Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
File: 3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft (raw, json)
Hash identifier: e6Uk2Ga2NiJyY2fxiAWPgVGzbPrEHWur3qRyX4SGUds=
Subject key identifier: 0C:C5:AC:1E:D2:0E:4B:64:3D:D3:22:E3:E2:68:C8:6A:B1:CA:F6:D0
Authority key identifier: DD:39:9E:49:41:89:F6:91:A5:ED:64:F3:BE:3A:6A:3B:50:22:50:91
Certificate issuer: /CN=dd399e494189f691a5ed64f3be3a6a3b50225091
Certificate serial: 01A13E5D414531AECD8B3F18CCC0F3AD26FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
Manifest number: 0A11
Signing time: Thu 15 Oct 2026 07:01:01 +0000
Manifest this update: Thu 15 Oct 2026 07:01:01 +0000
Manifest next update: Fri 16 Oct 2026 07:01:01 +0000
Files and hashes: 1: 3TmeSUGJ9pGl7WTzvjpqO1AiUJE.crl (hash: eFXJ24MQQVgJFx3q5RmpdQUAweyY8cysTor4e0IdnkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5d:41:45:31:ae:cd:8b:3f:18:cc:c0:f3:ad:26:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd399e494189f691a5ed64f3be3a6a3b50225091
Validity
Not Before: Oct 15 07:01:01 2026 GMT
Not After : Oct 16 07:01:01 2026 GMT
Subject: CN=0cc5ac1ed20e4b643dd322e3e268c86ab1caf6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9a:28:8f:c1:be:ab:54:8a:7d:3b:fd:ea:f3:
44:cf:be:7b:ee:c2:3f:aa:b7:47:6c:30:2f:a7:d9:
c4:d3:7f:30:4f:bd:ac:15:93:7e:ff:2e:86:1e:76:
79:a9:35:bf:33:dd:41:8e:bd:37:ac:46:6a:c3:c9:
76:41:65:d0:e4:06:b6:6a:43:dd:e8:69:72:54:c2:
6b:11:b7:c2:cf:50:fa:ab:3b:a6:58:e2:be:84:d9:
5e:d1:c3:23:bd:e1:fe:4a:6f:41:4c:76:c5:19:3e:
48:be:59:61:cc:95:f9:0d:4e:f4:c4:80:97:13:d3:
12:db:22:cf:8c:4a:44:16:67:c1:89:af:40:7f:56:
d7:ff:02:07:55:45:6d:06:51:d8:07:80:b6:d6:e9:
c0:ff:62:af:9e:b4:e9:34:cf:91:f0:95:53:b3:91:
ef:42:48:50:91:33:76:d0:8e:8e:fe:0e:6f:e0:c6:
f9:38:51:1b:ed:00:43:84:84:17:3e:8a:6f:ce:e4:
c6:75:fc:54:5f:f2:44:a6:9a:c7:b4:f2:a1:c0:78:
47:b6:1b:91:20:a6:b5:17:9b:5a:31:97:11:48:22:
90:ae:fa:5e:61:65:9c:71:14:c5:b2:85:09:68:bd:
a3:2f:cb:bb:c0:e0:67:97:dd:3e:9e:72:96:63:d6:
5d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C5:AC:1E:D2:0E:4B:64:3D:D3:22:E3:E2:68:C8:6A:B1:CA:F6:D0
X509v3 Authority Key Identifier:
keyid:DD:39:9E:49:41:89:F6:91:A5:ED:64:F3:BE:3A:6A:3B:50:22:50:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/27ba68-f178-4991-96a7-442a03b7f084/1/3TmeSUGJ9pGl7WTzvjpqO1AiUJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:41:b8:66:72:a3:e9:89:8f:b9:0c:d2:26:c2:c2:7d:e0:a8:
b3:af:91:d2:43:f0:be:b6:2c:b3:dd:c8:c7:d0:6b:2d:f1:4d:
b7:69:a2:dc:c0:aa:7d:82:ba:aa:2a:83:df:65:ac:6a:1d:09:
67:e7:4e:31:22:91:8a:49:c6:e7:71:c9:5f:4a:07:de:4d:1c:
ca:be:aa:c5:1a:90:a8:04:ac:2b:4a:09:b0:c9:95:9a:77:1d:
02:a8:c5:fa:69:43:06:14:d8:03:20:9f:a3:8e:f2:0b:9a:a8:
94:54:a6:73:cf:1a:d5:3a:ce:95:eb:0a:70:f7:91:89:41:3d:
cf:b8:62:29:2f:21:55:6c:39:2e:13:5f:32:76:a3:49:03:d4:
06:6d:5f:eb:c9:ac:e2:d9:ec:c2:b6:b6:27:c7:23:79:cd:bf:
f2:63:1c:96:b2:30:7b:35:70:5a:57:bc:37:ee:ef:21:49:75:
4c:b8:29:ad:99:8c:30:09:64:4b:b5:19:1a:1d:0d:c5:59:b3:
38:85:4d:eb:16:f3:37:0f:c2:df:7f:a0:b1:5e:2e:56:75:4a:
82:ec:f1:68:9a:88:7f:39:98:46:f4:08:f9:22:c5:3f:77:04:
b9:d8:3e:89:94:64:4a:a0:d8:35:f8:62:2b:be:99:b4:6f:4f:
2c:c7:2e:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+XUFFMa7Niz8YzMDzrSb9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMzk5ZTQ5NDE4OWY2OTFhNWVkNjRmM2JlM2E2YTNiNTAy
MjUwOTEwHhcNMjYxMDE1MDcwMTAxWhcNMjYxMDE2MDcwMTAxWjAzMTEwLwYDVQQD
EygwY2M1YWMxZWQyMGU0YjY0M2RkMzIyZTNlMjY4Yzg2YWIxY2FmNmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5ooj8G+q1SKfTv96vNEz7577sI/
qrdHbDAvp9nE038wT72sFZN+/y6GHnZ5qTW/M91Bjr03rEZqw8l2QWXQ5Aa2akPd
6GlyVMJrEbfCz1D6qzumWOK+hNle0cMjveH+Sm9BTHbFGT5IvllhzJX5DU70xICX
E9MS2yLPjEpEFmfBia9Af1bX/wIHVUVtBlHYB4C21unA/2KvnrTpNM+R8JVTs5Hv
QkhQkTN20I6O/g5v4Mb5OFEb7QBDhIQXPopvzuTGdfxUX/JEpprHtPKhwHhHthuR
IKa1F5taMZcRSCKQrvpeYWWccRTFsoUJaL2jL8u7wOBnl90+nnKWY9ZdPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAzFrB7SDktkPdMi4+JoyGqxyvbQMB8GA1UdIwQY
MBaAFN05nklBifaRpe1k8746ajtQIlCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1RtZVNVR0o5cEdsN1dUenZqcHFPMUFpVUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8yN2JhNjgtZjE3OC00OTkxLTk2YTct
NDQyYTAzYjdmMDg0LzEvM1RtZVNVR0o5cEdsN1dUenZqcHFPMUFpVUpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8yN2JhNjgtZjE3OC00OTkxLTk2YTctNDQyYTAzYjdmMDg0
LzEvM1RtZVNVR0o5cEdsN1dUenZqcHFPMUFpVUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYEG4ZnKj
6YmPuQzSJsLCfeCos6+R0kPwvrYss93Ix9BrLfFNt2mi3MCqfYK6qiqD32Wsah0J
Z+dOMSKRiknG53HJX0oH3k0cyr6qxRqQqASsK0oJsMmVmncdAqjF+mlDBhTYAyCf
o47yC5qolFSmc88a1TrOlesKcPeRiUE9z7hiKS8hVWw5LhNfMnajSQPUBm1f68ms
4tnswra2J8cjec2/8mMclrIwezVwWle8N+7vIUl1TLgprZmMMAlkS7UZGh0NxVmz
OIVN6xbzNw/C33+gsV4uVnVKguzxaJqIfzmYRvQI+SLFP3cEudg+iZRkSqDYNfhi
K76ZtG9PLMcuSw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 12:44:32 2026 by rpki-client