Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
File: 3KRrH82StH9PVfrQOMlYE0Cp03A.mft (raw, json)
Hash identifier: mkRZG7ZH2oD8eD5kqGekMGAj95LkwGZtQWKRRBVtDSA=
Subject key identifier: 15:04:B3:F2:F1:8F:74:B6:C9:76:21:45:49:B1:D8:6A:A1:13:F2:91
Authority key identifier: DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
Certificate issuer: /CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Certificate serial: 019E30A969F792D7F17970DD5011AB08677B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
Manifest number: 191E
Signing time: Sat 16 May 2026 12:01:09 +0000
Manifest this update: Sat 16 May 2026 12:01:09 +0000
Manifest next update: Sun 17 May 2026 12:01:09 +0000
Files and hashes: 1: 3KRrH82StH9PVfrQOMlYE0Cp03A.crl (hash: cBuydgqTPE1lVnyrQGASl2x7RynqmoiDIxgkoP1gQLU=)
2: VfPqQIUYDVEcRMuY0y_1WkG7tNM.roa (hash: jXhdAhn6nzRP7djqjR0wEfaKlgEOeT24wYK6k5lvQMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:69:f7:92:d7:f1:79:70:dd:50:11:ab:08:67:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Validity
Not Before: May 16 12:01:09 2026 GMT
Not After : May 17 12:01:09 2026 GMT
Subject: CN=1504b3f2f18f74b6c976214549b1d86aa113f291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:a5:b9:f2:6e:70:03:8d:08:05:39:28:c9:a2:
7a:a1:db:7c:80:fe:6b:b8:a2:4e:c1:c0:f8:6e:03:
ef:82:71:13:09:b3:bf:69:e3:e6:ac:eb:66:bc:34:
19:e1:b3:8c:1b:ba:6c:b5:ab:ff:9d:52:37:5d:aa:
12:f1:38:b3:84:7e:72:0a:3d:03:70:0b:0e:06:26:
01:c1:5a:5e:23:22:3c:71:42:7d:13:ea:ef:9f:57:
9c:3a:b3:d6:cf:7a:6c:2a:61:a3:42:fb:9a:22:9b:
48:d5:30:fb:c1:da:67:ae:b0:6d:9a:1f:df:17:00:
05:6b:0b:eb:57:33:a8:aa:ec:b2:12:ac:51:5a:90:
6f:5e:a6:de:80:95:7e:86:3c:91:5c:0c:11:bd:8e:
5c:b2:93:25:a7:d9:86:58:94:71:5c:d9:e2:4b:2c:
bd:96:8a:88:22:0a:4a:94:0f:60:b5:10:a5:90:d3:
48:f6:7e:66:12:34:ad:1f:c2:f1:96:68:a2:9b:c2:
86:a7:da:3a:b8:8f:b7:cf:bb:01:8b:da:88:a7:98:
a7:32:c7:bb:14:7f:ea:91:8b:e6:1d:04:22:c4:f0:
5f:51:bf:c2:96:a2:9a:67:92:75:df:90:13:63:1a:
91:7f:86:b5:68:ec:1d:29:13:14:45:2c:2e:11:f7:
75:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:04:B3:F2:F1:8F:74:B6:C9:76:21:45:49:B1:D8:6A:A1:13:F2:91
X509v3 Authority Key Identifier:
keyid:DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:b9:62:60:64:d4:ed:a4:98:ad:76:c9:a6:38:ab:bb:15:26:
20:de:b5:3b:f6:27:04:3d:02:53:a0:ed:57:61:51:11:13:d0:
46:ea:52:47:23:d8:59:2d:d1:d4:f0:af:f7:1c:52:5a:e7:63:
f3:8e:68:b4:c1:23:6b:c7:10:04:d5:07:0b:d3:81:94:cd:4e:
e4:65:2f:8c:13:e6:55:cf:3a:fe:e3:6e:1f:66:1b:8b:69:23:
ef:55:fe:35:be:77:04:88:e8:37:a2:36:e7:bb:3f:ba:90:c1:
ef:ce:3d:ea:d7:0c:31:99:64:b4:4c:84:8e:4d:d8:64:7e:3a:
11:e3:08:28:a8:88:91:b6:4d:0a:f5:4e:e7:4a:3f:b3:ab:20:
b2:45:06:95:90:50:15:32:e6:4b:81:19:65:7f:38:2a:81:f4:
7b:38:b3:31:3a:1f:7a:20:c5:f8:d0:56:a5:57:5c:e0:fb:98:
c0:16:66:39:47:07:82:ba:4a:93:da:4d:6f:b3:6b:ae:de:7b:
54:a2:00:1c:61:f3:ae:44:8f:83:c9:4b:59:88:e2:81:0b:79:
a2:31:60:2c:f5:69:22:4b:24:ad:4d:ee:75:9b:97:53:6e:d2:
14:4a:51:95:32:54:b8:65:67:a6:2c:ac:f4:80:dd:70:81:e9:
13:2c:03:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wqWn3ktfxeXDdUBGrCGd7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYTQ2YjFmY2Q5MmI0N2Y0ZjU1ZmFkMDM4Yzk1ODEzNDBh
OWQzNzAwHhcNMjYwNTE2MTIwMTA5WhcNMjYwNTE3MTIwMTA5WjAzMTEwLwYDVQQD
EygxNTA0YjNmMmYxOGY3NGI2Yzk3NjIxNDU0OWIxZDg2YWExMTNmMjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9qW58m5wA40IBTkoyaJ6odt8gP5r
uKJOwcD4bgPvgnETCbO/aePmrOtmvDQZ4bOMG7pstav/nVI3XaoS8TizhH5yCj0D
cAsOBiYBwVpeIyI8cUJ9E+rvn1ecOrPWz3psKmGjQvuaIptI1TD7wdpnrrBtmh/f
FwAFawvrVzOoquyyEqxRWpBvXqbegJV+hjyRXAwRvY5cspMlp9mGWJRxXNniSyy9
loqIIgpKlA9gtRClkNNI9n5mEjStH8Lxlmiim8KGp9o6uI+3z7sBi9qIp5inMse7
FH/qkYvmHQQixPBfUb/ClqKaZ5J135ATYxqRf4a1aOwdKRMURSwuEfd1XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUEs/Lxj3S2yXYhRUmx2GqhE/KRMB8GA1UdIwQY
MBaAFNykax/NkrR/T1X60DjJWBNAqdNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0tSckg4MlN0SDlQVmZyUU9NbFlFMENwMDNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS85MGFiOGUtZTU3My00MWM0LWExYmIt
YzZkMmI4ZDFmNTY2LzEvM0tSckg4MlN0SDlQVmZyUU9NbFlFMENwMDNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS85MGFiOGUtZTU3My00MWM0LWExYmItYzZkMmI4ZDFmNTY2
LzEvM0tSckg4MlN0SDlQVmZyUU9NbFlFMENwMDNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw7liYGTU
7aSYrXbJpjiruxUmIN61O/YnBD0CU6DtV2FRERPQRupSRyPYWS3R1PCv9xxSWudj
845otMEja8cQBNUHC9OBlM1O5GUvjBPmVc86/uNuH2Ybi2kj71X+Nb53BIjoN6I2
57s/upDB78496tcMMZlktEyEjk3YZH46EeMIKKiIkbZNCvVO50o/s6sgskUGlZBQ
FTLmS4EZZX84KoH0ezizMTofeiDF+NBWpVdc4PuYwBZmOUcHgrpKk9pNb7Nrrt57
VKIAHGHzrkSPg8lLWYjigQt5ojFgLPVpIkskrU3udZuXU27SFEpRlTJUuGVnpiys
9IDdcIHpEywD8g==
-----END CERTIFICATE-----
Generated at Sat May 16 19:30:00 2026 by rpki-client