Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
File: 3Rc4MRWBIorSh1OUS-i88hafq6k.mft (raw, json)
Hash identifier: 2WnSiySeQFTsxw4pOsmfZ4WM54rmVi3yt1x7akD4FqQ=
Subject key identifier: 44:CC:E8:68:8E:AE:BE:AC:DA:B4:64:44:5B:1A:06:AD:A8:A9:38:17
Authority key identifier: DD:17:38:31:15:81:22:8A:D2:87:53:94:4B:E8:BC:F2:16:9F:AB:A9
Certificate issuer: /CN=dd1738311581228ad28753944be8bcf2169faba9
Certificate serial: 01A00102182F84FA11F626A1503884C77441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Rc4MRWBIorSh1OUS-i88hafq6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
Manifest number: 11A1
Signing time: Fri 14 Aug 2026 16:01:49 +0000
Manifest this update: Fri 14 Aug 2026 16:01:49 +0000
Manifest next update: Sat 15 Aug 2026 16:01:49 +0000
Files and hashes: 1: 3Rc4MRWBIorSh1OUS-i88hafq6k.crl (hash: ouHjAnjeRQa70lkvQAOIuItsBUZhzierfSXaqjcThG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Rc4MRWBIorSh1OUS-i88hafq6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:02:18:2f:84:fa:11:f6:26:a1:50:38:84:c7:74:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd1738311581228ad28753944be8bcf2169faba9
Validity
Not Before: Aug 14 16:01:49 2026 GMT
Not After : Aug 15 16:01:49 2026 GMT
Subject: CN=44cce8688eaebeacdab464445b1a06ada8a93817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a1:fd:fc:13:d1:7b:da:2e:4f:12:6b:df:9f:
ba:e5:cc:3b:2b:1e:e4:63:c0:30:98:a1:16:b0:c6:
43:ed:91:4e:8a:e6:b2:50:22:04:97:23:56:d9:b7:
e9:a9:60:ed:a6:1c:c7:4e:35:95:6c:c9:21:af:74:
e3:e3:c0:5e:65:45:0a:85:33:bd:fe:96:d2:65:7a:
78:16:a8:e1:7a:2e:ea:ac:da:9f:4a:ce:c4:56:d8:
e4:66:c6:70:bf:af:c7:90:87:c5:ea:bb:b6:d3:9c:
55:c1:9e:70:f5:64:fd:c1:b6:29:65:a0:16:c6:a3:
eb:e3:d8:09:30:44:f7:35:41:dd:1e:1a:e5:c8:2d:
f2:a8:23:8c:e4:59:d3:65:c7:e5:cf:d3:08:fd:ee:
69:0b:70:1d:a6:fb:57:34:54:c9:6b:6d:37:58:9a:
ce:34:ab:f6:1c:20:ab:ec:89:4d:5b:35:a7:ce:e3:
80:fb:0d:ed:e3:6d:94:0a:11:11:54:a8:93:4c:ac:
9c:36:21:71:80:09:64:33:4e:c7:16:2e:67:c3:0d:
6d:9c:8c:5d:0f:56:10:16:26:83:bb:ef:03:71:c5:
c9:1a:a1:e8:47:27:7c:a9:06:d2:46:29:93:90:fc:
96:b6:a2:ef:a3:2b:4a:24:1b:d2:ea:cc:b2:9b:26:
4c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CC:E8:68:8E:AE:BE:AC:DA:B4:64:44:5B:1A:06:AD:A8:A9:38:17
X509v3 Authority Key Identifier:
keyid:DD:17:38:31:15:81:22:8A:D2:87:53:94:4B:E8:BC:F2:16:9F:AB:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Rc4MRWBIorSh1OUS-i88hafq6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a7:30:6d:46:15:f3:f5:9e:2c:cd:de:cc:87:49:f2:3a:e2:
b5:74:8e:fd:21:38:4d:7f:05:05:83:3b:dd:d1:63:d7:a4:1b:
04:e9:51:78:b2:a4:ed:80:08:61:aa:db:7b:c5:b8:ac:d5:05:
8d:92:3d:14:8d:db:55:a4:21:6b:96:3a:6e:85:dd:47:f1:d6:
e3:2f:46:bf:d8:64:64:fb:da:0c:df:69:7d:e7:e6:ef:df:20:
77:72:d0:35:1c:2a:7d:1a:6d:1c:61:10:69:bd:3b:8a:bf:a0:
20:47:29:e0:98:3f:8c:5b:36:11:47:f3:c9:1f:6f:47:b1:a4:
95:20:94:35:69:ab:e8:19:6a:b3:2a:78:71:76:39:44:a6:f9:
37:2c:72:ff:2e:44:eb:8b:72:9e:a6:4d:01:22:f3:79:bd:bd:
14:1d:c6:9f:fa:c9:b9:a9:01:14:41:1a:75:cb:20:4b:4a:12:
f6:bb:b0:e9:ee:37:80:48:1e:e8:91:35:06:f1:f1:9d:ae:b9:
a5:c4:33:06:c7:d5:09:ae:84:96:b2:8c:12:8b:81:09:3b:b0:
a5:4e:18:82:d6:f1:c9:8d:71:85:ec:48:1b:11:96:5e:5b:cc:
7c:68:25:bd:9f:dc:67:3e:ce:47:9c:ec:94:41:0d:87:41:30:
5d:eb:f7:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABAhgvhPoR9iahUDiEx3RBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMTczODMxMTU4MTIyOGFkMjg3NTM5NDRiZThiY2YyMTY5
ZmFiYTkwHhcNMjYwODE0MTYwMTQ5WhcNMjYwODE1MTYwMTQ5WjAzMTEwLwYDVQQD
Eyg0NGNjZTg2ODhlYWViZWFjZGFiNDY0NDQ1YjFhMDZhZGE4YTkzODE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKH9/BPRe9ouTxJr35+65cw7Kx7k
Y8AwmKEWsMZD7ZFOiuayUCIElyNW2bfpqWDtphzHTjWVbMkhr3Tj48BeZUUKhTO9
/pbSZXp4Fqjhei7qrNqfSs7EVtjkZsZwv6/HkIfF6ru205xVwZ5w9WT9wbYpZaAW
xqPr49gJMET3NUHdHhrlyC3yqCOM5FnTZcflz9MI/e5pC3AdpvtXNFTJa203WJrO
NKv2HCCr7IlNWzWnzuOA+w3t422UChERVKiTTKycNiFxgAlkM07HFi5nww1tnIxd
D1YQFiaDu+8DccXJGqHoRyd8qQbSRimTkPyWtqLvoytKJBvS6syymyZMrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETM6GiOrr6s2rRkRFsaBq2oqTgXMB8GA1UdIwQY
MBaAFN0XODEVgSKK0odTlEvovPIWn6upMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1JjNE1SV0JJb3JTaDFPVVMtaTg4aGFmcTZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9iYzQxZjEtY2E3ZS00MjA1LWI4MWIt
YmViZmEyZmNhNDZmLzEvM1JjNE1SV0JJb3JTaDFPVVMtaTg4aGFmcTZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9iYzQxZjEtY2E3ZS00MjA1LWI4MWItYmViZmEyZmNhNDZm
LzEvM1JjNE1SV0JJb3JTaDFPVVMtaTg4aGFmcTZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqKcwbUYV
8/WeLM3ezIdJ8jritXSO/SE4TX8FBYM73dFj16QbBOlReLKk7YAIYarbe8W4rNUF
jZI9FI3bVaQha5Y6boXdR/HW4y9Gv9hkZPvaDN9pfefm798gd3LQNRwqfRptHGEQ
ab07ir+gIEcp4Jg/jFs2EUfzyR9vR7GklSCUNWmr6Blqsyp4cXY5RKb5Nyxy/y5E
64tynqZNASLzeb29FB3Gn/rJuakBFEEadcsgS0oS9ruw6e43gEge6JE1BvHxna65
pcQzBsfVCa6ElrKMEouBCTuwpU4YgtbxyY1xhexIGxGWXlvMfGglvZ/cZz7OR5zs
lEENh0EwXev3+A==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:27:48 2026 by rpki-client