Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
File: iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft (raw, json)
Hash identifier: dPK907mdy/6eorpC6X/2UWfgGSVYqTjHbDpjvuTxtts=
Subject key identifier: B0:DC:6C:F5:D2:0A:DA:70:92:66:D1:2D:25:FB:47:58:10:40:B9:46
Authority key identifier: 88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82
Certificate issuer: /CN=887fa37371d7d4593ba290ef45669ea0de293782
Certificate serial: 01A137B68E1560B874D8250FBFE355F6F1BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
Manifest number: 0BC3
Signing time: Wed 14 Oct 2026 00:01:13 +0000
Manifest this update: Wed 14 Oct 2026 00:01:13 +0000
Manifest next update: Thu 15 Oct 2026 00:01:13 +0000
Files and hashes: 1: iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl (hash: 1JpK8FFXVgt4MQGJ03cHNEPPR2hQxRsJyOKoh1WBIsY=)
2: tFxvsrCqJ_cpCZ3yrGcf9YiNSVg.roa (hash: he9pYZaiWZg80bEFSYp2yYFaMXPObGV75JnhpVutWqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:b6:8e:15:60:b8:74:d8:25:0f:bf:e3:55:f6:f1:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887fa37371d7d4593ba290ef45669ea0de293782
Validity
Not Before: Oct 14 00:01:13 2026 GMT
Not After : Oct 15 00:01:13 2026 GMT
Subject: CN=b0dc6cf5d20ada709266d12d25fb47581040b946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0a:cf:98:d7:16:6c:61:df:fc:9f:9c:5d:54:
87:23:f6:0a:43:23:1a:f5:9e:6f:b3:a8:da:76:7e:
8b:d7:22:21:c5:98:7d:14:05:af:8f:90:fd:69:af:
06:10:45:89:12:98:08:90:fd:45:0a:5a:0a:6a:3a:
81:03:86:0b:a4:a3:76:b9:d0:28:bd:4b:e0:95:53:
18:10:71:68:2e:24:a6:56:39:dd:f2:42:9a:f9:54:
6d:3c:f3:2c:ee:36:e1:7e:d9:a3:17:50:75:cd:6d:
1a:cd:51:50:57:86:b4:b2:a2:14:94:9f:24:81:73:
e3:ef:05:a9:ff:71:9f:18:9c:f3:bb:08:80:ba:e9:
af:b4:c0:40:34:08:cf:f4:fb:7e:5a:0b:bd:30:d6:
48:b8:c4:23:5c:b7:ce:fc:c3:50:dc:b2:94:c2:c7:
0e:16:3c:7e:76:3a:40:94:61:df:ee:5f:95:35:2f:
f0:73:47:96:c2:f0:0b:a8:71:0f:a3:c4:6c:3f:4c:
94:e6:11:6e:d2:02:42:d7:29:12:d2:f6:8a:df:33:
ba:81:fe:ad:18:e8:61:a0:0a:1e:0d:23:73:96:64:
33:ae:74:c6:f0:b4:41:45:46:c0:51:d8:da:8d:e0:
4b:14:27:16:c5:46:f7:bf:88:ee:5e:f4:03:06:c7:
3a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DC:6C:F5:D2:0A:DA:70:92:66:D1:2D:25:FB:47:58:10:40:B9:46
X509v3 Authority Key Identifier:
keyid:88:7F:A3:73:71:D7:D4:59:3B:A2:90:EF:45:66:9E:A0:DE:29:37:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH-jc3HX1Fk7opDvRWaeoN4pN4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/09db8c-6df0-4cee-ae07-a1e24aaf610f/1/iH-jc3HX1Fk7opDvRWaeoN4pN4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ee:5e:04:73:b2:02:5a:46:8a:82:37:ec:46:47:d1:1a:df:
