Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/a57036-fa4b-4714-8340-63f679d7ee1d/1/3liIYKFLOUpzUSmEKu-tGnBKMoc.mft
File: 3liIYKFLOUpzUSmEKu-tGnBKMoc.mft (raw, json)
Hash identifier: nXq9WHlGOn6lEQvcpU8aS8rcKebP8Q0bFTpjPvJ+snI=
Subject key identifier: E5:B4:3F:F8:20:DE:9F:4D:28:83:D8:7B:F8:F9:84:BB:F0:08:D4:B3
Authority key identifier: DE:58:88:60:A1:4B:39:4A:73:51:29:84:2A:EF:AD:1A:70:4A:32:87
Certificate issuer: /CN=de588860a14b394a735129842aefad1a704a3287
Certificate serial: 01A040172E749C1F386FCCA91389E403A2E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3liIYKFLOUpzUSmEKu-tGnBKMoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a57036-fa4b-4714-8340-63f679d7ee1d/1/3liIYKFLOUpzUSmEKu-tGnBKMoc.mft
Manifest number: 033A
Signing time: Wed 26 Aug 2026 22:00:55 +0000
Manifest this update: Wed 26 Aug 2026 22:00:55 +0000
Manifest next update: Thu 27 Aug 2026 22:00:55 +0000
Files and hashes: 1: 3liIYKFLOUpzUSmEKu-tGnBKMoc.crl (hash: XwWa7MKwY8fOscx3UMP4medtVU6kXth+ZX2vB8U3g54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/a57036-fa4b-4714-8340-63f679d7ee1d/1/3liIYKFLOUpzUSmEKu-tGnBKMoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/a57036-fa4b-4714-8340-63f679d7ee1d/1/3liIYKFLOUpzUSmEKu-tGnBKMoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3liIYKFLOUpzUSmEKu-tGnBKMoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:17:2e:74:9c:1f:38:6f:cc:a9:13:89:e4:03:a2:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de588860a14b394a735129842aefad1a704a3287
Validity
Not Before: Aug 26 22:00:55 2026 GMT
Not After : Aug 27 22:00:55 2026 GMT
Subject: CN=e5b43ff820de9f4d2883d87bf8f984bbf008d4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:08:51:bb:c6:6c:27:65:8a:43:36:02:87:63:
ed:57:70:c9:61:df:63:44:df:cd:f9:21:e9:e3:c3:
0e:3f:46:d0:7c:b6:99:73:b2:80:51:02:7b:e6:ca:
4b:7a:b0:1e:81:ea:f2:39:5f:dd:16:80:32:d6:0b:
47:d3:a3:0b:ad:95:1e:a6:b5:47:a0:08:f2:77:dd:
f6:e6:c2:dc:a0:97:6e:a9:b6:46:aa:d0:44:84:54:
71:10:bb:9c:dd:76:a1:59:f5:8b:a7:27:e7:2f:03:
b1:c6:71:c2:71:d8:54:c8:bd:2b:28:f3:7e:53:9f:
54:1c:0d:97:d0:cb:fc:76:ba:72:3f:23:b5:d6:72:
33:7f:ba:5c:f6:03:d0:e2:cf:77:30:50:e3:0a:9a:
0e:a9:db:03:3d:bc:f7:e3:a1:1d:a1:87:60:72:b2:
1b:83:df:79:80:28:36:c9:66:85:37:5e:74:80:bf:
e2:53:ef:8d:10:ef:72:90:74:2d:90:a9:98:d3:fd:
8f:96:1b:bd:c0:7e:92:d9:35:96:78:19:0d:77:2d:
41:b3:bf:ea:da:8e:12:58:a6:18:44:40:a0:2e:40:
a8:b5:2e:fa:74:f1:21:eb:79:9f:dc:37:8e:3a:24:
f2:b0:c9:12:50:df:4f:ae:c6:e2:8e:23:00:fc:32:
8b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B4:3F:F8:20:DE:9F:4D:28:83:D8:7B:F8:F9:84:BB:F0:08:D4:B3
X509v3 Authority Key Identifier:
