Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
File: II3jrRjdCuFDYtDoTewEPTecwkI.mft (raw, json)
Hash identifier: H84XzFswYBwANV/yo6ddNQ4F96+POSKbzziVeK5Me1Y=
Subject key identifier: 1D:04:DF:9D:57:A8:12:21:1C:50:B3:CD:05:F2:F4:D3:CB:51:E2:B3
Authority key identifier: 20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
Certificate issuer: /CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Certificate serial: 01A117F47C9678932761B90F9E18BFF0E59C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
Manifest number: 1A93
Signing time: Wed 07 Oct 2026 20:01:00 +0000
Manifest this update: Wed 07 Oct 2026 20:01:00 +0000
Manifest next update: Thu 08 Oct 2026 20:01:00 +0000
Files and hashes: 1: 7VJHWleGjQ3MA6xdUVWDIgaYvkU.roa (hash: +MmvrOl97e3DA2vv+SK8o06jDjKb06tuUhtauO+J0DA=)
2: II3jrRjdCuFDYtDoTewEPTecwkI.crl (hash: F3TpFI9n1LPB8WT/2X/uj7gVx9OnBIFdNTiW4YXBczk=)
3: e73gsHaWTejzTyfXW5UdzDUTXQs.roa (hash: 9j92RNoJBabv7foYLIaPsDGRKKARMwRj5sIk41buBpE=)
4: nExWLodTy66s6nOpw-IuXiduwOc.roa (hash: xQ9/3XOQzACu7Vie8ibe6dTF70DY7qx3P6HKsR8oJRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:f4:7c:96:78:93:27:61:b9:0f:9e:18:bf:f0:e5:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Validity
Not Before: Oct 7 20:01:00 2026 GMT
Not After : Oct 8 20:01:00 2026 GMT
Subject: CN=1d04df9d57a812211c50b3cd05f2f4d3cb51e2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:db:14:cc:30:9d:63:81:a5:04:85:1e:a9:7f:
21:34:f7:66:d4:ec:a3:93:7e:ef:25:f0:71:d7:42:
cc:96:d1:0a:20:6c:b2:e5:ff:02:bf:30:d7:ba:84:
55:de:43:ee:bd:e4:dc:74:1e:dc:db:58:ee:e1:19:
88:8b:32:c2:9b:13:a0:e5:0e:26:e8:69:22:c9:27:
5d:5e:7c:b6:a3:cf:77:5c:dd:6b:3b:6c:ef:e6:0e:
1b:cf:94:de:ce:56:6b:3e:32:26:fb:1b:4b:f1:a2:
6f:c1:3a:80:47:10:b8:94:5d:3f:04:11:87:d7:77:
d7:29:9a:3d:eb:c8:d2:ac:ed:20:35:b6:4e:cf:f3:
7a:79:c5:ec:ae:27:6e:82:34:a9:47:b0:1a:4e:c4:
24:29:75:6e:fc:04:3d:18:b5:c8:84:a8:f7:60:fe:
5d:46:79:e8:b1:c0:ad:eb:85:c6:96:1f:44:e6:04:
30:12:7d:eb:99:3b:95:7e:db:ff:6a:80:66:77:26:
de:d4:60:d9:e8:f1:86:61:10:67:b9:a9:57:d2:56:
ef:9b:3d:ff:ee:44:d5:a4:61:83:6e:6f:d8:30:65:
90:c4:11:98:78:ba:95:0e:3a:67:09:bb:5d:3c:93:
f9:18:a1:a6:2e:c5:25:62:50:38:89:e4:88:1b:e9:
ac:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:04:DF:9D:57:A8:12:21:1C:50:B3:CD:05:F2:F4:D3:CB:51:E2:B3
X509v3 Authority Key Identifier:
keyid:20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f6:e0:e1:2b:bb:e7:b5:82:b9:89:59:0a:90:fe:08:2b:2b:
