Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
File: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft (raw, json)
Hash identifier: xUbBcwVaRin8H0Yg34Uz1ZHVvoMeSiG2NH2IIaPwSkM=
Subject key identifier: EF:45:26:83:22:66:13:B1:C0:0A:3B:52:1E:26:69:14:51:36:20:38
Authority key identifier: DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
Certificate issuer: /CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Certificate serial: 01A13F0236C4A72BB2914312958F0E1D72E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
Manifest number: 08DA
Signing time: Thu 15 Oct 2026 10:01:12 +0000
Manifest this update: Thu 15 Oct 2026 10:01:12 +0000
Manifest next update: Fri 16 Oct 2026 10:01:12 +0000
Files and hashes: 1: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl (hash: 4OdOFxoNUsXxqOCrQtnPNwEmL3VCxV00006CglDtSmY=)
2: HrUPMg6A27LayY1nzJVXakWil-8.roa (hash: 6oiaD9+R084Ie04PfQ9j94YYcX9VFnuvxlsXJPk70DA=)
3: LsW7E92fgqyb4h0SFoyQ1iS_A-A.roa (hash: lZdLHI5/Pom2chJvXWn7/eiTGrnfbJ5HoDaiu046MUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:36:c4:a7:2b:b2:91:43:12:95:8f:0e:1d:72:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Validity
Not Before: Oct 15 10:01:12 2026 GMT
Not After : Oct 16 10:01:12 2026 GMT
Subject: CN=ef452683226613b1c00a3b521e26691451362038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:44:d8:bb:de:0d:b9:a2:14:3b:0d:98:c8:ab:
64:bc:f5:5b:57:12:1b:a5:52:42:db:45:79:b6:7a:
99:46:5c:1f:81:a5:51:c3:f9:82:0d:41:bd:78:4f:
3b:3b:06:8a:3f:b0:1b:7f:0a:4f:95:7e:46:22:23:
43:ff:7b:14:5a:f4:6f:c9:a6:3c:2f:a7:a0:97:26:
d3:07:85:7d:eb:2f:c5:63:68:ca:a4:bc:13:b2:38:
b3:96:97:19:65:96:f9:dd:a5:68:d2:59:9a:a0:71:
26:20:7a:f6:99:09:81:5e:85:91:9e:ad:f3:43:35:
b3:b9:9b:3c:5b:2d:b3:a5:72:f6:d0:09:77:b3:f2:
ee:e1:70:71:be:a5:cd:83:44:75:5d:4d:e8:df:f5:
db:57:6a:4f:a1:80:0d:07:f3:9d:d4:88:76:e7:13:
41:47:d8:f4:00:4f:c5:e0:c9:bd:3d:77:ec:fe:18:
83:17:31:7e:aa:8a:40:2f:4d:eb:bc:06:08:c3:25:
99:26:e9:6c:e2:32:ae:7e:67:c9:6a:1d:b8:13:75:
70:78:bb:d1:3f:4e:9c:1e:e6:47:ac:29:49:30:aa:
17:07:cc:87:5f:65:0d:93:52:78:07:5a:3c:9c:b6:
7e:47:28:0d:2f:27:5c:40:72:14:95:7d:03:94:91:
b0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:45:26:83:22:66:13:B1:C0:0A:3B:52:1E:26:69:14:51:36:20:38
X509v3 Authority Key Identifier:
keyid:DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:4f:27:c6:23:ae:61:b0:f2:e6:0f:f1:41:c0:c2:5d:e4:c5:
82:d0:75:70:91:85:6d:c9:6e:c7:cc:d8:e4:ed:1a:26:07:27:
f5:ef:e8:a7:27:1c:27:c7:61:2d:f9:e9:c0:80:da:39:d6:9e:
a9:b4:2d:29:d2:d6:62:21:2d:08:53:0c:32:96:a9:05:df:55:
26:98:67:a4:42:67:26:d0:d7:13:76:55:44:58:10:08:22:87:
0b:e3:f5:76:02:64:9e:3b:fa:43:fe:0b:73:f5:65:50:3d:14:
58:42:fb:fc:07:32:d1:9a:66:ab:83:7d:68:79:53:df:3f:52:
67:02:de:08:83:d9:5d:69:e8:b6:6d:47:8b:97:97:89:b8:07:
da:1c:5e:43:ea:94:67:53:3e:86:13:80:da:b0:b2:6d:a5:26:
da:03:65:9e:d8:f6:02:8d:5d:00:d8:3b:b0:b6:0e:85:82:6d:
f8:1a:3b:36:cf:83:be:1f:f2:0b:bb:62:9e:31:48:c3:16:81:
d9:dd:3d:dd:3b:fd:d1:a6:16:e6:5f:d1:e2:4c:7a:67:ea:20:
4e:81:d9:71:75:8d:0b:c5:07:da:08:a6:b7:bd:3e:ea:fa:56:
d7:e1:fe:ce:ab:43:a2:47:bb:49:67:f3:99:53:fa:e4:be:57:
79:5f:14:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/AjbEpyuykUMSlY8OHXLoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZDk3NzBjMzA3ZWEzOTYwYzhkYTI2OGE4ODY1YTRhOWZh
NjM0YzkwHhcNMjYxMDE1MTAwMTEyWhcNMjYxMDE2MTAwMTEyWjAzMTEwLwYDVQQD
EyhlZjQ1MjY4MzIyNjYxM2IxYzAwYTNiNTIxZTI2NjkxNDUxMzYyMDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUTYu94NuaIUOw2YyKtkvPVbVxIb
pVJC20V5tnqZRlwfgaVRw/mCDUG9eE87OwaKP7AbfwpPlX5GIiND/3sUWvRvyaY8
L6eglybTB4V96y/FY2jKpLwTsjizlpcZZZb53aVo0lmaoHEmIHr2mQmBXoWRnq3z
QzWzuZs8Wy2zpXL20Al3s/Lu4XBxvqXNg0R1XU3o3/XbV2pPoYANB/Od1Ih25xNB
R9j0AE/F4Mm9PXfs/hiDFzF+qopAL03rvAYIwyWZJuls4jKufmfJah24E3VweLvR
P06cHuZHrClJMKoXB8yHX2UNk1J4B1o8nLZ+RygNLydcQHIUlX0DlJGwAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9FJoMiZhOxwAo7Uh4maRRRNiA4MB8GA1UdIwQY
MBaAFN3ZdwwwfqOWDI2iaKiGWkqfpjTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2RsM0REQi1vNVlNamFKb3FJWmFTcC1tTk1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My80NDQ0YWItM2RhMy00MThiLWExMDUt
ZjJmZTBkMDRiZmJmLzEvM2RsM0REQi1vNVlNamFKb3FJWmFTcC1tTk1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My80NDQ0YWItM2RhMy00MThiLWExMDUtZjJmZTBkMDRiZmJm
LzEvM2RsM0REQi1vNVlNamFKb3FJWmFTcC1tTk1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwk8nxiOu
YbDy5g/xQcDCXeTFgtB1cJGFbclux8zY5O0aJgcn9e/opyccJ8dhLfnpwIDaOdae
qbQtKdLWYiEtCFMMMpapBd9VJphnpEJnJtDXE3ZVRFgQCCKHC+P1dgJknjv6Q/4L
c/VlUD0UWEL7/Acy0Zpmq4N9aHlT3z9SZwLeCIPZXWnotm1Hi5eXibgH2hxeQ+qU
Z1M+hhOA2rCybaUm2gNlntj2Ao1dANg7sLYOhYJt+Bo7Ns+Dvh/yC7tinjFIwxaB
2d093Tv90aYW5l/R4kx6Z+ogToHZcXWNC8UH2gimt70+6vpW1+H+zqtDoke7SWfz
mVP65L5XeV8Ukg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 17:47:22 2026 by rpki-client