Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.mft
File: 3bGCpdvRvuhx3lGQAtYBj-4hNnA.mft (raw, json)
Hash identifier: wU30vSLTt62HJY7SF7l58SrHY9Csmrwf5D8sl8HKdRs=
Subject key identifier: 9C:CE:6D:0C:6A:A9:90:6A:94:5F:4E:CA:83:70:84:D3:2C:D9:EB:07
Authority key identifier: DD:B1:82:A5:DB:D1:BE:E8:71:DE:51:90:02:D6:01:8F:EE:21:36:70
Certificate issuer: /CN=ddb182a5dbd1bee871de519002d6018fee213670
Certificate serial: 01A0412AB5034FAF562A3CDFE80969BFB0A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bGCpdvRvuhx3lGQAtYBj-4hNnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.mft
Manifest number: 9B
Signing time: Thu 27 Aug 2026 03:01:52 +0000
Manifest this update: Thu 27 Aug 2026 03:01:52 +0000
Manifest next update: Fri 28 Aug 2026 03:01:52 +0000
Files and hashes: 1: 3bGCpdvRvuhx3lGQAtYBj-4hNnA.crl (hash: /3PAj4rTMbwtAgGnCcYsLE9zt+cXLdlN2QcvhLYARV4=)
2: 63JgYqrtG6KoZuuOrK4W3du1Duo.roa (hash: bCSh6KZ5NQdZdMyFJ085Wh626DTWHoPFQnxoetlXdVU=)
3: tmXRQcCYhINr2gZL0cRubH_ch2k.roa (hash: j7OzX8w8hg3VPQ17U1GWH4ZU5mHgI9S7cGktHlSkmlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3bGCpdvRvuhx3lGQAtYBj-4hNnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:2a:b5:03:4f:af:56:2a:3c:df:e8:09:69:bf:b0:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb182a5dbd1bee871de519002d6018fee213670
Validity
Not Before: Aug 27 03:01:52 2026 GMT
Not After : Aug 28 03:01:52 2026 GMT
Subject: CN=9cce6d0c6aa9906a945f4eca837084d32cd9eb07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:83:23:5e:f3:32:7a:3a:ff:9d:97:dc:91:01:
ed:4a:7d:d4:a8:bf:c1:b7:75:0e:cc:b9:7b:09:73:
7a:39:58:e0:9a:ac:01:60:48:0e:0d:36:50:0d:f6:
fa:3c:e8:71:da:be:66:cf:e4:ef:de:05:57:25:cb:
3a:f1:a1:b6:01:53:1f:e8:8c:8e:08:c4:b6:8b:2e:
aa:f1:df:05:43:c1:fa:ac:fe:79:a9:59:0f:c8:51:
8c:ff:fb:14:d7:fb:d2:2a:74:32:08:14:be:a6:df:
cf:ce:ea:c7:48:f9:41:01:65:c7:ce:42:91:fa:65:
66:59:e0:3e:0c:9d:64:b4:e0:9e:e2:e6:0f:aa:8b:
78:4c:4c:c0:a0:e1:3f:60:62:04:bb:b1:c8:65:cd:
65:56:88:e7:d9:52:ec:c9:f7:75:bb:92:6d:37:f5:
33:b0:9d:e7:da:5d:bb:8e:f7:24:3d:b0:ac:3f:d8:
d4:a8:aa:83:f4:3f:b0:b5:e4:32:d4:dd:43:04:9a:
43:9e:53:62:69:7a:db:3f:59:8e:6d:62:38:c4:06:
11:05:8a:34:f4:fc:70:e6:5c:21:3a:45:a9:0a:97:
7c:4f:6e:d2:d3:36:0f:b7:fd:49:cb:78:48:87:72:
42:7f:13:c3:21:2f:26:cc:bc:c4:02:6b:55:62:f6:
b5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:CE:6D:0C:6A:A9:90:6A:94:5F:4E:CA:83:70:84:D3:2C:D9:EB:07
X509v3 Authority Key Identifier:
keyid:DD:B1:82:A5:DB:D1:BE:E8:71:DE:51:90:02:D6:01:8F:EE:21:36:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bGCpdvRvuhx3lGQAtYBj-4hNnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:68:20:ca:53:ed:3b:a6:34:fc:b9:41:e5:ad:82:e9:08:03:
05:63:f3:9a:71:c4:af:53:00:e8:23:59:44:9a:f7:ed:65:e7:
13:17:c0:0b:be:5e:5c:89:b8:84:32:60:db:6b:c1:27:be:a2:
51:5b:cc:c0:0b:b4:a5:46:7d:55:97:aa:cb:0e:e1:98:69:cc:
ea:22:ca:13:09:34:6d:f9:00:1c:7f:35:d3:2c:db:b5:c8:f3:
e8:53:32:3e:0d:cd:0c:60:94:82:71:fb:65:ec:64:df:4b:d6:
4e:e9:6b:a6:22:4c:3c:f9:b3:46:c3:01:05:51:44:80:7e:dc:
46:a8:86:b0:49:1b:e7:60:68:96:c3:30:a4:ad:92:e7:74:93:
7f:4a:fd:3f:40:a3:f7:a8:13:66:46:58:b4:a0:d0:18:c9:37:
4c:f9:04:57:0a:8d:eb:9a:3b:ca:32:e3:e8:fe:28:3a:f5:00:
13:d8:c1:e5:ab:89:c7:05:15:56:3a:dd:b8:00:5b:30:1d:3b:
01:4b:95:e6:74:52:5a:90:fe:b8:13:d2:55:f9:b1:7b:30:18:
25:1e:c2:a7:ff:eb:8f:72:a5:02:80:1a:cc:5c:42:c1:51:55:
24:d6:5c:a5:9d:11:d1:7b:20:67:00:8a:8e:3b:62:99:85:81:
0c:34:3e:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBBKrUDT69WKjzf6Alpv7CmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkYjE4MmE1ZGJkMWJlZTg3MWRlNTE5MDAyZDYwMThmZWUy
MTM2NzAwHhcNMjYwODI3MDMwMTUyWhcNMjYwODI4MDMwMTUyWjAzMTEwLwYDVQQD
Eyg5Y2NlNmQwYzZhYTk5MDZhOTQ1ZjRlY2E4MzcwODRkMzJjZDllYjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4MjXvMyejr/nZfckQHtSn3UqL/B
t3UOzLl7CXN6OVjgmqwBYEgODTZQDfb6POhx2r5mz+Tv3gVXJcs68aG2AVMf6IyO
CMS2iy6q8d8FQ8H6rP55qVkPyFGM//sU1/vSKnQyCBS+pt/PzurHSPlBAWXHzkKR
+mVmWeA+DJ1ktOCe4uYPqot4TEzAoOE/YGIEu7HIZc1lVojn2VLsyfd1u5JtN/Uz
sJ3n2l27jvckPbCsP9jUqKqD9D+wteQy1N1DBJpDnlNiaXrbP1mObWI4xAYRBYo0
9Pxw5lwhOkWpCpd8T27S0zYPt/1Jy3hIh3JCfxPDIS8mzLzEAmtVYva1cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJzObQxqqZBqlF9OyoNwhNMs2esHMB8GA1UdIwQY
MBaAFN2xgqXb0b7ocd5RkALWAY/uITZwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2JHQ3BkdlJ2dWh4M2xHUUF0WUJqLTRoTm5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS82OTJiMWUtYzlmZS00M2UwLWI3MjIt
NTNhNjA0ODA3NjFkLzEvM2JHQ3BkdlJ2dWh4M2xHUUF0WUJqLTRoTm5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS82OTJiMWUtYzlmZS00M2UwLWI3MjItNTNhNjA0ODA3NjFk
LzEvM2JHQ3BkdlJ2dWh4M2xHUUF0WUJqLTRoTm5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAimggylPt
O6Y0/LlB5a2C6QgDBWPzmnHEr1MA6CNZRJr37WXnExfAC75eXIm4hDJg22vBJ76i
UVvMwAu0pUZ9VZeqyw7hmGnM6iLKEwk0bfkAHH810yzbtcjz6FMyPg3NDGCUgnH7
Zexk30vWTulrpiJMPPmzRsMBBVFEgH7cRqiGsEkb52BolsMwpK2S53STf0r9P0Cj
96gTZkZYtKDQGMk3TPkEVwqN65o7yjLj6P4oOvUAE9jB5auJxwUVVjrduABbMB07
AUuV5nRSWpD+uBPSVfmxezAYJR7Cp//rj3KlAoAazFxCwVFVJNZcpZ0R0XsgZwCK
jjtimYWBDDQ+UA==
-----END CERTIFICATE-----
Generated at Thu Aug 27 06:48:15 2026 by rpki-client