42:19:ad:d9:68:dd:2e:74:5b:92:b8:67:97:7d:9b:b1:ec:8e:
92:f0:58:02:ed:e4:1e:ae:99:da:fb:d3:da:90:fc:cf:d3:21:
8b:92:5e:69:68:ac:b7:9c:87:93:cd:66:5f:69:36:d9:00:43:
12:94:db:24:73:5f:a4:be:c1:c3:77:c1:27:ab:3a:5a:e2:0d:
20:f1:0e:10:fa:a4:0b:47:2c:9f:dc:ea:60:76:5f:a5:69:2a:
25:cf:0b:e7:8a:42:d8:a0:d5:0a:fe:68:7e:bc:cb:6d:1d:63:
5b:fe:32:81:e4:5c:ca:83:dd:e1:f1:96:de:2d:5f:d5:27:06:
eb:e4:04:b5:b9:41:fd:c2:8d:4f:c8:db:cf:63:2e:e9:e2:5f:
26:3d:a6:a7:55:de:7d:58:4e:45:54:13:c6:09:d5:27:b1:a1:
cd:eb:c0:ed:2f:7a:5d:7c:a3:4d:02:7e:31:38:dd:bf:ed:8d:
f9:19:ce:13:fa:08:d4:c3:c7:d7:b2:ac:0a:49:09:1c:a6:84:
53:23:5e:ce:ba:f4:53:21:b8:8e:33:0c:10:93:c7:d1:03:39:
ce:dd:e5:ba:96:05:8a:d4:4f:cb:a7:94:e4:d7:6e:34:3e:07:
37:28:5b:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEX9HyWeJMnYbkPnhi/8OWcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwOGRlM2FkMThkZDBhZTE0MzYyZDBlODRkZWMwNDNkMzc5
Y2MyNDIwHhcNMjYxMDA3MjAwMTAwWhcNMjYxMDA4MjAwMTAwWjAzMTEwLwYDVQQD
EygxZDA0ZGY5ZDU3YTgxMjIxMWM1MGIzY2QwNWYyZjRkM2NiNTFlMmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdsUzDCdY4GlBIUeqX8hNPdm1Oyj
k37vJfBx10LMltEKIGyy5f8CvzDXuoRV3kPuveTcdB7c21ju4RmIizLCmxOg5Q4m
6GkiySddXny2o893XN1rO2zv5g4bz5TezlZrPjIm+xtL8aJvwTqARxC4lF0/BBGH
13fXKZo968jSrO0gNbZOz/N6ecXsridugjSpR7AaTsQkKXVu/AQ9GLXIhKj3YP5d
RnnoscCt64XGlh9E5gQwEn3rmTuVftv/aoBmdybe1GDZ6PGGYRBnualX0lbvmz3/
7kTVpGGDbm/YMGWQxBGYeLqVDjpnCbtdPJP5GKGmLsUlYlA4ieSIG+ms1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0E351XqBIhHFCzzQXy9NPLUeKzMB8GA1UdIwQY
MBaAFCCN460Y3QrhQ2LQ6E3sBD03nMJCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUkzanJSamRDdUZEWXREb1Rld0VQVGVjd2tJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82MTA5NGEtOTQ2OS00Mjk5LTg5ZjIt
YmRmNmU0Mjk0YzJlLzEvSUkzanJSamRDdUZEWXREb1Rld0VQVGVjd2tJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS82MTA5NGEtOTQ2OS00Mjk5LTg5ZjItYmRmNmU0Mjk0YzJl
LzEvSUkzanJSamRDdUZEWXREb1Rld0VQVGVjd2tJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/bg4Su7
57WCuYlZCpD+CCsrQhmt2WjdLnRbkrhnl32bseyOkvBYAu3kHq6Z2vvT2pD8z9Mh
i5JeaWist5yHk81mX2k22QBDEpTbJHNfpL7Bw3fBJ6s6WuINIPEOEPqkC0csn9zq
YHZfpWkqJc8L54pC2KDVCv5ofrzLbR1jW/4ygeRcyoPd4fGW3i1f1ScG6+QEtblB
/cKNT8jbz2Mu6eJfJj2mp1XefVhORVQTxgnVJ7GhzevA7S96XXyjTQJ+MTjdv+2N
+RnOE/oI1MPH17KsCkkJHKaEUyNezrr0UyG4jjMMEJPH0QM5zt3lupYFitRPy6eU
5NduND4HNyhbxA==
-----END CERTIFICATE-----
Generated at Thu Oct 8 03:56:59 2026 by rpki-client