Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
File: 3MpSIZb9CbrnOba9IyLl65DaT7k.mft (raw, json)
Hash identifier: 4SlDD/BwJ5XmnuXZqhmyRSfj7ggdRysaL9G1VXrj3Wk=
Subject key identifier: 9A:7A:0D:D1:D4:0B:39:04:64:42:5D:F7:F4:EB:52:E5:94:15:5F:07
Authority key identifier: DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
Certificate issuer: /CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Certificate serial: 01A0010155183518E3C8250425AEDD8F9845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
Manifest number: 13BD
Signing time: Fri 14 Aug 2026 16:00:59 +0000
Manifest this update: Fri 14 Aug 2026 16:00:59 +0000
Manifest next update: Sat 15 Aug 2026 16:00:59 +0000
Files and hashes: 1: 3MpSIZb9CbrnOba9IyLl65DaT7k.crl (hash: qZeeP15S59/uuF6pYswKqa4Ag7sXO3esOR67CHr/D58=)
2: cIxKBh6oU9S_NcB8Ln8qgQPRqMc.roa (hash: qT7a6QcaDtE4QIrrmB5EqTQOJdhXraa8fLtpECGlH+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:55:18:35:18:e3:c8:25:04:25:ae:dd:8f:98:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Validity
Not Before: Aug 14 16:00:59 2026 GMT
Not After : Aug 15 16:00:59 2026 GMT
Subject: CN=9a7a0dd1d40b390464425df7f4eb52e594155f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3e:4c:9f:11:e6:ea:36:7a:5c:2b:76:96:af:
10:2e:02:68:3a:d4:e5:15:f1:e3:eb:ee:42:30:ad:
f7:0b:48:2b:3c:ef:09:59:1d:65:28:14:f7:e2:77:
9f:23:22:5c:9c:ee:f2:8d:b7:1f:da:0c:b3:12:bf:
a4:6b:17:06:e5:81:ec:26:9c:d0:fe:eb:9b:3e:9f:
0f:3a:be:29:ae:bc:f3:91:0d:b6:97:88:54:de:bd:
65:c5:7c:45:32:d8:4b:41:d0:78:9c:d6:ab:f8:29:
4a:87:3f:3b:30:a3:73:99:98:2f:83:a7:c8:84:1b:
98:33:a0:63:a8:7a:94:1d:1b:f1:75:30:53:fb:ff:
44:4a:a0:6a:fe:92:0b:58:18:d8:64:6e:8d:5c:ce:
60:c7:80:d4:79:81:1d:70:cb:ee:8a:e5:4e:d8:70:
e9:88:5b:79:2a:5d:17:cf:b8:a2:31:52:61:ee:88:
e4:53:79:a5:17:46:b5:f1:80:c5:c5:1f:58:da:45:
48:63:0b:74:70:75:06:5a:7d:5c:1b:38:cc:36:da:
db:86:44:d1:9a:0a:7d:81:c7:3f:27:6f:ea:4f:e6:
e5:ef:3d:4c:57:ef:31:82:90:cc:0b:78:af:8f:dd:
6b:9c:29:a8:d3:6d:eb:1d:fb:08:65:1c:40:bd:c2:
b9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7A:0D:D1:D4:0B:39:04:64:42:5D:F7:F4:EB:52:E5:94:15:5F:07
X509v3 Authority Key Identifier:
keyid:DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:fa:c8:4f:91:44:af:c0:4e:1b:49:40:6b:53:e9:ee:8d:3d:
06:35:13:e3:70:5b:92:08:ee:2c:0c:bf:b6:bb:d1:d5:9d:82:
30:a8:81:08:a8:10:ec:ee:d6:02:b8:26:03:ff:f9:2e:d7:5b:
d5:dc:d5:a8:f5:34:af:69:2f:e0:3a:38:57:c6:57:24:35:df:
d3:aa:a6:d2:26:c7:da:b1:e5:9e:0b:55:06:8c:8c:c8:17:24:
d5:63:bd:8c:7a:2d:7b:6e:05:03:a7:a8:94:4f:35:59:76:ec:
3f:06:51:32:bc:3e:6d:5f:3a:83:c4:89:a2:14:15:2f:df:9c:
d2:25:33:b4:f9:21:8b:90:21:7f:93:dd:4b:76:b0:3c:60:90:
75:c5:49:93:00:f6:39:8e:df:f7:7b:44:18:f4:98:e6:6e:3b:
ed:70:13:49:1d:1e:61:2a:95:bf:f6:54:3e:5b:aa:ac:af:81:
7e:9a:cb:72:70:3e:d8:81:3a:63:37:fc:b1:49:91:e3:bf:fa:
4b:8a:a4:99:f9:c4:69:08:d8:3a:5b:ea:cf:e8:bc:13:2a:f6:
d1:5d:dc:ff:4a:53:37:7b:55:b5:c8:67:9f:ce:72:46:4e:b5:
15:67:be:70:18:53:45:b2:6d:a8:a5:9d:eb:4c:d6:b6:e5:56:
0e:14:a5:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABAVUYNRjjyCUEJa7dj5hFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjY2E1MjIxOTZmZDA5YmFlNzM5YjZiZDIzMjJlNWViOTBk
YTRmYjkwHhcNMjYwODE0MTYwMDU5WhcNMjYwODE1MTYwMDU5WjAzMTEwLwYDVQQD
Eyg5YTdhMGRkMWQ0MGIzOTA0NjQ0MjVkZjdmNGViNTJlNTk0MTU1ZjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj5MnxHm6jZ6XCt2lq8QLgJoOtTl
FfHj6+5CMK33C0grPO8JWR1lKBT34nefIyJcnO7yjbcf2gyzEr+kaxcG5YHsJpzQ
/uubPp8POr4prrzzkQ22l4hU3r1lxXxFMthLQdB4nNar+ClKhz87MKNzmZgvg6fI
hBuYM6BjqHqUHRvxdTBT+/9ESqBq/pILWBjYZG6NXM5gx4DUeYEdcMvuiuVO2HDp
iFt5Kl0Xz7iiMVJh7ojkU3mlF0a18YDFxR9Y2kVIYwt0cHUGWn1cGzjMNtrbhkTR
mgp9gcc/J2/qT+bl7z1MV+8xgpDMC3ivj91rnCmo023rHfsIZRxAvcK5MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJp6DdHUCzkEZEJd9/TrUuWUFV8HMB8GA1UdIwQY
MBaAFNzKUiGW/Qm65zm2vSMi5euQ2k+5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM01wU0laYjlDYnJuT2JhOUl5TGw2NURhVDdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi82NDlhZjAtMTMyYy00NTMzLTlmYmMt
M2IyNTBhZTE4OTM2LzEvM01wU0laYjlDYnJuT2JhOUl5TGw2NURhVDdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi82NDlhZjAtMTMyYy00NTMzLTlmYmMtM2IyNTBhZTE4OTM2
LzEvM01wU0laYjlDYnJuT2JhOUl5TGw2NURhVDdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs/rIT5FE
r8BOG0lAa1Pp7o09BjUT43BbkgjuLAy/trvR1Z2CMKiBCKgQ7O7WArgmA//5Ltdb
1dzVqPU0r2kv4Do4V8ZXJDXf06qm0ibH2rHlngtVBoyMyBck1WO9jHote24FA6eo
lE81WXbsPwZRMrw+bV86g8SJohQVL9+c0iUztPkhi5Ahf5PdS3awPGCQdcVJkwD2
OY7f93tEGPSY5m477XATSR0eYSqVv/ZUPluqrK+BfprLcnA+2IE6Yzf8sUmR47/6
S4qkmfnEaQjYOlvqz+i8Eyr20V3c/0pTN3tVtchnn85yRk61FWe+cBhTRbJtqKWd
60zWtuVWDhSl2A==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:44:35 2026 by rpki-client