Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
File: 3xRM6OjkQV5chqCygEmaOFwU7_I.mft (raw, json)
Hash identifier: ThscXXMo09T9bbeGRds6opZbwC0qa6gclxrdKgoK/pU=
Subject key identifier: EE:39:00:7F:68:D4:4A:DA:82:CB:80:DC:55:79:9C:F0:09:9B:B6:51
Authority key identifier: DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
Certificate issuer: /CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Certificate serial: 01A13F39D76877E9992633F1F939EBA3C4E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
Manifest number: 111D
Signing time: Thu 15 Oct 2026 11:01:57 +0000
Manifest this update: Thu 15 Oct 2026 11:01:57 +0000
Manifest next update: Fri 16 Oct 2026 11:01:57 +0000
Files and hashes: 1: 3xRM6OjkQV5chqCygEmaOFwU7_I.crl (hash: u6EvGDDEJ6ij7RMH72kP632oDrYexrjQwJWY1aExxwY=)
2: IFcPSJLrXOIb360qpvfjslM8AeU.asa (hash: Uoj3vnQ4WI4zOKZ/VBdpJT4g8J+jbJ0SehrMNsQWEOg=)
3: mN6LPum92-oppYTfVnse9pFdGGY.roa (hash: Az1RSnzhomoH0PRWVFUSJEmI0WtwP1548LAxILCV7N4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:d7:68:77:e9:99:26:33:f1:f9:39:eb:a3:c4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Validity
Not Before: Oct 15 11:01:57 2026 GMT
Not After : Oct 16 11:01:57 2026 GMT
Subject: CN=ee39007f68d44ada82cb80dc55799cf0099bb651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6a:b1:31:f6:0e:e4:38:13:9e:eb:51:f0:ec:
d8:c6:1e:26:13:4b:a9:27:24:fc:eb:8a:12:cc:8d:
7a:85:db:98:8f:7e:f0:d7:1f:74:c8:be:ac:de:05:
f2:b7:c7:c7:11:87:00:ae:f3:0e:8a:c0:b7:5f:9f:
e4:59:36:17:80:0e:19:f0:c4:3c:19:a0:c4:d2:c0:
91:30:b7:ba:72:e0:aa:1c:da:56:86:35:7c:a3:67:
3e:04:79:6f:4d:17:ac:f5:b8:39:8a:98:a6:df:2b:
46:48:c6:b2:c5:44:b0:97:80:e9:02:44:ee:71:87:
9e:1c:ab:29:a7:01:0b:86:4d:47:00:f7:6c:47:b5:
c2:20:ae:3f:7e:e3:5c:a6:71:3c:58:13:40:0d:a5:
13:53:2a:3e:d5:b5:65:4a:fb:48:c6:27:2e:d2:79:
47:24:ca:38:81:a2:e0:d9:04:17:db:e6:9a:9c:10:
50:f3:1d:39:b6:02:0f:38:26:fe:8c:4f:61:a2:6a:
90:48:8b:7c:78:59:b5:67:72:ff:54:4b:f1:d6:99:
7f:d5:53:38:41:04:b1:3e:5f:c8:2e:72:10:44:17:
14:2a:be:79:db:90:36:27:e1:23:1d:0b:c1:b1:9f:
67:22:55:55:98:66:bc:f2:76:a7:cd:f5:85:8b:ed:
b3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:39:00:7F:68:D4:4A:DA:82:CB:80:DC:55:79:9C:F0:09:9B:B6:51
X509v3 Authority Key Identifier:
keyid:DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:91:47:e6:49:15:c1:73:b6:61:5f:90:7c:29:cb:f0:af:fd:
71:f1:9c:53:04:71:df:b7:cf:ab:14:e5:09:54:b2:aa:62:69:
2a:03:23:6b:d5:bc:1c:e1:1f:75:89:28:74:95:25:c5:ec:f7:
26:39:1c:c0:92:f7:4a:0c:ff:06:31:1b:ea:2c:8f:fd:7c:b8:
ed:c1:03:76:7f:a6:ee:cf:1f:09:84:6b:9a:1e:ce:d3:d1:df:
22:f8:26:e5:4a:08:9f:87:7d:f5:f8:81:51:3d:f9:a6:85:5d:
47:ae:06:4c:7e:3f:2a:f6:8c:c0:da:d0:72:e7:21:7c:b8:45:
cf:76:d6:18:df:97:0b:01:b0:7f:ef:bf:86:9f:f3:55:b1:63:
dd:7c:6a:11:a8:10:96:20:42:59:59:52:65:54:35:a8:1b:f3:
4c:7e:c5:14:07:42:41:b8:49:d1:ed:d6:1b:d3:be:41:4d:b2:
b8:6f:86:53:c6:11:20:ef:73:cd:f1:78:5d:4f:16:30:f0:26:
fb:2b:59:fc:d4:66:66:d0:55:9c:60:2d:bf:a9:17:9a:45:39:
e3:19:ed:6b:59:7b:e7:b9:c7:9c:51:cc:9f:98:45:52:01:59:
1c:89:ca:71:a2:16:09:9e:55:3a:60:12:d5:79:a1:dc:9b:91:
b6:c6:1f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:25:50 2026 by rpki-client