Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
File: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft (raw, json)
Hash identifier: NCHIklz0HFrMkHwwXWemQsdxxAUqEa3BBGQeRE7wbjo=
Subject key identifier: 09:5B:2D:A7:14:B2:E3:74:89:A2:A2:5C:2B:DF:E6:C3:96:D5:25:86
Authority key identifier: DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
Certificate issuer: /CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Certificate serial: 01A13D818E5C71CFBEA0307F703CA4997D82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 03:01:03 +0000
Manifest this update: Thu 15 Oct 2026 03:01:03 +0000
Manifest next update: Fri 16 Oct 2026 03:01:03 +0000
Files and hashes: 1: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl (hash: TSXrmvZIkgGBm4r2A2UMa/F4ijoSTtJ6tU96ZO5f8Ss=)
2: 7DFhLxfNsNdBG7misMM2Gd6pq98.roa (hash: 91BxkeL//UY4lGamLg4LH3uIYXXl6dNvyu0iOuqwroo=)
3: kOLGFIQ68N0t89GXfLW_l-tuaZs.roa (hash: JEbR7GHzj1yo7N6pB32D4eZu3GhxlqvfkdXGhcPXMmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:81:8e:5c:71:cf:be:a0:30:7f:70:3c:a4:99:7d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Validity
Not Before: Oct 15 03:01:03 2026 GMT
Not After : Oct 16 03:01:03 2026 GMT
Subject: CN=095b2da714b2e37489a2a25c2bdfe6c396d52586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:38:5a:13:aa:80:50:4a:d5:58:c9:99:f1:82:
8c:2d:54:1d:1b:97:c2:9f:c4:07:c7:a9:b8:15:16:
2d:07:24:42:0a:2d:ea:b9:09:d4:23:e7:db:3b:e6:
f7:a3:24:d0:ff:28:43:9e:83:bd:4e:4a:a0:0c:37:
0a:9c:0a:71:e5:34:52:28:ee:b4:3e:f1:ca:8f:e8:
76:60:c6:f6:a5:6c:c1:1e:db:a9:e1:be:9f:49:c9:
3b:1d:7e:4f:8f:0b:af:6d:22:78:f6:42:cc:b4:fc:
61:1c:a3:97:55:8e:18:1b:c4:57:a1:d3:28:c1:a2:
44:b5:c9:cb:0b:fa:97:e1:30:7c:0f:e8:bc:c0:fc:
5e:82:54:5b:d6:c3:af:85:c6:1b:41:d3:60:96:a0:
81:75:6d:3d:53:d1:cf:3f:0d:5f:78:1c:84:db:83:
d8:28:b0:ea:ed:79:12:38:43:67:b2:ff:18:6b:3d:
c9:3b:fc:46:3f:24:ac:c6:7d:98:73:c0:e3:ed:0b:
1c:74:8c:7d:63:c1:13:df:af:2c:ba:fe:5a:cd:eb:
92:5a:c9:a9:ef:c9:bc:09:da:c2:d8:f6:ef:79:48:
c2:c5:6f:5b:b6:d9:2b:e8:96:5f:e8:4f:72:d2:55:
81:b6:8c:16:1a:55:2f:5b:d4:5e:89:bf:58:35:d0:
5f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5B:2D:A7:14:B2:E3:74:89:A2:A2:5C:2B:DF:E6:C3:96:D5:25:86
X509v3 Authority Key Identifier:
keyid:DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:6c:6d:c7:81:a5:b5:ec:65:86:73:30:1a:6f:88:f2:d1:ae:
