Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
File: 3YqroPRrqhRP2wk46RwU-UxhZQw.mft (raw, json)
Hash identifier: qM9WulK3SQyncrOrVTMmbVYcAnjlvAWAF9hAv6zTa4M=
Subject key identifier: 5B:8C:AF:13:16:E1:AD:F1:C9:34:54:D7:C0:B6:30:A8:36:A3:3D:08
Authority key identifier: DD:8A:AB:A0:F4:6B:AA:14:4F:DB:09:38:E9:1C:14:F9:4C:61:65:0C
Certificate issuer: /CN=dd8aaba0f46baa144fdb0938e91c14f94c61650c
Certificate serial: 01A0016F77CDAE9302D10B018619ECEDF819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
Manifest number: 1161
Signing time: Fri 14 Aug 2026 18:01:17 +0000
Manifest this update: Fri 14 Aug 2026 18:01:17 +0000
Manifest next update: Sat 15 Aug 2026 18:01:17 +0000
Files and hashes: 1: 3YqroPRrqhRP2wk46RwU-UxhZQw.crl (hash: ggQ+wGRQDNgOrCRyAdFTunWK/Gvl9VzV83S3XWY70W4=)
2: ipwbth9z_kAmFFiQQC69LkO_nQw.roa (hash: NejJVwemsx7RaWRb+qhN37iXZFwIo50zil0wLKpDlFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:77:cd:ae:93:02:d1:0b:01:86:19:ec:ed:f8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8aaba0f46baa144fdb0938e91c14f94c61650c
Validity
Not Before: Aug 14 18:01:17 2026 GMT
Not After : Aug 15 18:01:17 2026 GMT
Subject: CN=5b8caf1316e1adf1c93454d7c0b630a836a33d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:50:e2:bd:9f:07:99:30:47:8c:7c:7f:ae:97:
f4:82:8f:fe:d0:f9:fa:e2:78:47:49:f9:af:fa:c7:
9b:4f:57:e6:ca:cc:72:44:e7:f3:2d:72:00:5f:e8:
06:3e:45:56:07:7a:4a:ce:8a:bc:42:2a:9c:31:d9:
0f:25:61:4b:14:68:eb:52:b5:10:74:02:6a:35:b7:
06:82:c4:f0:7c:23:7c:c0:22:8f:ab:c6:21:a7:2b:
dc:50:37:ae:f4:92:8f:68:5b:95:95:9e:5e:74:6e:
91:f0:ce:44:5c:89:ff:f7:25:0c:b5:a9:34:7b:48:
94:a6:05:16:75:0a:a4:2c:39:a8:c3:a5:19:33:0f:
b1:c7:81:c9:70:5e:d6:ed:b4:ba:9e:e5:a0:27:84:
64:ad:23:ad:f2:dd:67:01:f4:8d:f9:bb:38:17:dc:
46:78:6e:ec:2d:bc:ba:af:40:33:36:3e:11:2f:ab:
82:be:f9:b2:7d:02:28:86:0c:e1:be:51:78:b9:27:
3b:01:30:a2:e1:bd:b0:8a:60:18:c5:04:97:4a:53:
dc:69:b1:54:25:2d:08:7b:4a:2a:da:75:09:bd:c6:
4b:ca:55:4c:fd:cd:82:dd:df:1e:b2:9a:6f:59:b8:
69:5e:39:5e:cc:93:67:7a:a5:3d:0a:ad:db:64:ce:
2a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8C:AF:13:16:E1:AD:F1:C9:34:54:D7:C0:B6:30:A8:36:A3:3D:08
X509v3 Authority Key Identifier:
keyid:DD:8A:AB:A0:F4:6B:AA:14:4F:DB:09:38:E9:1C:14:F9:4C:61:65:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:86:51:83:71:30:0d:51:8d:3f:e8:f3:75:4e:51:9e:ec:50:
