Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.mft
File: 3VShBsGZ81M-VritvPpLGsPmkJ8.mft (raw, json)
Hash identifier: Eards+GrCpYUHusYM+6FvDX8NPDUKgHMJpgswGF5i3Y=
Subject key identifier: 2F:D9:D2:C2:D9:0F:59:65:55:55:87:02:BD:4D:F4:7C:C3:16:4A:0A
Authority key identifier: DD:54:A1:06:C1:99:F3:53:3E:56:B8:AD:BC:FA:4B:1A:C3:E6:90:9F
Certificate issuer: /CN=dd54a106c199f3533e56b8adbcfa4b1ac3e6909f
Certificate serial: 01A00101C87C266B34E795C9DBDF1C2547E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VShBsGZ81M-VritvPpLGsPmkJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.mft
Manifest number: 0CCC
Signing time: Fri 14 Aug 2026 16:01:29 +0000
Manifest this update: Fri 14 Aug 2026 16:01:29 +0000
Manifest next update: Sat 15 Aug 2026 16:01:29 +0000
Files and hashes: 1: 3VShBsGZ81M-VritvPpLGsPmkJ8.crl (hash: 2znvYnEDIhWGu5a5OhEB1PxqdGgMm7A9q1ivl7Pbs58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VShBsGZ81M-VritvPpLGsPmkJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:c8:7c:26:6b:34:e7:95:c9:db:df:1c:25:47:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd54a106c199f3533e56b8adbcfa4b1ac3e6909f
Validity
Not Before: Aug 14 16:01:29 2026 GMT
Not After : Aug 15 16:01:29 2026 GMT
Subject: CN=2fd9d2c2d90f596555558702bd4df47cc3164a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:61:fd:42:3f:09:ac:7a:1b:a8:70:39:fc:2b:
ea:6f:f4:d5:b7:43:29:94:72:aa:63:74:28:38:dc:
1a:c7:a7:76:60:59:bd:d7:2a:8e:9a:e6:72:10:b5:
01:1a:e4:7e:9c:18:4b:87:60:2d:85:3f:75:aa:9b:
e6:1d:f1:f3:0a:45:3b:bb:d8:81:f2:91:e0:44:18:
23:85:99:80:c4:e9:b4:de:36:f6:89:d2:72:46:15:
87:80:eb:aa:a1:da:de:66:df:39:4f:8c:93:fa:e4:
74:d9:ab:b5:c4:05:05:62:0f:76:c6:00:e3:fa:ec:
49:56:17:20:12:a3:5b:4e:97:78:da:ff:7a:3c:19:
c6:dd:d0:88:ac:aa:73:4e:7b:ae:99:cd:a3:79:5b:
d0:46:eb:c1:ca:1e:81:4c:55:7f:6e:3e:16:13:37:
a8:00:60:43:53:63:f3:01:f3:ec:00:ae:d7:11:45:
92:bc:90:16:9b:ac:59:2d:45:27:7f:ed:ab:e6:72:
3c:8d:00:aa:62:56:d7:54:87:5a:bd:29:1a:e2:59:
f1:86:7b:e9:f3:4d:59:76:67:27:45:27:78:1c:a7:
af:b1:44:dc:9a:78:dd:de:f8:56:64:a7:f1:ed:2d:
3a:92:81:0b:9a:34:6d:82:b4:40:90:cb:61:4a:16:
09:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D9:D2:C2:D9:0F:59:65:55:55:87:02:BD:4D:F4:7C:C3:16:4A:0A
X509v3 Authority Key Identifier:
keyid:DD:54:A1:06:C1:99:F3:53:3E:56:B8:AD:BC:FA:4B:1A:C3:E6:90:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VShBsGZ81M-VritvPpLGsPmkJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:05:91:16:fe:17:59:cf:15:0a:e9:84:04:74:a1:99:c4:bf:
83:55:f0:27:6d:34:14:43:58:ad:c7:17:93:7e:23:f2:78:19:
17:d0:81:e0:ff:3e:29:b0:14:33:38:4a:56:a8:1d:41:76:fb:
f2:44:3e:b6:6f:f1:36:8b:b9:ff:cb:95:05:d2:52:6c:f4:b1:
a9:82:10:7e:53:c5:cb:ff:cd:d5:f4:05:66:98:39:43:3e:6d:
20:66:b0:54:96:55:0f:13:f9:2a:5a:1b:56:ab:ca:4b:a3:25:
a7:2f:30:ea:c5:f3:57:be:ee:ec:ea:aa:82:63:c2:05:34:22:
3f:55:0d:9a:55:90:79:66:bd:52:58:13:e2:76:15:15:96:cf:
f5:14:27:1d:07:80:a2:35:70:4a:aa:c7:cd:a6:dc:a7:53:32:
c9:ef:16:16:99:0b:6e:59:93:2a:31:58:fc:f2:4b:20:3b:b8:
7b:82:41:ad:7d:cd:07:6b:c3:ee:c9:7f:fd:38:5e:69:14:5e:
9f:c7:0f:6e:10:2c:83:45:5f:d8:4d:88:5b:8b:3b:71:45:d4:
1e:b0:62:1d:f6:fd:6c:14:1e:ba:8f:7f:66:00:e3:df:3d:80:
4d:79:ff:89:ed:cf:af:8e:f9:de:05:a2:60:b2:ae:5c:99:27:
d2:c3:26:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABAch8Jms055XJ298cJUfiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNTRhMTA2YzE5OWYzNTMzZTU2YjhhZGJjZmE0YjFhYzNl
NjkwOWYwHhcNMjYwODE0MTYwMTI5WhcNMjYwODE1MTYwMTI5WjAzMTEwLwYDVQQD
EygyZmQ5ZDJjMmQ5MGY1OTY1NTU1NTg3MDJiZDRkZjQ3Y2MzMTY0YTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGH9Qj8JrHobqHA5/Cvqb/TVt0Mp
lHKqY3QoONwax6d2YFm91yqOmuZyELUBGuR+nBhLh2AthT91qpvmHfHzCkU7u9iB
8pHgRBgjhZmAxOm03jb2idJyRhWHgOuqodreZt85T4yT+uR02au1xAUFYg92xgDj
+uxJVhcgEqNbTpd42v96PBnG3dCIrKpzTnuumc2jeVvQRuvByh6BTFV/bj4WEzeo
AGBDU2PzAfPsAK7XEUWSvJAWm6xZLUUnf+2r5nI8jQCqYlbXVIdavSka4lnxhnvp
801ZdmcnRSd4HKevsUTcmnjd3vhWZKfx7S06koELmjRtgrRAkMthShYJZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/Z0sLZD1llVVWHAr1N9HzDFkoKMB8GA1UdIwQY
MBaAFN1UoQbBmfNTPla4rbz6SxrD5pCfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1ZTaEJzR1o4MU0tVnJpdHZQcExHc1Bta0o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jOGYyNmMtYjI2Mi00ODdmLWFkNDct
MzQxYWYxZjA3NjliLzEvM1ZTaEJzR1o4MU0tVnJpdHZQcExHc1Bta0o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9jOGYyNmMtYjI2Mi00ODdmLWFkNDctMzQxYWYxZjA3Njli
LzEvM1ZTaEJzR1o4MU0tVnJpdHZQcExHc1Bta0o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADAWRFv4X
Wc8VCumEBHShmcS/g1XwJ200FENYrccXk34j8ngZF9CB4P8+KbAUMzhKVqgdQXb7
8kQ+tm/xNou5/8uVBdJSbPSxqYIQflPFy//N1fQFZpg5Qz5tIGawVJZVDxP5Klob
VqvKS6Mlpy8w6sXzV77u7OqqgmPCBTQiP1UNmlWQeWa9UlgT4nYVFZbP9RQnHQeA
ojVwSqrHzabcp1Myye8WFpkLblmTKjFY/PJLIDu4e4JBrX3NB2vD7sl//TheaRRe
n8cPbhAsg0Vf2E2IW4s7cUXUHrBiHfb9bBQeuo9/ZgDj3z2ATXn/ie3Pr4753gWi
YLKuXJkn0sMmGA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:30 2026 by rpki-client