Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
File: 3ihtA6NzvWie8EYQocithHPr3a0.mft (raw, json)
Hash identifier: nkimMEkC1ArE26JkQ5EL/jE2GabIk6uiwBgMMQMiGMo=
Subject key identifier: 98:83:01:8F:5B:3D:79:35:1C:FA:DB:33:F7:5F:4C:79:9F:1C:8D:57
Authority key identifier: DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
Certificate issuer: /CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Certificate serial: 01A1D980BE488B197CB1087AF6B7BF89EFA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
Manifest number: 163A
Signing time: Sat 14 Nov 2026 10:00:55 +0000
Manifest this update: Sat 14 Nov 2026 10:00:55 +0000
Manifest next update: Sun 15 Nov 2026 10:00:55 +0000
Files and hashes: 1: 3ihtA6NzvWie8EYQocithHPr3a0.crl (hash: zZZj7EGa5tUr42Y+1TeDLSzPWIPf9vmZVbDjNARrFhs=)
2: 6LpMhHmk89Py7vWuBJ8eEXpWnn4.asa (hash: eq0WQCdDBBCmtQF0jQMbbLOLGcIojkIy5NWC9heTYts=)
3: vlBe3oYmjLCyAb6mMX2mR3pkXOU.roa (hash: zOmjl7/VF1REeDK9Kz85f9AKUhU+m9qTE9b+EWBSHrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:80:be:48:8b:19:7c:b1:08:7a:f6:b7:bf:89:ef:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Validity
Not Before: Nov 14 10:00:55 2026 GMT
Not After : Nov 15 10:00:55 2026 GMT
Subject: CN=9883018f5b3d79351cfadb33f75f4c799f1c8d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3f:6c:4f:6d:7e:1e:30:1f:21:36:88:b0:2b:
4c:fc:ed:4b:bf:40:57:48:25:36:01:80:1c:d5:7a:
8a:ad:48:6a:28:92:dc:b3:97:e0:ca:f1:34:e3:3c:
30:60:50:9e:53:53:3a:0a:0f:56:e2:ba:80:ac:aa:
3e:7d:90:56:f5:52:8f:15:0c:eb:cd:b6:40:06:1d:
ea:3b:25:83:30:78:b2:2e:88:b6:e9:be:21:a6:c5:
29:75:f7:c9:e0:08:02:9c:8e:15:85:60:2c:bf:38:
00:a1:3f:b7:3f:5a:75:5a:48:9f:09:53:c6:1e:df:
48:0b:d5:98:21:22:29:aa:81:b8:09:a7:9c:94:35:
d2:6e:7d:e6:9c:1a:7d:ed:f4:b9:93:4d:62:bd:96:
18:c4:aa:1c:25:1e:41:f5:cf:1c:ec:4e:f2:2d:38:
e2:32:b7:85:ca:ef:26:58:c8:fb:20:d0:47:15:ef:
5a:0c:84:5d:40:9a:23:98:e8:67:57:45:c3:99:f6:
5d:6e:3d:18:e1:9c:d4:d1:2a:0c:de:3d:72:f6:a8:
d6:ed:ad:3b:7a:70:95:2d:fb:dd:25:01:7d:40:00:
cc:5a:77:5f:5f:35:02:3b:f6:bf:36:e3:b5:4d:03:
fc:28:ef:df:cc:ae:10:ca:82:af:9e:87:f3:3d:dc:
33:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:83:01:8F:5B:3D:79:35:1C:FA:DB:33:F7:5F:4C:79:9F:1C:8D:57
X509v3 Authority Key Identifier:
keyid:DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:a1:f2:0f:9f:05:bf:e0:0f:c0:d9:ac:85:48:4f:f3:22:5e:
ea:c4:73:60:c3:c8:14:28:eb:4f:12:b7:30:b3:69:a0:a0:7f:
76:4b:3c:cb:60:36:3e:f2:43:8b:3c:f9:62:73:91:64:cf:22:
12:c5:ba:33:45:1d:e7:a7:3e:f4:75:b0:f6:f7:bd:0d:63:39:
ca:41:38:a4:71:43:a9:5f:36:83:bf:f0:cf:25:71:1d:5b:ad:
08:f6:a5:c3:66:3d:0f:35:34:d1:66:96:52:6f:3d:33:38:7d:
e1:d5:21:8b:23:cc:81:ac:db:46:2c:8d:d2:35:61:52:92:50:
7b:fc:5f:12:25:eb:4b:3a:7e:05:df:fb:e3:b9:29:ac:47:be:
60:19:12:07:b4:86:53:49:73:6d:0f:32:76:9e:7a:86:c3:fe:
6a:ec:54:7b:12:44:64:0c:f6:df:4c:0a:f1:3c:68:76:60:67:
91:54:7b:18:9b:22:27:a1:67:f0:47:18:83:55:82:46:ac:99:
6d:42:ec:71:25:fa:bd:a5:55:a3:77:3b:99:68:bc:f4:8f:db:
46:b1:a4:37:05:61:46:ce:86:8e:ec:2c:b9:08:cc:39:b7:5d:
88:92:8a:4a:58:8e:a7:83:26:ff:82:d7:c7:95:8d:71:8a:0d:
65:6a:02:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:48:08 2026 by rpki-client