b:cf:6c:f7:7c:ec:eb:11:30:f0:7e:4e:
9f:53:91:14:71:fb:25:5a:ca:3b:8f:82:48:c9:d8:f5:a1:42:
74:69:a7:4e:34:d7:83:22:b7:d3:64:c0:1d:8a:56:78:68:24:
41:ea:6f:29:4d:21:da:6e:6b:27:5f:b7:0c:45:3d:14:cf:99:
f6:a6:b4:70:73:70:9a:6e:6f:9a:60:5f:00:09:83:2f:fe:50:
a7:53:89:40:6b:05:e8:3c:0c:2d:63:be:26:9a:f2:c8:73:f1:
01:28:5d:69:9c:6c:37:90:72:86:50:0a:cd:54:98:de:80:f1:
5a:d5:19:5e:58:22:81:7e:d7:1f:51:a8:81:d3:fc:10:05:a0:
d5:b5:b6:14:a8:43:4d:ce:7e:2a:eb:86:bd:72:d9:a2:08:71:
4d:57:60:3a:89:c3:7d:e4:fd:25:7b:ea:da:39:66:04:c7:16:
81:ac:60:f3:0a:27:9e:13:15:38:3d:91:6f:e6:68:a2:6e:b6:
5d:97:b5:bb:86:65:5f:e4:e3:a4:5e:4a:e1:7b:40:b3:59:ab:
85:ec:4f:c2:a5:c1:4e:24:c0:1f:57:5f:02:64:71:bc:25:be:
bc:e3:99:f1:56:d3:a4:b9:b0:ce:68:d0:94:94:4d:fd:d1:42:
90:64:30:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 18:53:53 2026 by rpki-client