d7:ce:f4:8d:bc:b1:ca:b7:4a:3e:54:09:64:28:66:45:c6:6f:
83:f6:83:4b:45:02:9e:a9:a0:5c:84:84:be:9d:3a:7f:44:16:
a1:ee:f8:2a:f7:0f:70:65:f0:bf:9d:95:a6:a0:7d:dd:93:ed:
1a:98:d4:cc:6a:65:ac:d7:27:d9:a8:34:8e:30:2f:70:de:8d:
5f:44:e3:01:f2:48:8a:a7:f5:87:22:25:ca:e4:79:93:76:28:
26:9d:34:dd:eb:cb:12:8a:8f:41:ed:d4:c0:93:5e:47:eb:4d:
0e:8f:92:43:33:63:c4:8b:5c:58:3f:0c:4c:c9:1a:ea:a4:50:
77:ea:10:9a:49:8c:7d:07:3f:2c:4f:88:66:97:6f:2a:85:ec:
5e:3e:2a:94:87:aa:98:de:b3:67:82:56:65:07:b2:11:8b:36:
68:96:3a:b9:3d:19:85:a6:f9:59:fc:5b:1d:9d:e5:e8:42:d0:
a6:bc:a7:82:f6:ba:52:10:d3:6d:c6:f0:c5:8f:e2:dd:59:27:
39:5d:0c:fd:e8:f4:08:54:f6:40:cc:4b:0e:f0:aa:91:70:d1:
9b:f4:a9:a9:27:76:3f:ef:46:8f:e0:e8:e3:24:1b:2e:69:88:
b0:dd:35:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABb3fNrpMC0QsBhhns7fgZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkOGFhYmEwZjQ2YmFhMTQ0ZmRiMDkzOGU5MWMxNGY5NGM2
MTY1MGMwHhcNMjYwODE0MTgwMTE3WhcNMjYwODE1MTgwMTE3WjAzMTEwLwYDVQQD
Eyg1YjhjYWYxMzE2ZTFhZGYxYzkzNDU0ZDdjMGI2MzBhODM2YTMzZDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VDivZ8HmTBHjHx/rpf0go/+0Pn6
4nhHSfmv+sebT1fmysxyROfzLXIAX+gGPkVWB3pKzoq8QiqcMdkPJWFLFGjrUrUQ
dAJqNbcGgsTwfCN8wCKPq8YhpyvcUDeu9JKPaFuVlZ5edG6R8M5EXIn/9yUMtak0
e0iUpgUWdQqkLDmow6UZMw+xx4HJcF7W7bS6nuWgJ4RkrSOt8t1nAfSN+bs4F9xG
eG7sLby6r0AzNj4RL6uCvvmyfQIohgzhvlF4uSc7ATCi4b2wimAYxQSXSlPcabFU
JS0Ie0oq2nUJvcZLylVM/c2C3d8esppvWbhpXjlezJNneqU9Cq3bZM4qxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuMrxMW4a3xyTRU18C2MKg2oz0IMB8GA1UdIwQY
MBaAFN2Kq6D0a6oUT9sJOOkcFPlMYWUMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1lxcm9QUnJxaFJQMndrNDZSd1UtVXhoWlF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xZmEyN2UtYWFmMC00YmUyLWE1MjIt
YTgwYzk0NzYxZDIzLzEvM1lxcm9QUnJxaFJQMndrNDZSd1UtVXhoWlF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8xZmEyN2UtYWFmMC00YmUyLWE1MjItYTgwYzk0NzYxZDIz
LzEvM1lxcm9QUnJxaFJQMndrNDZSd1UtVXhoWlF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZIZRg3Ew
DVGNP+jzdU5RnuxQ1870jbyxyrdKPlQJZChmRcZvg/aDS0UCnqmgXISEvp06f0QW
oe74KvcPcGXwv52VpqB93ZPtGpjUzGplrNcn2ag0jjAvcN6NX0TjAfJIiqf1hyIl
yuR5k3YoJp003evLEoqPQe3UwJNeR+tNDo+SQzNjxItcWD8MTMka6qRQd+oQmkmM
fQc/LE+IZpdvKoXsXj4qlIeqmN6zZ4JWZQeyEYs2aJY6uT0Zhab5WfxbHZ3l6ELQ
pryngva6UhDTbcbwxY/i3VknOV0M/ej0CFT2QMxLDvCqkXDRm/SpqSd2P+9Gj+Do
4yQbLmmIsN01Kw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:24 2026 by rpki-client