Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
File: 3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft (raw, json)
Hash identifier: xH+JnPFsIYP1gDM1858d21GB2KBJUrldeAMjcJTGmfM=
Subject key identifier: A0:A2:F6:88:1F:E0:FC:68:29:C1:DA:28:7E:00:9F:01:B3:0B:EF:C7
Authority key identifier: DC:3F:26:39:FF:C7:88:71:AD:64:BF:ED:71:B7:95:4B:C9:0D:EA:B5
Certificate issuer: /CN=dc3f2639ffc78871ad64bfed71b7954bc90deab5
Certificate serial: 01A1DC81EF034803A33D4A0EB5F758136222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
Manifest number: 1A18
Signing time: Sun 15 Nov 2026 00:01:05 +0000
Manifest this update: Sun 15 Nov 2026 00:01:05 +0000
Manifest next update: Mon 16 Nov 2026 00:01:05 +0000
Files and hashes: 1: 3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl (hash: EZMiUHIk75yaA87JrEy5oFD34LlBtD0C4wjkSRl9i98=)
2: dypMPP_xvoxJHktjo8O416uma_g.roa (hash: f+g0dUATJyTuyFHPoe+0S/etj6BvEAVqOF7MMl9w8nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 00:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:81:ef:03:48:03:a3:3d:4a:0e:b5:f7:58:13:62:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3f2639ffc78871ad64bfed71b7954bc90deab5
Validity
Not Before: Nov 15 00:01:05 2026 GMT
Not After : Nov 16 00:01:05 2026 GMT
Subject: CN=a0a2f6881fe0fc6829c1da287e009f01b30befc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1e:69:ad:46:bb:e1:9f:9b:86:5d:c5:6b:cc:
8d:89:41:7d:18:18:b3:a1:f4:51:cb:ac:39:12:dd:
2b:f4:c4:68:14:f7:3f:9c:c0:27:25:30:f2:d6:95:
f4:06:9d:9e:81:eb:70:79:ca:a8:9c:c3:f5:8d:e5:
82:7d:b7:7d:73:9b:66:15:b3:e8:15:3b:30:e3:4a:
8e:fa:6c:2a:f6:7a:00:00:64:29:1e:f6:a2:8e:76:
de:e8:bd:46:19:ea:1f:99:ab:96:a5:69:46:ce:24:
48:74:32:e8:26:f5:c6:1b:00:b1:cd:d6:71:9e:d9:
0c:c1:49:79:c3:ca:2a:19:30:55:25:e4:39:00:f1:
78:53:a1:6f:8d:8a:60:f1:1b:3f:ba:5e:c1:b9:7b:
9e:62:91:eb:64:ff:02:be:48:62:b0:b8:c7:d4:ee:
8b:25:8a:ee:a1:bf:a8:d0:3e:70:7b:21:e0:3c:93:
b9:3a:b4:20:d1:38:59:47:a8:8b:7a:21:2d:1d:fc:
9b:95:ff:22:b6:e8:fa:e8:95:2c:58:2b:0f:0f:f7:
7c:10:94:1f:f3:0e:f4:22:74:e8:ee:ba:31:1a:48:
97:03:50:35:c6:05:3b:72:c6:71:3c:6f:a1:f2:4e:
b1:19:b0:9f:f9:4c:93:5b:96:0b:a4:6f:97:4e:2f:
60:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A2:F6:88:1F:E0:FC:68:29:C1:DA:28:7E:00:9F:01:B3:0B:EF:C7
X509v3 Authority Key Identifier:
keyid:DC:3F:26:39:FF:C7:88:71:AD:64:BF:ED:71:B7:95:4B:C9:0D:EA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e8:5d:ce:d9:63:d7:71:fa:98:03:dc:a5:12:91:3f:95:48:
4c:6e:84:9b:d0:8f:f6:4a:58:fb:97:e9:b4:ed:a5:84:5f:22:
1c:89:70:a7:ec:5d:29:05:d6:80:d8:db:69:de:22:8f:cf:56:
f4:e7:a6:24:0d:ab:16:e0:68:7e:05:ad:8d:a7:03:4b:de:3a:
21:9f:8f:f0:05:a2:f7:6f:06:c3:6f:05:ea:cb:e7:fc:62:be:
b7:1b:cf:40:a8:63:54:5a:63:b9:5e:dd:86:2f:a2:24:07:6e:
30:cc:b7:72:17:85:a1:12:51:44:86:cd:2d:e8:10:1f:66:25:
47:2b:da:7c:dc:55:ef:36:dd:f8:54:c5:63:b8:d5:ea:b3:4b:
13:67:67:be:02:fb:ce:1f:11:94:61:c1:ec:46:42:79:0f:a6:
1e:66:68:b8:d5:06:5d:35:e2:e3:e1:37:f9:03:8e:59:ea:ee:
f5:6b:6d:93:54:20:68:2a:1a:cb:5f:d1:1e:ee:9f:08:82:aa:
89:3f:de:93:e9:58:f6:5a:04:3e:74:1c:9c:ae:a9:c4:2a:11:
89:76:25:85:4d:42:86:2d:5d:ab:25:27:5e:91:af:95:8b:91:
86:3b:35:af:81:41:29:89:e3:37:f4:c9:fc:e2:14:d8:b0:fc:
80:ba:02:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:48:17 2026 by rpki-client