Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
File: 3EtKGKfhUaN9peTM2qnn29iOnZM.mft (raw, json)
Hash identifier: KqCAKOkuTR70kYFSo/KpbiksdbDWiVswOmc6n0dGCHA=
Subject key identifier: 60:E8:79:3F:D6:93:E4:4C:AC:57:8C:97:56:11:14:44:1E:C5:9F:55
Authority key identifier: DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93
Certificate issuer: /CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93
Certificate serial: 019DCE999F0EBE03991577DFB7E8205F5D60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
Manifest number: 0886
Signing time: Mon 27 Apr 2026 11:01:07 +0000
Manifest this update: Mon 27 Apr 2026 11:01:07 +0000
Manifest next update: Tue 28 Apr 2026 11:01:07 +0000
Files and hashes: 1: 3EtKGKfhUaN9peTM2qnn29iOnZM.crl (hash: fLQmlm+eNTfOio+KtqY7GxKilDrW9oaoZeoATlSItE8=)
2: 43ymdr3K3iMs6v29pEnuXTGVVTU.roa (hash: T6YtebG+rID15qUGedeSqtw1F5/D7XsYg2ZcZB9ldO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:9f:0e:be:03:99:15:77:df:b7:e8:20:5f:5d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93
Validity
Not Before: Apr 27 11:01:07 2026 GMT
Not After : Apr 28 11:01:07 2026 GMT
Subject: CN=60e8793fd693e44cac578c97561114441ec59f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ac:a0:b0:cd:f8:36:d9:95:81:f5:8f:f3:ff:
e1:66:80:a1:55:6d:f2:c8:1f:c7:b5:10:70:46:44:
f8:dc:cb:17:66:6b:fa:8c:d5:ba:64:ea:84:1f:23:
e4:48:a9:ca:93:34:a9:e6:e5:c1:19:19:f0:ec:f3:
ec:07:9c:0b:33:83:a3:18:0e:cf:97:63:d8:b9:55:
c0:ea:12:46:15:69:de:73:95:74:38:e9:20:3d:06:
e3:b4:68:e8:eb:75:dc:18:87:60:a8:f4:06:82:7d:
e7:9c:b7:23:94:a0:ae:69:7d:ae:c9:30:04:24:64:
a5:8e:2d:d2:61:10:a6:df:c1:e6:a1:23:02:2b:ee:
55:af:84:e6:09:7a:e5:a7:74:30:5e:5c:e1:a7:f1:
db:ee:d2:c6:ab:ba:f2:d3:95:34:47:68:23:77:9e:
6e:e3:4b:be:21:82:72:79:d8:5b:79:d8:4e:51:34:
44:21:bb:cd:53:91:76:ce:82:bf:d3:e4:0e:d3:9d:
5d:15:64:3d:3c:82:24:02:e1:1a:c6:fd:e0:ab:cb:
5d:1e:7a:de:21:00:d4:36:e6:9e:67:1c:02:69:38:
16:66:85:b0:e2:fd:b7:c4:f7:a7:6d:54:3f:b5:7e:
95:39:31:ba:6c:40:eb:73:d4:a3:5a:46:58:91:d9:
f4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E8:79:3F:D6:93:E4:4C:AC:57:8C:97:56:11:14:44:1E:C5:9F:55
X509v3 Authority Key Identifier:
keyid:DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:6a:70:61:f1:89:f1:d4:1e:74:a9:9c:7b:63:6b:ca:00:31:
86:1b:37:64:b3:17:6b:47:63:d1:28:cd:32:e5:3c:28:8a:8c:
c4:85:f1:92:43:8c:49:ab:45:50:51:68:4a:87:5a:8e:87:e1:
4e:a1:d2:a0:2f:56:8c:9e:89:1e:8b:15:28:ba:8d:0d:88:1e:
d4:95:3e:81:1e:81:89:ae:42:6f:3f:57:5d:b0:55:29:e9:f8:
7c:64:e2:19:ac:90:2e:58:f1:d2:a2:8c:f5:bb:09:1f:9c:b1:
2f:dd:68:5d:8c:02:d0:8c:e1:3f:c9:6c:72:b0:95:af:e9:fd:
50:f9:dd:8f:8d:7f:98:44:1b:40:9d:3c:63:d4:a9:f9:e6:a0:
e6:63:97:34:68:74:8a:2d:70:14:e9:65:25:90:a0:e3:21:dd:
ee:a5:9d:8f:08:f8:83:50:eb:8e:2d:26:3b:7a:63:49:7c:92:
3d:63:fa:52:79:cf:0f:75:35:08:0b:d8:94:7d:4f:34:df:51:
c6:27:bd:ef:70:9d:d4:da:2e:63:66:1b:9b:c0:db:97:75:74:
a3:e6:15:77:b3:3a:81:94:ea:00:26:0f:e9:47:7e:02:eb:7e:
25:c0:2f:44:7e:da:1f:cc:82:b1:ef:29:08:38:9b:d3:fb:6f:
b4:42:af:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3OmZ8OvgOZFXfft+ggX11gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNGI0YTE4YTdlMTUxYTM3ZGE1ZTRjY2RhYTllN2RiZDg4
ZTlkOTMwHhcNMjYwNDI3MTEwMTA3WhcNMjYwNDI4MTEwMTA3WjAzMTEwLwYDVQQD
Eyg2MGU4NzkzZmQ2OTNlNDRjYWM1NzhjOTc1NjExMTQ0NDFlYzU5ZjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06ygsM34NtmVgfWP8//hZoChVW3y
yB/HtRBwRkT43MsXZmv6jNW6ZOqEHyPkSKnKkzSp5uXBGRnw7PPsB5wLM4OjGA7P
l2PYuVXA6hJGFWnec5V0OOkgPQbjtGjo63XcGIdgqPQGgn3nnLcjlKCuaX2uyTAE
JGSlji3SYRCm38HmoSMCK+5Vr4TmCXrlp3QwXlzhp/Hb7tLGq7ry05U0R2gjd55u
40u+IYJyedhbedhOUTREIbvNU5F2zoK/0+QO051dFWQ9PIIkAuEaxv3gq8tdHnre
IQDUNuaeZxwCaTgWZoWw4v23xPenbVQ/tX6VOTG6bEDrc9SjWkZYkdn0XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDoeT/Wk+RMrFeMl1YRFEQexZ9VMB8GA1UdIwQY
MBaAFNxLShin4VGjfaXkzNqp59vYjp2TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0V0S0dLZmhVYU45cGVUTTJxbm4yOWlPblpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zNjFhMjEtMGI1YS00MzY3LTg0MWUt
M2RkMjkzZjc0ZTVlLzEvM0V0S0dLZmhVYU45cGVUTTJxbm4yOWlPblpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8zNjFhMjEtMGI1YS00MzY3LTg0MWUtM2RkMjkzZjc0ZTVl
LzEvM0V0S0dLZmhVYU45cGVUTTJxbm4yOWlPblpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg2pwYfGJ
8dQedKmce2NrygAxhhs3ZLMXa0dj0SjNMuU8KIqMxIXxkkOMSatFUFFoSodajofh
TqHSoC9WjJ6JHosVKLqNDYge1JU+gR6Bia5Cbz9XXbBVKen4fGTiGayQLljx0qKM
9bsJH5yxL91oXYwC0IzhP8lscrCVr+n9UPndj41/mEQbQJ08Y9Sp+eag5mOXNGh0
ii1wFOllJZCg4yHd7qWdjwj4g1Drji0mO3pjSXySPWP6UnnPD3U1CAvYlH1PNN9R
xie973Cd1NouY2Ybm8Dbl3V0o+YVd7M6gZTqACYP6Ud+Aut+JcAvRH7aH8yCse8p
CDib0/tvtEKvjw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 17:21:07 2026 by rpki-client