keyid:DE:58:88:60:A1:4B:39:4A:73:51:29:84:2A:EF:AD:1A:70:4A:32:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3liIYKFLOUpzUSmEKu-tGnBKMoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a57036-fa4b-4714-8340-63f679d7ee1d/1/3liIYKFLOUpzUSmEKu-tGnBKMoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a57036-fa4b-4714-8340-63f679d7ee1d/1/3liIYKFLOUpzUSmEKu-tGnBKMoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:88:98:a1:50:9b:e1:21:79:ce:54:df:49:95:6b:99:7c:bb:
60:eb:86:01:0d:d3:38:28:78:89:41:c6:51:e0:5d:93:82:52:
7a:c5:0c:63:8d:a0:b6:43:36:9b:69:ea:54:b8:5c:04:37:0b:
97:5a:a2:2e:91:d6:e2:69:60:35:8b:fc:97:20:b4:8f:0e:da:
c6:73:06:5b:2c:c2:fb:fc:43:b1:8f:54:47:0b:49:7b:07:a2:
3d:3f:b8:3b:80:7c:b2:03:d1:a9:ad:46:2c:23:24:91:a6:3a:
77:82:bc:5d:c1:a7:dd:bc:e4:17:b2:c8:c4:a1:bd:f3:75:9a:
a9:7c:9c:2d:42:14:96:80:ff:40:84:13:35:49:ce:10:28:62:
33:8c:74:3f:41:3b:90:c4:4e:0c:0f:38:54:7c:86:96:99:14:
f0:2f:7a:96:76:1c:c8:11:e4:77:41:8b:62:e1:cf:29:a5:92:
9e:e6:d6:ea:a5:eb:a4:45:82:c0:d2:a8:1a:12:dc:db:82:82:
db:24:dd:cc:c1:b0:16:f5:a2:7e:87:2c:0d:40:d0:f3:70:c7:
17:ea:d5:06:2c:d5:36:cd:c3:74:4d:11:09:87:ff:10:49:14:
2e:04:60:db:01:fd:de:55:a2:2e:2c:e3:30:bb:91:86:1e:a7:
7f:cc:ca:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBAFy50nB84b8ypE4nkA6LkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNTg4ODYwYTE0YjM5NGE3MzUxMjk4NDJhZWZhZDFhNzA0
YTMyODcwHhcNMjYwODI2MjIwMDU1WhcNMjYwODI3MjIwMDU1WjAzMTEwLwYDVQQD
EyhlNWI0M2ZmODIwZGU5ZjRkMjg4M2Q4N2JmOGY5ODRiYmYwMDhkNGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjghRu8ZsJ2WKQzYCh2PtV3DJYd9j
RN/N+SHp48MOP0bQfLaZc7KAUQJ75spLerAegeryOV/dFoAy1gtH06MLrZUeprVH
oAjyd9325sLcoJduqbZGqtBEhFRxELuc3XahWfWLpyfnLwOxxnHCcdhUyL0rKPN+
U59UHA2X0Mv8drpyPyO11nIzf7pc9gPQ4s93MFDjCpoOqdsDPbz346EdoYdgcrIb
g995gCg2yWaFN150gL/iU++NEO9ykHQtkKmY0/2Plhu9wH6S2TWWeBkNdy1Bs7/q
2o4SWKYYRECgLkCotS76dPEh63mf3DeOOiTysMkSUN9PrsbijiMA/DKLKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOW0P/gg3p9NKIPYe/j5hLvwCNSzMB8GA1UdIwQY
MBaAFN5YiGChSzlKc1EphCrvrRpwSjKHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2xpSVlLRkxPVXB6VVNtRUt1LXRHbkJLTW9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hNTcwMzYtZmE0Yi00NzE0LTgzNDAt
NjNmNjc5ZDdlZTFkLzEvM2xpSVlLRkxPVXB6VVNtRUt1LXRHbkJLTW9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hNTcwMzYtZmE0Yi00NzE0LTgzNDAtNjNmNjc5ZDdlZTFk
LzEvM2xpSVlLRkxPVXB6VVNtRUt1LXRHbkJLTW9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQoiYoVCb
4SF5zlTfSZVrmXy7YOuGAQ3TOCh4iUHGUeBdk4JSesUMY42gtkM2m2nqVLhcBDcL
l1qiLpHW4mlgNYv8lyC0jw7axnMGWyzC+/xDsY9URwtJeweiPT+4O4B8sgPRqa1G
LCMkkaY6d4K8XcGn3bzkF7LIxKG983WaqXycLUIUloD/QIQTNUnOEChiM4x0P0E7
kMRODA84VHyGlpkU8C96lnYcyBHkd0GLYuHPKaWSnubW6qXrpEWCwNKoGhLc24KC
2yTdzMGwFvWifocsDUDQ83DHF+rVBizVNs3DdE0RCYf/EEkULgRg2wH93lWiLizj
MLuRhh6nf8zKAw==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:54:06 2026 by rpki-client