Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/3ikhmJ19kMZOuzVliDH-ao9JyTg.mft
File: 3ikhmJ19kMZOuzVliDH-ao9JyTg.mft (raw, json)
Hash identifier: s0x5AxkMwam5MlJ5d4v4KFxOq0JSmpDYiFVlSqqy7u4=
Subject key identifier: 74:2E:0B:E3:E0:1F:45:CC:E7:58:F0:FB:4C:D4:2B:65:FF:CB:12:71
Authority key identifier: DE:29:21:98:9D:7D:90:C6:4E:BB:35:65:88:31:FE:6A:8F:49:C9:38
Certificate issuer: /CN=de2921989d7d90c64ebb35658831fe6a8f49c938
Certificate serial: 01A14A2A632C9A7B82FDBE748091D84C88F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ikhmJ19kMZOuzVliDH-ao9JyTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/3ikhmJ19kMZOuzVliDH-ao9JyTg.mft
Manifest number: 0F1C
Signing time: Sat 17 Oct 2026 14:00:54 +0000
Manifest this update: Sat 17 Oct 2026 14:00:54 +0000
Manifest next update: Sun 18 Oct 2026 14:00:54 +0000
Files and hashes: 1: 3ikhmJ19kMZOuzVliDH-ao9JyTg.crl (hash: c4ZRgo7+LKimN4HolK9tGLXwtKzFtvQAhvHqDQsde0s=)
2: _ioUT6ot6spKYeitBH6WHig08aI.roa (hash: lPf90VagjG9YZhFPp1sns8p7TmON2JIuqMSkRErr21k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/3ikhmJ19kMZOuzVliDH-ao9JyTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/3ikhmJ19kMZOuzVliDH-ao9JyTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ikhmJ19kMZOuzVliDH-ao9JyTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4a:2a:63:2c:9a:7b:82:fd:be:74:80:91:d8:4c:88:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2921989d7d90c64ebb35658831fe6a8f49c938
Validity
Not Before: Oct 17 14:00:54 2026 GMT
Not After : Oct 18 14:00:54 2026 GMT
Subject: CN=742e0be3e01f45cce758f0fb4cd42b65ffcb1271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:aa:67:7c:fc:2a:6c:1e:66:6d:78:76:42:87:
22:1f:db:b5:d8:27:e7:53:c3:c5:9f:07:59:69:70:
d7:d6:b7:e3:1f:33:4c:c5:57:99:19:ad:e7:a3:a5:
54:11:9d:66:10:a5:56:8e:89:d1:cf:fa:12:5d:5a:
f9:3b:36:8e:32:79:9a:46:d2:67:87:db:dc:db:d4:
ea:80:48:5b:1c:cd:64:60:c3:c2:56:91:b9:97:d1:
20:9d:c7:42:40:97:96:7e:32:58:51:5f:1b:6d:1c:
d0:47:44:dc:db:96:1b:fe:5b:ed:ce:44:04:8a:d1:
92:b4:5e:5c:fd:b8:20:86:8c:7a:34:79:99:e9:0a:
5c:56:93:bc:79:21:26:52:63:51:ff:cc:61:10:b1:
39:bb:46:0f:e8:ed:fe:6e:e8:32:4b:05:46:95:75:
43:c1:bf:3e:44:f0:da:3f:6b:e4:38:37:cb:49:ad:
d6:0e:0c:e7:fd:f5:0c:3b:71:29:20:31:7f:b0:1c:
d1:db:ac:1b:5b:46:0f:85:bc:63:18:be:50:b5:e9:
fa:8a:54:31:de:4f:43:12:2b:75:da:3a:29:18:8c:
a9:09:b8:e8:dc:ac:a4:de:22:ec:aa:46:c5:23:80:
3c:43:ad:e7:ae:dd:b6:ed:af:01:9d:ab:d9:f3:d7:
0f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2E:0B:E3:E0:1F:45:CC:E7:58:F0:FB:4C:D4:2B:65:FF:CB:12:71
X509v3 Authority Key Identifier:
keyid:DE:29:21:98:9D:7D:90:C6:4E:BB:35:65:88:31:FE:6A:8F:49:C9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ikhmJ19kMZOuzVliDH-ao9JyTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/3ikhmJ19kMZOuzVliDH-ao9JyTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4b9ccf-7535-45dd-bd97-0b5ecb474f15/1/3ikhmJ19kMZOuzVliDH-ao9JyTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:76:fd:74:cb:56:bf:e8:fc:1e:c9:df:cf:4c:e6:5e:65:b3:
68:24:55:e5:46:7d:0d:12:4e:ff:00:ad:4e:c9:c6:04:f6:aa:
5f:6d:94:98:82:dd:c2:65:6c:73:4e:06:4c:7a:2d:5a:24:d1:
e2:73:cc:80:58:75:88:ed:2a:95:15:8e:80:9b:75:cf:b4:2b:
19:35:fa:e7:98:8b:31:9c:99:81:84:ce:b3:72:61:97:58:ff:
73:ee:9e:06:01:0d:d0:8b:be:1c:7d:ba:91:75:93:00:10:ae:
f0:e2:96:3c:16:39:1a:11:2a:ea:fb:2f:fa:14:d3:c6:c7:54:
80:49:b1:b4:56:4a:b8:97:ac:82:5b:cc:f5:69:77:be:ed:bb:
24:af:64:4d:00:06:2c:8c:35:e8:7e:a4:0f:02:b0:53:14:4c:
25:e0:e0:f0:64:9c:3c:d1:f4:75:9d:5d:52:b8:5d:16:b3:ca:
e0:f8:90:95:b3:3b:b0:66:6a:81:5d:fd:55:9f:c3:55:73:d5:
be:6e:bd:00:7e:bd:09:f9:bc:6d:00:57:b6:96:84:79:95:38:
f1:b5:d1:1c:37:3d:49:e7:10:0e:2d:bc:d9:95:0b:ca:d5:6c:
51:3c:8c:9d:30:e2:74:92:d8:98:b7:c8:d2:6d:54:9d:4e:73:
24:32:4e:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFKKmMsmnuC/b50gJHYTIjzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMjkyMTk4OWQ3ZDkwYzY0ZWJiMzU2NTg4MzFmZTZhOGY0
OWM5MzgwHhcNMjYxMDE3MTQwMDU0WhcNMjYxMDE4MTQwMDU0WjAzMTEwLwYDVQQD
Eyg3NDJlMGJlM2UwMWY0NWNjZTc1OGYwZmI0Y2Q0MmI2NWZmY2IxMjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqpnfPwqbB5mbXh2QociH9u12Cfn
U8PFnwdZaXDX1rfjHzNMxVeZGa3no6VUEZ1mEKVWjonRz/oSXVr5OzaOMnmaRtJn
h9vc29TqgEhbHM1kYMPCVpG5l9EgncdCQJeWfjJYUV8bbRzQR0Tc25Yb/lvtzkQE
itGStF5c/bgghox6NHmZ6QpcVpO8eSEmUmNR/8xhELE5u0YP6O3+bugySwVGlXVD
wb8+RPDaP2vkODfLSa3WDgzn/fUMO3EpIDF/sBzR26wbW0YPhbxjGL5Qten6ilQx
3k9DEit12jopGIypCbjo3Kyk3iLsqkbFI4A8Q63nrt227a8BnavZ89cPwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQuC+PgH0XM51jw+0zUK2X/yxJxMB8GA1UdIwQY
MBaAFN4pIZidfZDGTrs1ZYgx/mqPSck4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2lraG1KMTlrTVpPdXpWbGlESC1hbzlKeVRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS80YjljY2YtNzUzNS00NWRkLWJkOTct
MGI1ZWNiNDc0ZjE1LzEvM2lraG1KMTlrTVpPdXpWbGlESC1hbzlKeVRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS80YjljY2YtNzUzNS00NWRkLWJkOTctMGI1ZWNiNDc0ZjE1
LzEvM2lraG1KMTlrTVpPdXpWbGlESC1hbzlKeVRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs3b9dMtW
v+j8Hsnfz0zmXmWzaCRV5UZ9DRJO/wCtTsnGBPaqX22UmILdwmVsc04GTHotWiTR
4nPMgFh1iO0qlRWOgJt1z7QrGTX655iLMZyZgYTOs3Jhl1j/c+6eBgEN0Iu+HH26
kXWTABCu8OKWPBY5GhEq6vsv+hTTxsdUgEmxtFZKuJesglvM9Wl3vu27JK9kTQAG
LIw16H6kDwKwUxRMJeDg8GScPNH0dZ1dUrhdFrPK4PiQlbM7sGZqgV39VZ/DVXPV
vm69AH69Cfm8bQBXtpaEeZU48bXRHDc9SecQDi282ZULytVsUTyMnTDidJLYmLfI
0m1UnU5zJDJOMw==
-----END CERTIFICATE-----
Generated at Sat Oct 17 23:52:07 2026 by rpki-client