Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.mft
File: 3VShBsGZ81M-VritvPpLGsPmkJ8.mft (raw, json)
Hash identifier: svULulv8dkMhmjgkMUze1EtGaMG3XLZNWtovHKYJNmk=
Subject key identifier: 63:4A:38:B1:CA:8E:94:DF:36:B9:3E:CE:D0:18:EB:AC:6D:BE:F0:49
Authority key identifier: DD:54:A1:06:C1:99:F3:53:3E:56:B8:AD:BC:FA:4B:1A:C3:E6:90:9F
Certificate issuer: /CN=dd54a106c199f3533e56b8adbcfa4b1ac3e6909f
Certificate serial: 01A13FA7893C46F1A26482B8735093CD4E13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VShBsGZ81M-VritvPpLGsPmkJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.mft
Manifest number: 0D71
Signing time: Thu 15 Oct 2026 13:01:46 +0000
Manifest this update: Thu 15 Oct 2026 13:01:46 +0000
Manifest next update: Fri 16 Oct 2026 13:01:46 +0000
Files and hashes: 1: 3VShBsGZ81M-VritvPpLGsPmkJ8.crl (hash: 5audEVD/nnIfdS7tU+V+TAKbbFaY+eBy1rWcDbo0RTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VShBsGZ81M-VritvPpLGsPmkJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 13:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:89:3c:46:f1:a2:64:82:b8:73:50:93:cd:4e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd54a106c199f3533e56b8adbcfa4b1ac3e6909f
Validity
Not Before: Oct 15 13:01:46 2026 GMT
Not After : Oct 16 13:01:46 2026 GMT
Subject: CN=634a38b1ca8e94df36b93eced018ebac6dbef049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bf:05:74:69:61:31:ec:e1:ca:b4:e3:fc:5b:
21:d8:3a:af:14:3d:d5:ba:16:f8:97:65:32:2d:fe:
c9:9a:50:9e:71:55:52:d4:ab:c8:bc:c3:1f:61:0c:
0c:bf:71:28:1e:a7:68:6c:95:c3:86:10:4b:f7:9e:
36:ae:ef:3e:15:a8:97:89:ed:a6:ff:8b:1d:58:4d:
e6:95:07:56:8d:74:74:b7:d3:18:17:ce:5b:77:e5:
1e:39:63:c3:49:10:22:84:85:f6:95:4a:2b:74:14:
48:fd:4a:dd:91:33:fc:2f:bf:99:53:1f:29:d8:62:
98:06:33:39:d2:23:e0:ed:8b:2e:70:5c:ab:48:4f:
77:72:23:97:1b:5d:44:43:3a:29:0d:42:89:d9:d4:
da:cc:89:e2:5e:df:62:2c:05:0b:c4:73:9d:08:7b:
69:4c:81:68:ef:8e:c0:5b:2a:55:28:bc:5e:ba:f9:
dc:0b:74:b2:43:3f:bb:39:9b:46:0e:be:ea:86:4f:
e1:5b:53:73:d8:a4:1f:48:e7:81:a7:50:58:c9:77:
ce:91:43:53:e3:39:2d:91:97:8e:5f:6f:ab:f6:05:
fb:44:0e:d7:8e:ef:03:5f:1a:fe:5b:79:ff:75:46:
d1:27:c4:54:be:db:23:80:16:5a:0d:2f:97:2c:6a:
46:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4A:38:B1:CA:8E:94:DF:36:B9:3E:CE:D0:18:EB:AC:6D:BE:F0:49
X509v3 Authority Key Identifier:
keyid:DD:54:A1:06:C1:99:F3:53:3E:56:B8:AD:BC:FA:4B:1A:C3:E6:90:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VShBsGZ81M-VritvPpLGsPmkJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/c8f26c-b262-487f-ad47-341af1f0769b/1/3VShBsGZ81M-VritvPpLGsPmkJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:68:20:51:a1:44:79:d9:e9:f2:e9:90:8d:22:bd:24:8c:fa:
f1:88:8e:54:8b:18:e1:fe:47:fd:73:70:d5:9e:5e:86:39:c3:
e9:55:f5:ef:b5:01:d4:b5:1f:74:50:33:5f:b4:fd:7a:04:5c:
ad:95:fd:ea:30:00:fb:cd:5f:65:72:03:ab:f9:55:a3:a1:3a:
82:7e:9a:d8:8d:4f:19:04:0f:b3:2d:99:74:3f:df:3e:4f:5c:
31:41:88:62:c1:1e:f1:16:d2:51:8f:5e:dd:ea:9c:91:50:74:
82:15:33:ed:82:65:a3:d5:08:31:e1:9b:19:de:ca:a9:d1:16:
01:69:33:d0:ea:ce:4f:e0:1b:d4:fe:68:82:48:ce:4e:85:08:
2f:69:45:02:56:17:f9:e5:c3:91:84:ea:3e:0c:bc:85:58:19:
30:d5:de:85:e2:49:d0:9b:69:9a:77:4e:fa:56:db:70:18:3f:
ed:5d:39:d5:c0:eb:cf:18:bd:92:9b:b9:24:ec:f2:12:35:64:
f4:33:03:c8:49:64:3f:bd:86:a0:83:43:be:f7:59:e1:d8:da:
9d:c8:be:9c:01:a3:b3:4b:94:e9:39:5a:b1:d5:12:c5:b0:f9:
4e:7f:3d:39:5b:2e:d8:dd:cd:58:b6:4c:be:08:f1:d7:cd:d0:
6a:29:96:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/p4k8RvGiZIK4c1CTzU4TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNTRhMTA2YzE5OWYzNTMzZTU2YjhhZGJjZmE0YjFhYzNl
NjkwOWYwHhcNMjYxMDE1MTMwMTQ2WhcNMjYxMDE2MTMwMTQ2WjAzMTEwLwYDVQQD
Eyg2MzRhMzhiMWNhOGU5NGRmMzZiOTNlY2VkMDE4ZWJhYzZkYmVmMDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL8FdGlhMezhyrTj/Fsh2DqvFD3V
uhb4l2UyLf7JmlCecVVS1KvIvMMfYQwMv3EoHqdobJXDhhBL9542ru8+FaiXie2m
/4sdWE3mlQdWjXR0t9MYF85bd+UeOWPDSRAihIX2lUordBRI/UrdkTP8L7+ZUx8p
2GKYBjM50iPg7YsucFyrSE93ciOXG11EQzopDUKJ2dTazIniXt9iLAULxHOdCHtp
TIFo747AWypVKLxeuvncC3SyQz+7OZtGDr7qhk/hW1Nz2KQfSOeBp1BYyXfOkUNT
4zktkZeOX2+r9gX7RA7Xju8DXxr+W3n/dUbRJ8RUvtsjgBZaDS+XLGpGUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNKOLHKjpTfNrk+ztAY66xtvvBJMB8GA1UdIwQY
MBaAFN1UoQbBmfNTPla4rbz6SxrD5pCfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1ZTaEJzR1o4MU0tVnJpdHZQcExHc1Bta0o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jOGYyNmMtYjI2Mi00ODdmLWFkNDct
MzQxYWYxZjA3NjliLzEvM1ZTaEJzR1o4MU0tVnJpdHZQcExHc1Bta0o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9jOGYyNmMtYjI2Mi00ODdmLWFkNDctMzQxYWYxZjA3Njli
LzEvM1ZTaEJzR1o4MU0tVnJpdHZQcExHc1Bta0o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdmggUaFE
ednp8umQjSK9JIz68YiOVIsY4f5H/XNw1Z5ehjnD6VX177UB1LUfdFAzX7T9egRc
rZX96jAA+81fZXIDq/lVo6E6gn6a2I1PGQQPsy2ZdD/fPk9cMUGIYsEe8RbSUY9e
3eqckVB0ghUz7YJlo9UIMeGbGd7KqdEWAWkz0OrOT+Ab1P5ogkjOToUIL2lFAlYX
+eXDkYTqPgy8hVgZMNXeheJJ0JtpmndO+lbbcBg/7V051cDrzxi9kpu5JOzyEjVk
9DMDyElkP72GoINDvvdZ4djanci+nAGjs0uU6TlasdUSxbD5Tn89OVsu2N3NWLZM
vgjx183QaimW+g==
-----END CERTIFICATE-----
Generated at Thu Oct 15 20:57:36 2026 by rpki-client