Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
File: 3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft (raw, json)
Hash identifier: 2iSMiJ3pAT9Wmo12nGrwqcj20GMOLmryLoD6At4p4+U=
Subject key identifier: B5:2C:D7:60:55:C9:FC:51:76:AD:D9:39:4B:26:04:D8:91:8B:20:DA
Authority key identifier: DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5
Certificate issuer: /CN=dce6e13e413baf381b625131e924e947843436f5
Certificate serial: 01A1DF4C04D45E8658FE0F0C1CEAACE2A178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
Manifest number: 0F87
Signing time: Sun 15 Nov 2026 13:01:03 +0000
Manifest this update: Sun 15 Nov 2026 13:01:03 +0000
Manifest next update: Mon 16 Nov 2026 13:01:03 +0000
Files and hashes: 1: 3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl (hash: enNLVtBcQXYNeKn/LJB2jLqgX9vD3d2X2ad2Y3l/Q1k=)
2: WaiBRN4zqeNTstFb2Bj7FDDnj4A.roa (hash: R2F3HKnWVo0NsS1fo82XPlwTKBu5M4Ho2YxFKIfZuWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:04:d4:5e:86:58:fe:0f:0c:1c:ea:ac:e2:a1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce6e13e413baf381b625131e924e947843436f5
Validity
Not Before: Nov 15 13:01:03 2026 GMT
Not After : Nov 16 13:01:03 2026 GMT
Subject: CN=b52cd76055c9fc5176add9394b2604d8918b20da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:14:0b:e2:4d:60:55:d8:0a:a6:41:69:a5:35:
ce:fb:cb:3c:73:b1:dd:00:dc:f2:9d:af:f9:ac:90:
e5:c2:3f:3a:b0:df:a7:69:5d:b4:80:70:8c:5b:a0:
c8:17:40:fe:e8:f0:ba:7c:97:e9:50:7c:3a:6e:de:
eb:1f:77:0b:6f:e9:24:56:ed:8f:b4:8d:a2:1b:5b:
35:e8:db:76:4c:13:00:d7:9f:d2:9d:2b:bf:4c:ae:
e8:6c:56:8f:fb:c8:09:95:37:ac:2c:35:7a:1d:9b:
55:dc:93:82:dd:5e:54:49:2b:d8:67:5e:42:88:b5:
81:0e:19:7a:c0:d9:c9:65:21:ca:58:e0:75:3b:f8:
e9:e0:08:4f:c1:dc:05:d4:98:96:33:b4:65:36:f9:
66:fb:10:0c:bf:fc:2e:ae:f6:5c:0c:1c:f3:6b:91:
ff:65:7e:87:77:2a:7d:27:56:e5:e7:d1:be:12:6b:
aa:63:be:97:7a:2d:fa:da:6a:66:dc:34:20:f8:8e:
36:de:a1:1a:5b:94:1b:a2:61:9e:b0:c8:56:31:9d:
7a:57:38:35:58:9f:82:73:07:20:31:cd:a4:05:9b:
73:a9:05:87:59:10:e4:ea:e0:f1:2e:67:64:17:cc:
72:4e:41:7c:7b:54:c4:33:cf:0e:9d:ce:18:e9:12:
f7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2C:D7:60:55:C9:FC:51:76:AD:D9:39:4B:26:04:D8:91:8B:20:DA
X509v3 Authority Key Identifier:
keyid:DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:fd:95:cb:53:e1:61:06:40:ef:40:ec:9c:79:cb:49:6b:46:
f2:c3:a0:48:43:64:64:47:15:48:22:9e:b1:84:02:3b:64:11:
70:98:44:81:ae:3b:06:46:28:5f:38:a4:de:ce:21:a7:9b:c9:
27:c1:39:bc:1b:65:11:eb:43:2a:9b:bc:fa:40:a9:5f:11:dc:
ee:b9:96:78:c4:92:30:8d:d2:6d:db:14:78:62:6a:14:af:af:
fc:d0:47:e1:3a:d4:e4:ac:90:64:29:94:14:3d:21:f3:4d:56:
69:d5:61:be:81:7d:b0:1a:60:99:f4:1e:8b:69:5c:14:e5:e2:
c7:84:6b:42:85:5c:6c:c9:53:4b:60:13:a4:62:13:30:d9:86:
46:5f:1d:58:96:a3:cf:a4:80:c9:23:6c:3f:21:44:b9:9b:26:
72:5b:49:38:af:53:6e:52:53:5d:bd:f1:32:27:72:40:2d:98:
b8:8a:a0:0e:7b:d0:da:eb:4c:13:d4:57:11:3d:d6:c8:7e:49:
76:7c:3b:4f:75:cc:c3:78:1e:d6:a7:15:76:ce:88:c1:97:6e:
6b:d7:9c:b1:f0:c3:48:94:8d:97:93:75:a9:4e:98:3f:b2:58:
15:35:00:7c:79:ba:ad:07:f8:ad:63:4e:f3:bf:4d:d5:14:31:
2e:fb:3f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:26:35 2026 by rpki-client