Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/8d4107-3c59-44d4-816f-3a4e8b9da5be/1/3f20crHtWewvNw8g-rSHlDnFMY8.mft
File: 3f20crHtWewvNw8g-rSHlDnFMY8.mft (raw, json)
Hash identifier: 1nLuSxyo2oA19qyvDceWIcG60hxLhXPKVg85Rn5YnBE=
Subject key identifier: F3:9D:F2:14:2C:BF:0A:AC:61:D2:DD:10:A7:29:4F:A4:8F:82:AC:C6
Authority key identifier: DD:FD:B4:72:B1:ED:59:EC:2F:37:0F:20:FA:B4:87:94:39:C5:31:8F
Certificate issuer: /CN=ddfdb472b1ed59ec2f370f20fab4879439c5318f
Certificate serial: 01A1A41297545A57674BBDB71D10D4967669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3f20crHtWewvNw8g-rSHlDnFMY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/8d4107-3c59-44d4-816f-3a4e8b9da5be/1/3f20crHtWewvNw8g-rSHlDnFMY8.mft
Manifest number: 02F1
Signing time: Wed 04 Nov 2026 01:00:44 +0000
Manifest this update: Wed 04 Nov 2026 01:00:44 +0000
Manifest next update: Thu 05 Nov 2026 01:00:44 +0000
Files and hashes: 1: 3f20crHtWewvNw8g-rSHlDnFMY8.crl (hash: 0cUbKC71WVIZmx14znsBYWCZv+UoeAaAdbuo+n0b2bI=)
2: ZMQkud9K3mvXdpjh-yoqav-Fm2A.roa (hash: rezLl6nocyRRaT4FpZnJ5CHwHhiv5ot72qwHgOZEFQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/8d4107-3c59-44d4-816f-3a4e8b9da5be/1/3f20crHtWewvNw8g-rSHlDnFMY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/8d4107-3c59-44d4-816f-3a4e8b9da5be/1/3f20crHtWewvNw8g-rSHlDnFMY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3f20crHtWewvNw8g-rSHlDnFMY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 01:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a4:12:97:54:5a:57:67:4b:bd:b7:1d:10:d4:96:76:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfdb472b1ed59ec2f370f20fab4879439c5318f
Validity
Not Before: Nov 4 01:00:44 2026 GMT
Not After : Nov 5 01:00:44 2026 GMT
Subject: CN=f39df2142cbf0aac61d2dd10a7294fa48f82acc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:92:f1:07:ac:a1:f1:d6:8f:83:c5:c0:af:c7:
22:49:91:5d:b8:2e:08:b4:c5:ff:27:bd:17:67:24:
39:2c:b0:b7:b4:97:79:14:d7:e1:cd:8c:6a:50:cc:
b0:9c:52:e8:80:92:e2:57:80:26:a5:1e:62:85:bf:
59:0c:58:b0:6e:49:df:b2:be:66:6a:9d:08:9e:7d:
39:45:ff:09:00:9a:07:6d:ad:a1:bc:c9:94:2f:b5:
4d:95:5e:b3:83:32:21:ae:33:a2:9f:12:b3:3e:af:
4a:17:c3:40:53:ac:0f:d1:9d:ed:56:a3:41:52:a5:
b2:2e:3a:85:3f:6a:70:33:12:7a:45:0b:4c:cb:1c:
38:b6:ca:39:ed:02:6a:28:43:e2:b4:f1:0f:9d:1f:
f1:db:70:e2:f7:58:61:e3:cd:d4:a4:eb:d5:3a:3f:
41:b9:bb:20:28:7e:42:13:a1:56:8c:9d:cc:ea:af:
80:cb:15:d3:22:68:fb:93:c5:07:1b:59:83:93:37:
f5:ee:c3:bb:03:16:be:50:44:37:88:b4:88:07:76:
1b:36:66:85:b9:56:28:67:e8:94:71:dc:02:1b:78:
ab:3b:01:4e:bc:9b:7a:35:54:47:b5:35:9c:1a:ec:
2f:65:86:ff:09:b9:b5:38:03:cf:d3:4d:45:33:cd:
0c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9D:F2:14:2C:BF:0A:AC:61:D2:DD:10:A7:29:4F:A4:8F:82:AC:C6
X509v3 Authority Key Identifier:
keyid:DD:FD:B4:72:B1:ED:59:EC:2F:37:0F:20:FA:B4:87:94:39:C5:31:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f20crHtWewvNw8g-rSHlDnFMY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8d4107-3c59-44d4-816f-3a4e8b9da5be/1/3f20crHtWewvNw8g-rSHlDnFMY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8d4107-3c59-44d4-816f-3a4e8b9da5be/1/3f20crHtWewvNw8g-rSHlDnFMY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e6:23:ec:b4:11:79:d1:64:8c:fe:b9:75:4b:56:a4:21:74:
57:b7:56:85:f0:54:33:03:58:5f:7f:91:96:66:58:fa:c7:8c:
9f:a7:41:24:3d:f1:ed:3e:5d:ed:11:47:5d:9b:0e:ce:65:c0:
fd:92:8d:56:7e:02:6f:39:da:40:65:26:85:ac:eb:cd:c8:f5:
cc:bf:57:90:30:5f:05:2d:4f:d0:fe:87:46:d8:16:ed:d6:09:
ae:57:b2:38:ad:13:51:f1:88:07:d9:28:8b:a1:fd:a8:95:33:
70:43:1b:39:5b:fe:10:29:b4:a4:68:0a:c7:95:c4:19:4d:91:
3d:e8:64:f3:d0:97:45:5d:83:a6:39:76:38:e3:89:ed:ee:d5:
60:ab:08:5c:61:94:bb:6e:b1:e9:13:94:55:5d:fc:2f:4f:0d:
76:5f:16:ee:f0:ad:a8:d1:8a:13:2d:1a:7a:8e:98:4f:be:23:
b6:ec:2f:b4:e1:8f:38:39:bd:19:b5:9e:44:f2:15:6e:88:3d:
eb:f3:9c:7e:0b:f9:a1:1c:3c:79:35:43:ee:0d:5f:12:14:4e:
f7:ef:e8:04:92:ec:e8:70:6c:0b:33:b5:c4:2c:59:14:1a:0f:
f7:d4:44:83:2d:71:e4:57:9f:d9:80:e7:3e:0a:26:62:ba:15:
38:21:28:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 11:14:26 2026 by rpki-client