Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
File: 3eNumAISZPWoBwEGeAvinUihbGc.mft (raw, json)
Hash identifier: aJsTuDm1VeVzAv4RAjW3/kbHtL0cyTmQsJ9BNRZufYA=
Subject key identifier: EE:8F:A2:45:5B:38:0F:31:8B:51:50:A2:A5:C9:AF:9A:A0:3D:A5:06
Authority key identifier: DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
Certificate issuer: /CN=dde36e98021264f5a8070106780be29d48a16c67
Certificate serial: 01A1C9D6801FF89BE74E57DEAC7A4F1ECDED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
Manifest number: 1432
Signing time: Wed 11 Nov 2026 09:00:40 +0000
Manifest this update: Wed 11 Nov 2026 09:00:40 +0000
Manifest next update: Thu 12 Nov 2026 09:00:40 +0000
Files and hashes: 1: 3eNumAISZPWoBwEGeAvinUihbGc.crl (hash: AEU5fva9GR+cTQcKfs3CA6vmnPJ3ZmGzVIjqh81KqH0=)
2: SpTT9-sbWMhVBDjsZYsqJNdl4z4.roa (hash: DetJ0LlDZnlGmwIXOCXqSyycEMtjT8ysire41FdrJY0=)
3: wGffXotQutM5YPxgbpljeS3a9Gg.roa (hash: mICd/WsUOrkWcP68fCHD3+9zyqzcoi13I1Pp/yVs0e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c9:d6:80:1f:f8:9b:e7:4e:57:de:ac:7a:4f:1e:cd:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dde36e98021264f5a8070106780be29d48a16c67
Validity
Not Before: Nov 11 09:00:40 2026 GMT
Not After : Nov 12 09:00:40 2026 GMT
Subject: CN=ee8fa2455b380f318b5150a2a5c9af9aa03da506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:81:07:97:fe:64:4b:6e:9e:c1:44:2a:e6:13:
87:da:9d:c2:52:92:3b:61:43:60:2e:e4:75:ff:d1:
29:dc:10:b6:5a:f7:d9:1f:29:2c:16:a9:8f:38:d5:
fc:d3:2b:39:c2:53:a2:8e:8c:45:f8:70:cc:a1:0d:
2c:da:58:1f:d5:f9:88:12:d0:7c:73:69:d7:ab:87:
f2:66:4e:d1:75:be:51:8f:4f:ba:e4:d5:88:41:9e:
9d:ae:8b:a1:d2:a0:e5:96:38:a1:ec:2e:2b:58:3a:
5b:b5:ff:c1:1a:09:b6:36:a6:2e:03:a6:f6:cf:08:
5f:9c:92:8b:79:c1:be:4c:d0:d4:a1:c5:07:08:21:
ed:b1:f3:4f:39:6c:66:4c:06:b8:75:b1:2e:9a:81:
6e:1b:15:20:10:d1:14:bd:fa:0b:15:09:f4:78:a8:
f9:1c:28:7c:a4:21:68:b3:f1:b5:10:72:38:73:0a:
94:5f:5f:77:21:a8:96:84:9b:ab:6b:2a:0d:e6:be:
d4:15:81:ed:70:65:65:d1:73:44:a6:3c:16:d7:ef:
01:9f:73:1e:d3:8f:0f:11:95:d5:67:e3:50:7a:c2:
e9:e9:c8:bc:70:a3:30:18:7d:f1:c3:90:d7:ea:8d:
16:a9:14:4e:44:ac:55:66:76:17:c6:b6:41:87:03:
6a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8F:A2:45:5B:38:0F:31:8B:51:50:A2:A5:C9:AF:9A:A0:3D:A5:06
X509v3 Authority Key Identifier:
keyid:DD:E3:6E:98:02:12:64:F5:A8:07:01:06:78:0B:E2:9D:48:A1:6C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eNumAISZPWoBwEGeAvinUihbGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/76aee1-e220-4e22-9cb5-8fe3a0f61437/1/3eNumAISZPWoBwEGeAvinUihbGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:6f:5a:47:7b:7a:47:5a:68:25:c4:50:3a:b6:58:e5:6b:0b:
97:33:11:49:c4:f9:d2:48:ff:0f:04:b9:0a:14:59:3f:1c:a5:
3a:3f:ac:4f:84:e7:f2:55:95:65:e4:ef:ef:3d:8f:20:d3:7c:
0e:4f:30:cf:f2:25:15:71:cc:f2:04:8c:c8:39:e8:5d:b0:16:
2a:c7:fa:c9:09:37:aa:e4:70:8a:00:dc:da:1e:b7:eb:d5:3d:
ec:ec:a3:4c:94:27:6e:3f:37:c6:09:fe:3c:1a:d0:c5:f1:a0:
92:4a:b3:fc:b3:f5:4f:88:ea:47:58:0f:9a:91:f4:bb:75:64:
1a:76:02:d3:3d:20:8c:fb:9b:c7:b1:cd:f6:1c:fe:a7:c5:76:
81:37:51:be:ac:54:63:49:3d:72:b7:57:a0:ac:4a:17:94:54:
ce:f9:d2:19:43:5c:97:f7:77:ae:f3:ef:1d:09:0d:f7:de:8f:
e1:d2:84:21:7b:79:e4:75:50:28:1a:48:1d:d3:86:f6:8b:ec:
88:26:61:78:53:ff:50:19:13:7b:38:de:69:aa:5e:3d:3f:8f:
2f:a3:86:c2:2a:2a:5b:bf:9c:47:36:59:cc:b6:19:0e:3c:c2:
65:86:e1:3c:16:be:a4:26:cb:65:f0:b3:ee:4e:6a:25:6b:90:
f3:4c:ec:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 19:43:16 2026 by rpki-client