Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
File: II3jrRjdCuFDYtDoTewEPTecwkI.mft (raw, json)
Hash identifier: KkHGjpc/s0GdHH3aDxoPpUbYMXcP/XSc3B4wzfNnnzE=
Subject key identifier: 4D:78:B8:9F:FC:C7:EC:66:E4:B8:03:86:BF:E2:8B:23:4F:8F:EB:03
Authority key identifier: 20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
Certificate issuer: /CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Certificate serial: 01A11417C4B9DFC3E91570F0C15E5573A869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
Manifest number: 1A91
Signing time: Wed 07 Oct 2026 02:01:04 +0000
Manifest this update: Wed 07 Oct 2026 02:01:04 +0000
Manifest next update: Thu 08 Oct 2026 02:01:04 +0000
Files and hashes: 1: 7VJHWleGjQ3MA6xdUVWDIgaYvkU.roa (hash: +MmvrOl97e3DA2vv+SK8o06jDjKb06tuUhtauO+J0DA=)
2: II3jrRjdCuFDYtDoTewEPTecwkI.crl (hash: wAC0negyw8Suf7XwxvsBZwvRET4b18fHOmUBm+KP3dI=)
3: e73gsHaWTejzTyfXW5UdzDUTXQs.roa (hash: 9j92RNoJBabv7foYLIaPsDGRKKARMwRj5sIk41buBpE=)
4: nExWLodTy66s6nOpw-IuXiduwOc.roa (hash: xQ9/3XOQzACu7Vie8ibe6dTF70DY7qx3P6HKsR8oJRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:14:17:c4:b9:df:c3:e9:15:70:f0:c1:5e:55:73:a8:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Validity
Not Before: Oct 7 02:01:04 2026 GMT
Not After : Oct 8 02:01:04 2026 GMT
Subject: CN=4d78b89ffcc7ec66e4b80386bfe28b234f8feb03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:14:d7:2e:f4:09:71:9e:57:bf:88:a3:34:bd:
27:6a:f5:ee:41:c6:5c:6f:9a:26:ae:a3:2a:1e:33:
72:02:ad:f4:61:90:39:9c:75:98:aa:05:c7:8a:76:
9b:82:3a:b3:37:5f:61:16:7b:30:8b:de:b3:46:42:
44:43:44:91:bd:fa:90:36:c7:63:97:68:b9:ef:d4:
2b:82:00:b7:e5:c0:79:12:6d:79:95:ab:ac:04:93:
7d:21:c0:f5:f1:b2:7f:11:6b:63:fa:e6:87:01:c0:
d1:4f:4d:c4:44:75:9c:c6:5d:32:a9:f9:f5:6f:ff:
ff:66:ca:70:73:ef:f7:e5:83:7d:6d:fe:46:33:59:
d8:73:53:56:b7:78:10:bb:af:51:27:cc:ee:bc:83:
06:d9:52:3e:ac:fe:ce:40:91:d1:06:76:b7:39:4d:
7d:30:2f:b4:3c:39:85:e6:e3:a1:da:77:41:44:72:
f5:46:ab:8b:e7:34:b6:71:af:66:d4:ee:0c:6f:ef:
60:ce:6a:19:cf:62:82:0d:8c:3f:03:f4:55:70:96:
2d:71:86:f9:fd:8a:9e:5c:44:a0:7c:8e:85:50:4c:
8d:fb:db:6e:05:b7:d6:a3:4c:49:ac:35:8f:fd:d2:
12:2d:33:d4:1e:38:ac:d4:47:a6:c8:bf:7d:98:03:
31:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:78:B8:9F:FC:C7:EC:66:E4:B8:03:86:BF:E2:8B:23:4F:8F:EB:03
X509v3 Authority Key Identifier:
keyid:20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:41:c3:b8:6b:75:e2:d0:92:59:6b:7b:73:62:17:1f:f2:6e:
ea:14:0c:80:e4:2a:da:b2:e0:00:86:76:16:ac:7f:67:23:2d:
2e:d7:15:3e:ef:f0:71:15:10:81:7a:30:4b:ed:83:66:77:4a:
16:49:11:04:db:76:c9:84:5f:19:01:5d:04:d4:12:57:f7:3a:
0a:de:fc:71:20:99:0b:a8:4d:53:41:07:d6:41:80:34:7b:dc:
65:0d:80:94:cb:7d:ea:e3:2a:b9:95:3f:83:99:d9:ef:41:99:
8d:ba:79:bd:58:f2:f4:b1:11:68:3e:68:06:e3:cd:37:63:2e:
da:3f:28:20:1f:db:40:36:a5:3a:b6:2a:7a:19:ae:62:05:05:
2f:b8:93:f3:9d:1a:08:7e:28:11:12:2f:76:3c:cd:0a:68:13:
1b:5c:1b:be:bd:53:2d:3e:06:a0:9f:3a:81:1c:1a:39:c5:ae:
61:8b:de:ad:83:b7:ad:08:ff:c9:3c:6a:e7:18:6d:92:80:24:
11:62:b8:2c:d3:74:ce:01:41:73:ab:fa:c7:8d:f5:7f:1f:8f:
b4:f7:de:c7:42:ac:ed:24:84:79:61:c6:f0:66:f5:48:de:51:
fb:a3:22:53:12:14:44:22:52:ed:8e:4b:19:32:25:31:86:2a:
89:e4:33:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEUF8S538PpFXDwwV5Vc6hpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwOGRlM2FkMThkZDBhZTE0MzYyZDBlODRkZWMwNDNkMzc5
Y2MyNDIwHhcNMjYxMDA3MDIwMTA0WhcNMjYxMDA4MDIwMTA0WjAzMTEwLwYDVQQD
Eyg0ZDc4Yjg5ZmZjYzdlYzY2ZTRiODAzODZiZmUyOGIyMzRmOGZlYjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxTXLvQJcZ5Xv4ijNL0navXuQcZc
b5omrqMqHjNyAq30YZA5nHWYqgXHinabgjqzN19hFnswi96zRkJEQ0SRvfqQNsdj
l2i579QrggC35cB5Em15lausBJN9IcD18bJ/EWtj+uaHAcDRT03ERHWcxl0yqfn1
b///Zspwc+/35YN9bf5GM1nYc1NWt3gQu69RJ8zuvIMG2VI+rP7OQJHRBna3OU19
MC+0PDmF5uOh2ndBRHL1RquL5zS2ca9m1O4Mb+9gzmoZz2KCDYw/A/RVcJYtcYb5
/YqeXESgfI6FUEyN+9tuBbfWo0xJrDWP/dISLTPUHjis1EemyL99mAMxSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE14uJ/8x+xm5LgDhr/iiyNPj+sDMB8GA1UdIwQY
MBaAFCCN460Y3QrhQ2LQ6E3sBD03nMJCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUkzanJSamRDdUZEWXREb1Rld0VQVGVjd2tJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82MTA5NGEtOTQ2OS00Mjk5LTg5ZjIt
YmRmNmU0Mjk0YzJlLzEvSUkzanJSamRDdUZEWXREb1Rld0VQVGVjd2tJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS82MTA5NGEtOTQ2OS00Mjk5LTg5ZjItYmRmNmU0Mjk0YzJl
LzEvSUkzanJSamRDdUZEWXREb1Rld0VQVGVjd2tJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbkHDuGt1
4tCSWWt7c2IXH/Ju6hQMgOQq2rLgAIZ2Fqx/ZyMtLtcVPu/wcRUQgXowS+2DZndK
FkkRBNt2yYRfGQFdBNQSV/c6Ct78cSCZC6hNU0EH1kGANHvcZQ2AlMt96uMquZU/
g5nZ70GZjbp5vVjy9LERaD5oBuPNN2Mu2j8oIB/bQDalOrYqehmuYgUFL7iT850a
CH4oERIvdjzNCmgTG1wbvr1TLT4GoJ86gRwaOcWuYYverYO3rQj/yTxq5xhtkoAk
EWK4LNN0zgFBc6v6x431fx+PtPfex0Ks7SSEeWHG8Gb1SN5R+6MiUxIURCJS7Y5L
GTIlMYYqieQzRQ==
-----END CERTIFICATE-----
Generated at Wed Oct 7 13:08:02 2026 by rpki-client