Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
File: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft (raw, json)
Hash identifier: EH71Kh1zvKhKIHFZzZ0i6JwzrQwkxewjB/Pa+ebUFbE=
Subject key identifier: 9A:40:50:F4:5A:85:03:8F:44:F7:A9:33:A8:4F:43:EA:9B:EF:C8:13
Authority key identifier: DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
Certificate issuer: /CN=de51da32762a6f9c126d63ba705d62c050b8484e
Certificate serial: 01A1DE035067607E4A7CBC3A8AA18F2CB2DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
Manifest number: 1AF6
Signing time: Sun 15 Nov 2026 07:02:01 +0000
Manifest this update: Sun 15 Nov 2026 07:02:01 +0000
Manifest next update: Mon 16 Nov 2026 07:02:01 +0000
Files and hashes: 1: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl (hash: FKhNVHl2kYwOTfHy0dd6mtj/QDrkoeF5yTBwDQuLSW8=)
2: 8J_-hWHGPWEYN0vjZgr-eCklQg4.roa (hash: qBQWLHkgusN1QQCqlJvTYnenuo1KralG8LLl2synFhs=)
3: elKDEgk9yKtQtzq3PdJ4l_cpSZQ.roa (hash: 8uKk6fr9oWkQeVcBDQrXHD0Zpv9/C37D7zWtE6D01OI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:03:50:67:60:7e:4a:7c:bc:3a:8a:a1:8f:2c:b2:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de51da32762a6f9c126d63ba705d62c050b8484e
Validity
Not Before: Nov 15 07:02:01 2026 GMT
Not After : Nov 16 07:02:01 2026 GMT
Subject: CN=9a4050f45a85038f44f7a933a84f43ea9befc813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e0:32:b3:56:82:ed:60:41:d5:7d:96:d0:ad:
87:ea:26:af:ca:10:d5:64:18:15:d1:00:6b:2b:af:
d9:92:27:46:1b:15:06:e0:7c:56:07:e3:c7:73:da:
a7:4b:ad:1e:1f:e7:de:09:08:4a:3c:ac:02:6b:2f:
8a:98:df:da:2b:b9:ac:df:f0:e3:1a:c4:f3:70:e4:
c0:61:52:ec:6d:1b:d3:ed:1b:e0:54:a9:92:17:53:
0e:47:c6:98:82:f8:11:09:14:13:e8:df:af:11:26:
04:ed:32:78:d0:b9:22:09:e2:b8:9f:09:5e:f7:c9:
5a:41:1c:a0:db:ce:b6:47:79:be:3b:86:49:9e:19:
0a:49:28:f9:2a:72:7a:1b:ab:e1:d7:e6:94:18:af:
f6:8c:b1:d6:13:4d:0b:6a:bb:61:89:2b:20:82:53:
00:56:84:89:75:fa:ae:a9:86:d5:87:70:db:d4:e3:
35:41:e4:32:95:5b:65:1c:da:27:12:68:50:29:2d:
0d:e3:30:1f:a3:ff:bf:57:04:f5:3e:7d:a1:91:ae:
7b:17:54:5d:d0:b0:b2:f0:d0:84:11:5c:85:b9:f9:
85:63:0a:9c:29:68:16:3a:0b:32:9c:ff:de:9f:38:
0b:c3:7d:cc:cd:3e:c2:aa:60:82:89:8a:05:3a:1a:
22:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:40:50:F4:5A:85:03:8F:44:F7:A9:33:A8:4F:43:EA:9B:EF:C8:13
X509v3 Authority Key Identifier:
keyid:DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:29:c9:78:3a:a5:7b:c9:d0:11:56:11:49:37:13:cc:06:1a:
26:1f:3a:a5:59:22:33:87:77:82:f7:95:79:e0:04:4a:d9:f7:
a6:ee:44:94:46:3c:9a:4d:8a:2b:23:da:25:ff:50:81:e7:ad:
53:18:b9:f9:3a:7e:fc:ff:21:f2:f0:d4:0b:05:d4:76:0c:2a:
dd:39:6f:97:2c:b6:bb:ac:a6:0b:e7:3b:dc:be:90:4f:3b:a3:
ea:e4:bd:6f:6b:6e:d4:ee:9a:18:c1:a7:9b:ea:7d:2d:c1:d5:
d4:d8:11:e5:b1:ea:8e:8e:25:93:c4:de:e8:b9:ae:78:67:00:
5b:b7:1c:3a:1b:36:43:65:7f:03:17:e1:84:4c:a2:f4:ea:14:
a9:22:91:d6:26:2c:22:8f:45:ff:2b:4e:ad:ee:fe:38:c8:00:
96:73:96:ac:b2:31:1b:18:67:52:d2:ff:22:ec:c8:89:9a:aa:
c6:19:14:57:eb:60:cb:79:0b:f1:bc:37:04:54:71:3d:45:9f:
29:17:ed:96:04:06:e9:4f:77:ed:42:89:de:51:69:bd:06:86:
54:87:20:84:4e:18:40:8b:0d:be:fb:00:28:cc:2b:14:e8:c3:
16:d0:bb:27:bb:0c:42:18:4a:ea:36:51:45:e5:b7:c9:48:ad:
1b:57:04:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:48:19 2026 by rpki-client