5b:6b:31:db:b6:22:35:37:46:34:e9:c2:46:f1:56:0d:28:fb:
51:e3:8f:8f:0d:81:5c:de:b3:03:87:b3:23:b9:9b:39:be:a8:
ba:2e:5f:da:11:0b:41:a4:55:75:33:58:03:ec:31:bd:8d:a5:
dd:62:84:15:fd:eb:0e:aa:00:b6:21:7d:1b:37:56:9a:53:64:
67:c8:0e:08:4e:a8:60:0e:66:dd:2b:3b:f3:9f:dc:c0:c1:50:
58:07:a9:5b:b3:7a:a3:ae:d0:28:ac:af:f7:97:c0:1d:76:1b:
9b:13:9f:d3:4f:b4:bb:e7:32:6a:11:bc:ff:d1:2a:94:4f:2e:
a5:57:36:33:16:e8:08:8f:bc:3b:49:8a:41:bc:71:c6:7a:57:
62:92:28:a0:1c:22:a1:eb:40:88:b9:4d:ce:dd:98:3f:a0:e6:
f4:6d:ef:4f:29:63:aa:cd:bf:ae:8c:46:6d:96:48:58:4a:22:
be:09:ca:4e:98:79:cf:d3:ed:05:25:b2:df:86:0e:15:fc:b7:
e9:5f:3d:ac:73:28:19:4e:7c:11:e6:5b:3c:64:a6:cd:c9:27:
f3:3c:f9:a6:74:e1:e5:ba:a7:fe:2f:e7:f6:ba:ff:cf:8e:28:
a3:51:27:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9gY5ccc++oDB/cDykmX2CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNjUxNjY5MmM2MzgyYjNmODNkYWU5OTFmZDg5ZGQxYjBj
ZWY1NzkwHhcNMjYxMDE1MDMwMTAzWhcNMjYxMDE2MDMwMTAzWjAzMTEwLwYDVQQD
EygwOTViMmRhNzE0YjJlMzc0ODlhMmEyNWMyYmRmZTZjMzk2ZDUyNTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszhaE6qAUErVWMmZ8YKMLVQdG5fC
n8QHx6m4FRYtByRCCi3quQnUI+fbO+b3oyTQ/yhDnoO9TkqgDDcKnApx5TRSKO60
PvHKj+h2YMb2pWzBHtup4b6fSck7HX5PjwuvbSJ49kLMtPxhHKOXVY4YG8RXodMo
waJEtcnLC/qX4TB8D+i8wPxeglRb1sOvhcYbQdNglqCBdW09U9HPPw1feByE24PY
KLDq7XkSOENnsv8Yaz3JO/xGPySsxn2Yc8Dj7QscdIx9Y8ET368suv5azeuSWsmp
78m8CdrC2PbveUjCxW9bttkr6JZf6E9y0lWBtowWGlUvW9Reib9YNdBf9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAlbLacUsuN0iaKiXCvf5sOW1SWGMB8GA1UdIwQY
MBaAFNxlFmksY4Kz+D2umR/YndGwzvV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0dVV2FTeGpnclA0UGE2Wkg5aWQwYkRPOVhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9jZDlmZDMtYTNlZS00ZWM1LThjNTQt
MmYzODNlODVlYmMwLzEvM0dVV2FTeGpnclA0UGE2Wkg5aWQwYkRPOVhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9jZDlmZDMtYTNlZS00ZWM1LThjNTQtMmYzODNlODVlYmMw
LzEvM0dVV2FTeGpnclA0UGE2Wkg5aWQwYkRPOVhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALGxtx4Gl
texlhnMwGm+I8tGuW2sx27YiNTdGNOnCRvFWDSj7UeOPjw2BXN6zA4ezI7mbOb6o
ui5f2hELQaRVdTNYA+wxvY2l3WKEFf3rDqoAtiF9GzdWmlNkZ8gOCE6oYA5m3Ss7
85/cwMFQWAepW7N6o67QKKyv95fAHXYbmxOf00+0u+cyahG8/9EqlE8upVc2Mxbo
CI+8O0mKQbxxxnpXYpIooBwioetAiLlNzt2YP6Dm9G3vTyljqs2/roxGbZZIWEoi
vgnKTph5z9PtBSWy34YOFfy36V89rHMoGU58EeZbPGSmzckn8zz5pnTh5bqn/i/n
9rr/z44oo1EnrA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:35 2026 by rpki-client