8e:4b:28:48:ef:b9:52:8e:00:3f:82:ad:d2:57:0c:8f:70:ec:
3c:20:22:c0:6f:fc:d5:f7:e6:7b:e9:3d:4a:c1:ff:7c:c1:af:
34:d8:50:a2:d6:ac:97:e1:60:fe:78:f1:a2:16:e8:8b:84:10:
48:51:91:ff:33:b3:62:95:b7:3b:5b:f8:89:19:15:10:34:7a:
38:4b:45:1f:a3:87:b9:a7:96:b6:f5:62:e7:cc:4b:bb:0c:bd:
74:ab:af:2d:5f:af:f1:44:06:fc:bb:14:73:17:22:4e:57:e9:
1d:5c:22:d5:fc:f2:81:e3:d8:39:42:63:80:b3:9f:2d:e9:3b:
78:c1:d4:9b:b7:62:07:83:76:c7:27:54:45:cf:50:c8:16:97:
51:a8:3d:ae:30:20:1e:c8:31:41:59:4f:ff:41:ee:13:00:bc:
ec:f4:cb:c7:32:1d:b3:87:62:df:af:89:98:88:91:06:62:81:
59:81:70:ab:e1:9f:bc:99:d4:46:0b:16:85:54:68:18:02:25:
eb:74:18:b8:e1:ee:d4:3f:87:9d:5a:a3:46:a9:37:d8:86:c2:
76:b2:7f:c0:b2:7d:d5:c7:12:80:02:c0:fc:90:b1:8a:69:4c:
8e:f7:cd:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE3to4VYLh02CUPv+NV9vG9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4N2ZhMzczNzFkN2Q0NTkzYmEyOTBlZjQ1NjY5ZWEwZGUy
OTM3ODIwHhcNMjYxMDE0MDAwMTEzWhcNMjYxMDE1MDAwMTEzWjAzMTEwLwYDVQQD
EyhiMGRjNmNmNWQyMGFkYTcwOTI2NmQxMmQyNWZiNDc1ODEwNDBiOTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgrPmNcWbGHf/J+cXVSHI/YKQyMa
9Z5vs6jadn6L1yIhxZh9FAWvj5D9aa8GEEWJEpgIkP1FCloKajqBA4YLpKN2udAo
vUvglVMYEHFoLiSmVjnd8kKa+VRtPPMs7jbhftmjF1B1zW0azVFQV4a0sqIUlJ8k
gXPj7wWp/3GfGJzzuwiAuumvtMBANAjP9Pt+Wgu9MNZIuMQjXLfO/MNQ3LKUwscO
Fjx+djpAlGHf7l+VNS/wc0eWwvALqHEPo8RsP0yU5hFu0gJC1ykS0vaK3zO6gf6t
GOhhoAoeDSNzlmQzrnTG8LRBRUbAUdjajeBLFCcWxUb3v4juXvQDBsc6CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLDcbPXSCtpwkmbRLSX7R1gQQLlGMB8GA1UdIwQY
MBaAFIh/o3Nx19RZO6KQ70VmnqDeKTeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUgtamMzSFgxRms3b3BEdlJXYWVvTjRwTjRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8wOWRiOGMtNmRmMC00Y2VlLWFlMDct
YTFlMjRhYWY2MTBmLzEvaUgtamMzSFgxRms3b3BEdlJXYWVvTjRwTjRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8wOWRiOGMtNmRmMC00Y2VlLWFlMDctYTFlMjRhYWY2MTBm
LzEvaUgtamMzSFgxRms3b3BEdlJXYWVvTjRwTjRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXe5eBHOy
AlpGioI37EZH0RrfjksoSO+5Uo4AP4Kt0lcMj3DsPCAiwG/81ffme+k9SsH/fMGv
NNhQotasl+Fg/njxohboi4QQSFGR/zOzYpW3O1v4iRkVEDR6OEtFH6OHuaeWtvVi
58xLuwy9dKuvLV+v8UQG/LsUcxciTlfpHVwi1fzygePYOUJjgLOfLek7eMHUm7di
B4N2xydURc9QyBaXUag9rjAgHsgxQVlP/0HuEwC87PTLxzIds4di36+JmIiRBmKB
WYFwq+GfvJnURgsWhVRoGAIl63QYuOHu1D+HnVqjRqk32IbCdrJ/wLJ91ccSgALA
/JCximlMjvfN9A==
-----END CERTIFICATE-----
Generated at Wed Oct 14 04:27:09 2026 by rpki-client