Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/37bb89-8516-454a-80fc-bb01648fac07/1/3OEoZtsCnY-bejryd2akK-5Wi60.mft
File: 3OEoZtsCnY-bejryd2akK-5Wi60.mft (raw, json)
Hash identifier: xoOLyRz6mWhuctZ4Q/EAB2uie2IxHxOYnbVkM0wFfS4=
Subject key identifier: 6E:3F:9B:A0:4C:3D:01:21:C6:E9:1E:74:80:90:81:9A:B6:36:AF:AA
Authority key identifier: DC:E1:28:66:DB:02:9D:8F:9B:7A:3A:F2:77:66:A4:2B:EE:56:8B:AD
Certificate issuer: /CN=dce12866db029d8f9b7a3af27766a42bee568bad
Certificate serial: 01A1DE02C76CD5E19DCDDDE5F1C65B0B45CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OEoZtsCnY-bejryd2akK-5Wi60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/37bb89-8516-454a-80fc-bb01648fac07/1/3OEoZtsCnY-bejryd2akK-5Wi60.mft
Manifest number: 0125
Signing time: Sun 15 Nov 2026 07:01:26 +0000
Manifest this update: Sun 15 Nov 2026 07:01:26 +0000
Manifest next update: Mon 16 Nov 2026 07:01:26 +0000
Files and hashes: 1: 1-r60MLTZRSdgygfymOIKvkloX4s.roa (hash: af6A06NaI4rDIZj+VAritHdSnfA6HkDWGlQ9vMcojAc=)
2: 3OEoZtsCnY-bejryd2akK-5Wi60.crl (hash: tpL/qoonq9R7/jJcWdgKLuk5vm1Yt6EVPoJxeg/Bx/o=)
3: ijw9MMecXFQ1MALw3HCoNkDG7LI.roa (hash: rCEqb/EtPquuy7z0bjBCs2np62IcolwSM1fIQEnyHGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/37bb89-8516-454a-80fc-bb01648fac07/1/3OEoZtsCnY-bejryd2akK-5Wi60.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/37bb89-8516-454a-80fc-bb01648fac07/1/3OEoZtsCnY-bejryd2akK-5Wi60.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OEoZtsCnY-bejryd2akK-5Wi60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:c7:6c:d5:e1:9d:cd:dd:e5:f1:c6:5b:0b:45:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce12866db029d8f9b7a3af27766a42bee568bad
Validity
Not Before: Nov 15 07:01:26 2026 GMT
Not After : Nov 16 07:01:26 2026 GMT
Subject: CN=6e3f9ba04c3d0121c6e91e748090819ab636afaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:29:1b:c2:10:a3:c9:af:10:a0:73:19:95:bb:
6a:2c:74:1a:17:eb:12:3a:44:c0:ca:84:42:f4:dc:
d2:e8:49:fe:35:e9:2f:63:dd:d6:1c:fe:eb:26:c3:
52:1e:7c:50:43:d4:36:82:28:3e:8a:b6:dd:80:03:
01:e8:cf:ed:44:8c:3e:10:7b:91:53:17:2f:02:ce:
ed:77:6d:66:b3:01:48:1d:7e:1f:db:1b:0e:a8:a8:
b9:9c:4a:8e:aa:23:ad:5a:88:8f:57:5c:03:a4:e9:
6a:cb:bc:14:db:2f:10:27:56:b8:1f:76:14:1f:c8:
3c:aa:7e:81:e7:bb:2b:9e:d3:40:2f:4b:28:26:88:
61:df:7a:5e:4a:de:90:d7:22:95:2d:6d:68:6f:76:
53:95:29:c5:df:bd:5c:80:da:6f:cd:59:ac:9e:7d:
87:92:d5:b6:3e:04:11:a8:76:8f:7a:ee:5a:cd:15:
7c:5c:47:c6:20:77:c7:45:7a:a2:3b:1d:05:2e:9e:
ac:7c:b0:36:62:52:a5:a0:c3:a1:14:e4:7f:4b:60:
02:99:8c:75:b0:f4:38:b7:94:c9:fc:76:48:28:f7:
5f:1b:cc:59:88:02:25:69:9f:ed:bc:58:56:dc:51:
b5:42:50:ba:dc:d0:61:b9:68:5c:22:df:c5:dd:6c:
74:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3F:9B:A0:4C:3D:01:21:C6:E9:1E:74:80:90:81:9A:B6:36:AF:AA
X509v3 Authority Key Identifier:
keyid:DC:E1:28:66:DB:02:9D:8F:9B:7A:3A:F2:77:66:A4:2B:EE:56:8B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OEoZtsCnY-bejryd2akK-5Wi60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/37bb89-8516-454a-80fc-bb01648fac07/1/3OEoZtsCnY-bejryd2akK-5Wi60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/37bb89-8516-454a-80fc-bb01648fac07/1/3OEoZtsCnY-bejryd2akK-5Wi60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c5:cb:ae:1a:c5:46:e6:5f:90:29:ba:a6:1b:69:89:83:66:
73:6a:5d:e6:93:64:e1:86:f7:8c:4e:74:8e:25:ff:10:85:3d:
69:ca:a6:ac:af:2e:03:1b:52:9c:ea:a3:9f:43:e6:0f:7b:ad:
b4:bd:b5:ee:ce:48:99:6f:69:86:99:4c:16:2d:fc:bc:80:01:
2d:1c:73:f9:1d:e1:c3:69:0f:41:86:ec:2a:86:f9:d4:b9:47:
79:a8:86:20:27:cf:47:b2:62:30:4b:14:df:2a:9f:5d:75:6c:
38:22:fa:81:e1:ca:21:41:06:d0:9e:a4:c6:bf:cf:2c:21:b0:
1b:d8:1c:5c:96:a6:7d:67:d6:00:57:e0:cf:ba:c0:3c:68:c4:
6b:06:fe:e8:5f:ce:cb:ae:55:ff:8b:d4:9b:32:2e:9a:0b:0b:
6c:b4:6f:0f:d7:dd:cb:1f:4c:7d:7c:ef:f6:08:12:f4:6a:4d:
66:67:cf:3f:20:dd:c3:37:27:9c:90:35:0d:e5:2c:cf:51:f0:
01:19:b4:24:79:a0:cc:e8:f7:72:07:aa:ba:cc:52:58:98:e8:
6b:6a:7b:91:1f:cd:81:e1:25:f0:cf:b2:91:69:7c:be:51:0c:
7a:e1:01:e4:b1:79:c9:fa:91:15:db:a8:24:d7:60:20:e3:b5:
e1:b9:d1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:55:59 2026 by rpki-client