Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/0a86fc-de08-4234-a5c4-11650cdb9c91/1/3mshhKwi402MRNprhFSbunH9VT0.mft
File: 3mshhKwi402MRNprhFSbunH9VT0.mft (raw, json)
Hash identifier: ivBNgCCr0cINo0OtnE/2jKnBEPrg2br3JfOHXQmR2YY=
Subject key identifier: 16:BA:3D:A4:44:67:78:75:A6:CC:87:87:9E:48:19:98:6B:61:96:B5
Authority key identifier: DE:6B:21:84:AC:22:E3:4D:8C:44:DA:6B:84:54:9B:BA:71:FD:55:3D
Certificate issuer: /CN=de6b2184ac22e34d8c44da6b84549bba71fd553d
Certificate serial: 01A0404DDCDFA76C0B5B98341E781626E648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mshhKwi402MRNprhFSbunH9VT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0a86fc-de08-4234-a5c4-11650cdb9c91/1/3mshhKwi402MRNprhFSbunH9VT0.mft
Manifest number: 034B
Signing time: Wed 26 Aug 2026 23:00:39 +0000
Manifest this update: Wed 26 Aug 2026 23:00:39 +0000
Manifest next update: Thu 27 Aug 2026 23:00:39 +0000
Files and hashes: 1: 3mshhKwi402MRNprhFSbunH9VT0.crl (hash: L0jEgzuxeG1+r6vHmQKdG1r0/bNxZlBS4CLdXtIwC7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0a86fc-de08-4234-a5c4-11650cdb9c91/1/3mshhKwi402MRNprhFSbunH9VT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0a86fc-de08-4234-a5c4-11650cdb9c91/1/3mshhKwi402MRNprhFSbunH9VT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mshhKwi402MRNprhFSbunH9VT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4d:dc:df:a7:6c:0b:5b:98:34:1e:78:16:26:e6:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6b2184ac22e34d8c44da6b84549bba71fd553d
Validity
Not Before: Aug 26 23:00:39 2026 GMT
Not After : Aug 27 23:00:39 2026 GMT
Subject: CN=16ba3da444677875a6cc87879e4819986b6196b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6c:d3:49:75:c0:81:29:85:82:90:e3:fa:4c:
f0:6b:d6:fa:ac:e4:75:e2:3c:ea:f5:82:f7:d3:d8:
3a:53:7d:3d:66:c9:f6:24:24:05:df:80:07:b0:c5:
64:15:f9:c8:52:dc:4d:5c:af:c1:a9:7a:7e:41:60:
6c:2d:49:8a:5d:cd:ac:46:b7:df:de:75:67:68:2b:
70:f7:2c:10:46:08:48:6c:71:96:dd:fa:6d:1d:a5:
60:0d:8e:b4:8b:65:a7:af:b2:d0:08:ce:45:77:d4:
50:14:c2:02:bd:70:80:b8:a1:46:fa:ad:a3:df:05:
fa:e3:23:bc:84:39:ce:75:00:97:fa:9c:e0:51:9d:
8f:b0:15:bc:be:46:c1:e2:21:45:f1:1e:5c:69:db:
f5:b5:55:89:be:38:3a:c4:2d:a7:25:8c:4f:78:a8:
b6:92:80:d0:a8:3c:ee:e8:69:de:2f:ed:c8:cb:67:
23:df:7b:88:64:ce:ce:e2:ed:6a:c0:a6:db:db:fe:
a4:a1:0b:fc:17:19:1c:3a:10:80:23:14:f5:86:d6:
3b:5f:36:75:65:0e:49:97:a0:e0:38:5e:c7:2e:3b:
b2:9b:ca:1b:92:7b:db:5a:a0:c5:b8:4e:69:99:43:
ff:f1:aa:36:d6:bc:8c:39:46:79:40:21:d7:b5:98:
9a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BA:3D:A4:44:67:78:75:A6:CC:87:87:9E:48:19:98:6B:61:96:B5
X509v3 Authority Key Identifier:
keyid:DE:6B:21:84:AC:22:E3:4D:8C:44:DA:6B:84:54:9B:BA:71:FD:55:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mshhKwi402MRNprhFSbunH9VT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0a86fc-de08-4234-a5c4-11650cdb9c91/1/3mshhKwi402MRNprhFSbunH9VT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0a86fc-de08-4234-a5c4-11650cdb9c91/1/3mshhKwi402MRNprhFSbunH9VT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:cc:f0:d4:8b:ca:b7:3d:61:42:37:26:91:a2:58:e2:22:e8:
fa:22:ce:b5:7f:fb:4b:88:b9:31:2d:3e:84:ba:1d:81:83:ab:
b0:3d:c0:35:54:6d:a6:90:3f:60:52:7f:cb:5a:dd:c2:75:88:
c0:ec:b2:b6:25:22:2a:01:7e:8b:30:34:6c:f1:ef:0f:91:9a:
5b:55:ac:7d:27:fe:c9:a7:cd:db:24:52:e0:fa:6d:20:21:cb:
7e:58:88:03:20:75:3a:ce:5c:0b:8e:55:0f:04:01:fc:be:b1:
6f:05:39:f4:21:ed:50:df:3c:36:05:ea:a1:76:df:b1:36:7b:
98:10:46:32:73:e1:60:3f:af:b6:f0:41:f7:66:a6:6a:a6:7c:
45:42:69:09:49:c2:43:15:47:8d:d1:62:b7:46:11:a3:44:ba:
7b:87:d3:74:16:77:dd:d8:43:6b:80:4a:cd:f2:a8:24:b0:3b:
cd:a8:bd:d2:79:83:6f:33:d0:83:75:4c:a3:c0:41:b7:4f:53:
87:7e:53:a0:8a:5d:74:cc:6d:24:b8:c7:1f:7d:fe:77:30:43:
c8:29:8b:2d:61:36:bd:46:30:70:ae:8e:51:42:ae:fc:94:e7:
88:76:bd:bb:e1:31:b3:60:d4:96:3c:41:ee:c3:a0:d2:ca:03:
9d:b6:1c:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBATdzfp2wLW5g0HngWJuZIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNmIyMTg0YWMyMmUzNGQ4YzQ0ZGE2Yjg0NTQ5YmJhNzFm
ZDU1M2QwHhcNMjYwODI2MjMwMDM5WhcNMjYwODI3MjMwMDM5WjAzMTEwLwYDVQQD
EygxNmJhM2RhNDQ0Njc3ODc1YTZjYzg3ODc5ZTQ4MTk5ODZiNjE5NmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWzTSXXAgSmFgpDj+kzwa9b6rOR1
4jzq9YL309g6U309Zsn2JCQF34AHsMVkFfnIUtxNXK/BqXp+QWBsLUmKXc2sRrff
3nVnaCtw9ywQRghIbHGW3fptHaVgDY60i2Wnr7LQCM5Fd9RQFMICvXCAuKFG+q2j
3wX64yO8hDnOdQCX+pzgUZ2PsBW8vkbB4iFF8R5cadv1tVWJvjg6xC2nJYxPeKi2
koDQqDzu6GneL+3Iy2cj33uIZM7O4u1qwKbb2/6koQv8FxkcOhCAIxT1htY7XzZ1
ZQ5Jl6DgOF7HLjuym8obknvbWqDFuE5pmUP/8ao21ryMOUZ5QCHXtZiawQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBa6PaREZ3h1psyHh55IGZhrYZa1MB8GA1UdIwQY
MBaAFN5rIYSsIuNNjETaa4RUm7px/VU9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM21zaGhLd2k0MDJNUk5wcmhGU2J1bkg5VlQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8wYTg2ZmMtZGUwOC00MjM0LWE1YzQt
MTE2NTBjZGI5YzkxLzEvM21zaGhLd2k0MDJNUk5wcmhGU2J1bkg5VlQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS8wYTg2ZmMtZGUwOC00MjM0LWE1YzQtMTE2NTBjZGI5Yzkx
LzEvM21zaGhLd2k0MDJNUk5wcmhGU2J1bkg5VlQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgMzw1IvK
tz1hQjcmkaJY4iLo+iLOtX/7S4i5MS0+hLodgYOrsD3ANVRtppA/YFJ/y1rdwnWI
wOyytiUiKgF+izA0bPHvD5GaW1WsfSf+yafN2yRS4PptICHLfliIAyB1Os5cC45V
DwQB/L6xbwU59CHtUN88NgXqoXbfsTZ7mBBGMnPhYD+vtvBB92amaqZ8RUJpCUnC
QxVHjdFit0YRo0S6e4fTdBZ33dhDa4BKzfKoJLA7zai90nmDbzPQg3VMo8BBt09T
h35ToIpddMxtJLjHH33+dzBDyCmLLWE2vUYwcK6OUUKu/JTniHa9u+Exs2DUljxB
7sOg0soDnbYcbQ==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:52:20 2026 by rpki-client