
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
File: 3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft (raw, json)
Hash identifier: GE8BBvgsIbDkamZ9RpijJcgL8c5yj3v1xJGCxw01ZMQ=
Subject key identifier: D7:14:7A:BC:78:B1:6B:A3:27:CE:94:64:04:6E:EC:17:19:81:4B:63
Authority key identifier: DD:2B:C5:40:3A:B3:53:D5:FC:25:E5:AA:DC:E0:93:2B:29:F4:17:6A
Certificate issuer: /CN=dd2bc5403ab353d5fc25e5aadce0932b29f4176a
Certificate serial: 01A06EA78FCEEB657EA775F4430A1EB1B9AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
Manifest number: 0326
Signing time: Fri 04 Sep 2026 23:01:10 +0000
Manifest this update: Fri 04 Sep 2026 23:01:10 +0000
Manifest next update: Sat 05 Sep 2026 23:01:10 +0000
Files and hashes: 1: 3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl (hash: bEd/8sW7kaorcfXM6u7ksEGA0uPi5QbsFz2U59ZAmHA=)
2: hitJJLRKZoeTjFy1UdVtOKCeU3E.roa (hash: P3W2mUUG6W+rjdD2ot4LgXNOj0ClkdXmzifsh0+3Km0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:a7:8f:ce:eb:65:7e:a7:75:f4:43:0a:1e:b1:b9:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd2bc5403ab353d5fc25e5aadce0932b29f4176a
Validity
Not Before: Sep 4 23:01:10 2026 GMT
Not After : Sep 5 23:01:10 2026 GMT
Subject: CN=d7147abc78b16ba327ce9464046eec1719814b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:38:4c:40:c3:c9:d3:4e:5a:57:68:40:cf:38:
3a:f6:cd:bb:6d:ca:78:2c:40:75:a1:8a:62:4a:9b:
ee:20:0c:13:ed:9a:88:20:d1:1b:d9:4a:d7:cd:92:
2c:44:b3:96:8d:b7:14:76:f5:8d:34:0d:e4:2c:df:
3d:22:11:13:fd:5c:96:70:75:a6:35:59:1d:c6:a8:
e5:16:c2:eb:b4:2f:5a:bd:05:06:0d:a3:aa:f4:b7:
d4:72:c5:d4:02:3c:17:36:f5:76:cf:64:43:67:23:
8d:4c:93:f1:96:4d:9c:97:e6:13:4d:21:b2:15:2a:
83:70:70:c6:ed:3f:e6:95:1e:de:62:39:a3:be:54:
34:b8:39:ec:3a:7d:18:e3:89:ee:41:c8:dd:e3:65:
9c:b9:52:25:2f:cc:4b:58:82:76:cf:35:2a:84:7d:
b3:4e:57:cb:5d:1b:ca:21:20:71:c2:38:a4:0d:75:
4c:bc:5f:94:f4:20:62:47:c0:c8:b0:92:6a:3a:c7:
69:8d:3c:d2:e0:5a:1b:54:b4:5f:d4:25:24:22:4c:
2e:56:9b:f8:b6:20:b2:35:19:a6:c0:32:6f:35:55:
80:0d:17:d2:a1:ef:2e:ce:10:d9:15:fb:30:f8:4e:
70:ac:37:9f:76:f1:61:29:9b:f4:38:3b:26:6e:ec:
d7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:14:7A:BC:78:B1:6B:A3:27:CE:94:64:04:6E:EC:17:19:81:4B:63
X509v3 Authority Key Identifier:
keyid:DD:2B:C5:40:3A:B3:53:D5:FC:25:E5:AA:DC:E0:93:2B:29:F4:17:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SvFQDqzU9X8JeWq3OCTKyn0F2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c25650-4727-4f88-8f21-c997ae6c5bd4/1/3SvFQDqzU9X8JeWq3OCTKyn0F2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d5:14:62:0d:d2:92:e9:dd:93:75:1e:87:d9:09:a5:e0:85:
62:d6:b7:48:db:3c:62:96:20:bb:53:3a:63:97:8b:26:71:19:
53:69:da:60:07:e1:6d:95:6e:ce:6b:c5:ed:6d:fe:80:7a:cf:
a3:98:5e:ad:6a:81:cf:5b:93:c1:75:66:4e:c6:82:43:a9:4a:
fe:d0:9d:6a:ff:a8:2a:5e:d1:f3:8c:be:cc:34:b4:00:ae:09:
03:d5:32:c5:49:6e:6d:29:da:05:9f:55:5c:84:68:36:86:e6:
b3:55:2c:bb:96:3f:0e:2d:e4:e8:a9:e3:36:60:61:69:4d:87:
1b:4f:88:e0:fa:5b:61:75:73:4b:83:eb:e5:38:94:10:c6:28:
7d:de:05:59:61:2c:fe:25:9d:8c:75:ed:97:4e:2d:17:98:9c:
b6:77:a2:ae:41:c8:b9:0d:a7:3e:de:48:50:4a:32:72:14:61:
b9:81:33:01:06:d5:9a:07:e7:5b:b2:50:ab:c3:74:7c:50:24:
f8:b1:af:92:ee:bd:0e:43:e6:96:fc:92:2a:3b:c6:08:b4:32:
3c:07:d6:3e:60:ca:db:72:6f:d6:d3:d5:4c:ac:2d:70:49:7b:
48:13:55:c8:95:66:1a:0f:de:10:da:e7:f2:74:d8:73:78:15:
76:86:c6:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBup4/O62V+p3X0QwoesbmrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMmJjNTQwM2FiMzUzZDVmYzI1ZTVhYWRjZTA5MzJiMjlm
NDE3NmEwHhcNMjYwOTA0MjMwMTEwWhcNMjYwOTA1MjMwMTEwWjAzMTEwLwYDVQQD
EyhkNzE0N2FiYzc4YjE2YmEzMjdjZTk0NjQwNDZlZWMxNzE5ODE0YjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwThMQMPJ005aV2hAzzg69s27bcp4
LEB1oYpiSpvuIAwT7ZqIINEb2UrXzZIsRLOWjbcUdvWNNA3kLN89IhET/VyWcHWm
NVkdxqjlFsLrtC9avQUGDaOq9LfUcsXUAjwXNvV2z2RDZyONTJPxlk2cl+YTTSGy
FSqDcHDG7T/mlR7eYjmjvlQ0uDnsOn0Y44nuQcjd42WcuVIlL8xLWIJ2zzUqhH2z
TlfLXRvKISBxwjikDXVMvF+U9CBiR8DIsJJqOsdpjTzS4FobVLRf1CUkIkwuVpv4
tiCyNRmmwDJvNVWADRfSoe8uzhDZFfsw+E5wrDefdvFhKZv0ODsmbuzXCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcUerx4sWujJ86UZARu7BcZgUtjMB8GA1UdIwQY
MBaAFN0rxUA6s1PV/CXlqtzgkysp9BdqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1N2RlFEcXpVOVg4SmVXcTNPQ1RLeW4wRjJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9jMjU2NTAtNDcyNy00Zjg4LThmMjEt
Yzk5N2FlNmM1YmQ0LzEvM1N2RlFEcXpVOVg4SmVXcTNPQ1RLeW4wRjJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9jMjU2NTAtNDcyNy00Zjg4LThmMjEtYzk5N2FlNmM1YmQ0
LzEvM1N2RlFEcXpVOVg4SmVXcTNPQ1RLeW4wRjJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHdUUYg3S
kundk3Ueh9kJpeCFYta3SNs8YpYgu1M6Y5eLJnEZU2naYAfhbZVuzmvF7W3+gHrP
o5herWqBz1uTwXVmTsaCQ6lK/tCdav+oKl7R84y+zDS0AK4JA9UyxUlubSnaBZ9V
XIRoNobms1Usu5Y/Di3k6KnjNmBhaU2HG0+I4PpbYXVzS4Pr5TiUEMYofd4FWWEs
/iWdjHXtl04tF5ictneirkHIuQ2nPt5IUEoychRhuYEzAQbVmgfnW7JQq8N0fFAk
+LGvku69DkPmlvySKjvGCLQyPAfWPmDK23Jv1tPVTKwtcEl7SBNVyJVmGg/eENrn
8nTYc3gVdobGFw==
-----END CERTIFICATE-----
Generated at Sat Sep 5 01:58:37 2026 by rpki-client