Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.mft
File: 3DhEUAcx1V-JiN3phVnP7QswmrY.mft (raw, json)
Hash identifier: /81rJ7+MMw2XnsM7jJS8mDvS+fX7NrsAxVWLr74xHP8=
Subject key identifier: 42:9E:91:98:97:FE:00:C2:E1:BA:30:4E:DE:97:D4:F6:DA:4C:E5:37
Authority key identifier: DC:38:44:50:07:31:D5:5F:89:88:DD:E9:85:59:CF:ED:0B:30:9A:B6
Certificate issuer: /CN=dc3844500731d55f8988dde98559cfed0b309ab6
Certificate serial: 01A040F279F03E57744CACDD909A4CD6A9F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DhEUAcx1V-JiN3phVnP7QswmrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.mft
Manifest number: 051D
Signing time: Thu 27 Aug 2026 02:00:27 +0000
Manifest this update: Thu 27 Aug 2026 02:00:27 +0000
Manifest next update: Fri 28 Aug 2026 02:00:27 +0000
Files and hashes: 1: 3DhEUAcx1V-JiN3phVnP7QswmrY.crl (hash: 9xpP6Fc93YJl6/Sb5v4CiW5saCiIuTPWMWqJJJ/CdsA=)
2: DuN1FxsH-lHCVLPZStKFfBKxbwQ.roa (hash: kKKX72HBFEwm68oN45GHGePWHOJC9JK5lwTCTB/prdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DhEUAcx1V-JiN3phVnP7QswmrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:f2:79:f0:3e:57:74:4c:ac:dd:90:9a:4c:d6:a9:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3844500731d55f8988dde98559cfed0b309ab6
Validity
Not Before: Aug 27 02:00:27 2026 GMT
Not After : Aug 28 02:00:27 2026 GMT
Subject: CN=429e919897fe00c2e1ba304ede97d4f6da4ce537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d8:49:9f:74:97:5f:09:98:7d:58:b2:6f:74:
d0:bb:96:b2:3a:31:21:f8:37:51:43:f6:18:8a:85:
ba:57:26:70:2a:f7:8b:81:13:07:67:61:84:f8:f7:
97:ad:4b:f4:74:6c:b9:0c:bc:1a:33:55:7a:22:e9:
41:46:59:f6:0a:5b:9a:0a:1d:87:84:51:97:3f:15:
f4:d9:95:64:fd:28:46:a9:68:a7:c0:42:95:b4:9d:
26:50:af:de:a2:81:be:f6:b6:9f:2c:3b:22:1f:71:
d3:9a:05:1c:10:3b:10:65:e0:f9:2f:16:c9:8d:81:
3b:c7:07:fb:75:05:d5:09:5c:72:4f:4c:0c:32:2e:
df:29:9c:70:7b:5f:ae:33:12:d2:3b:a2:0f:8e:cd:
67:d9:7a:ae:0f:42:99:e4:0d:f1:d1:56:56:0b:4d:
b5:ed:58:89:c9:54:0b:ed:80:2c:ea:a1:22:76:76:
a1:a5:ef:31:33:b3:ff:e9:65:82:30:05:a8:5d:15:
17:98:4e:ea:9d:8c:61:df:37:1d:ee:75:13:f0:35:
4b:3c:70:a1:bb:a5:b1:e0:9d:b5:08:60:ed:49:9a:
1a:2e:6d:f2:9c:f3:59:e6:2d:10:df:16:71:ad:75:
f4:bd:1d:03:57:d8:2b:69:d5:3d:1e:cc:da:4c:e5:
cc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9E:91:98:97:FE:00:C2:E1:BA:30:4E:DE:97:D4:F6:DA:4C:E5:37
X509v3 Authority Key Identifier:
keyid:DC:38:44:50:07:31:D5:5F:89:88:DD:E9:85:59:CF:ED:0B:30:9A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DhEUAcx1V-JiN3phVnP7QswmrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bffc72-bb6d-4998-a10b-6ff8c37db1a8/1/3DhEUAcx1V-JiN3phVnP7QswmrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:9e:ac:e5:10:b4:8e:d6:f0:01:3b:f6:a2:2e:f3:b6:40:c7:
03:69:b2:c5:86:44:03:2e:dd:55:05:e1:d6:06:54:0a:40:65:
3a:c6:f6:36:ad:46:ab:47:05:c7:3f:54:fc:34:38:b7:a2:b8:
d8:95:d8:0a:51:53:e3:d6:4f:1f:f4:54:1c:18:8f:ef:f4:75:
9b:79:90:09:11:e6:68:7c:4e:3b:54:85:87:fd:32:ce:3d:e9:
a2:af:88:f8:b7:55:96:06:e6:ac:4a:77:f2:45:a9:2c:e9:c1:
54:e2:a6:16:06:51:80:81:e9:22:12:36:cc:b4:a1:63:c4:f4:
69:e7:51:be:af:77:e7:c2:b8:91:48:c3:3e:03:79:a1:99:eb:
84:f8:61:b0:5b:76:46:1c:4b:f3:37:dd:9c:4e:b4:cd:53:6f:
a4:5d:bc:0a:b1:a0:39:2b:b7:d0:7c:19:b2:bd:2b:c3:a6:f0:
d6:6f:73:fc:b7:74:65:ec:da:1f:f6:4f:2a:37:a3:d5:f4:71:
7d:aa:db:1e:a7:ce:e7:3e:33:aa:3e:22:f8:3f:73:61:4c:0c:
0f:ce:c1:4a:92:71:c0:3a:a7:1f:0f:d6:75:1e:af:aa:08:78:
af:a8:6e:a8:4b:8c:fc:5d:29:fa:e4:7a:d4:b5:4b:da:c1:7f:
c7:ba:b2:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBA8nnwPld0TKzdkJpM1qn3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMzg0NDUwMDczMWQ1NWY4OTg4ZGRlOTg1NTljZmVkMGIz
MDlhYjYwHhcNMjYwODI3MDIwMDI3WhcNMjYwODI4MDIwMDI3WjAzMTEwLwYDVQQD
Eyg0MjllOTE5ODk3ZmUwMGMyZTFiYTMwNGVkZTk3ZDRmNmRhNGNlNTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdhJn3SXXwmYfViyb3TQu5ayOjEh
+DdRQ/YYioW6VyZwKveLgRMHZ2GE+PeXrUv0dGy5DLwaM1V6IulBRln2CluaCh2H
hFGXPxX02ZVk/ShGqWinwEKVtJ0mUK/eooG+9rafLDsiH3HTmgUcEDsQZeD5LxbJ
jYE7xwf7dQXVCVxyT0wMMi7fKZxwe1+uMxLSO6IPjs1n2XquD0KZ5A3x0VZWC021
7ViJyVQL7YAs6qEidnahpe8xM7P/6WWCMAWoXRUXmE7qnYxh3zcd7nUT8DVLPHCh
u6Wx4J21CGDtSZoaLm3ynPNZ5i0Q3xZxrXX0vR0DV9gradU9HszaTOXMIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKekZiX/gDC4bowTt6X1PbaTOU3MB8GA1UdIwQY
MBaAFNw4RFAHMdVfiYjd6YVZz+0LMJq2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0RoRVVBY3gxVi1KaU4zcGhWblA3UXN3bXJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9iZmZjNzItYmI2ZC00OTk4LWExMGIt
NmZmOGMzN2RiMWE4LzEvM0RoRVVBY3gxVi1KaU4zcGhWblA3UXN3bXJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9iZmZjNzItYmI2ZC00OTk4LWExMGItNmZmOGMzN2RiMWE4
LzEvM0RoRVVBY3gxVi1KaU4zcGhWblA3UXN3bXJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZJ6s5RC0
jtbwATv2oi7ztkDHA2myxYZEAy7dVQXh1gZUCkBlOsb2Nq1Gq0cFxz9U/DQ4t6K4
2JXYClFT49ZPH/RUHBiP7/R1m3mQCRHmaHxOO1SFh/0yzj3poq+I+LdVlgbmrEp3
8kWpLOnBVOKmFgZRgIHpIhI2zLShY8T0aedRvq9358K4kUjDPgN5oZnrhPhhsFt2
RhxL8zfdnE60zVNvpF28CrGgOSu30HwZsr0rw6bw1m9z/Ld0ZezaH/ZPKjej1fRx
farbHqfO5z4zqj4i+D9zYUwMD87BSpJxwDqnHw/WdR6vqgh4r6huqEuM/F0p+uR6
1LVL2sF/x7qypw==
-----END CERTIFICATE-----
Generated at Thu Aug 27 06:21:32 2026 by rpki-client