Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
File: 3p8qknN4vRRV2ovfhbsauGfh9Sg.mft (raw, json)
Hash identifier: na3Eo9UxKY524ptmPxBeNrMVjAItEh2WsLqva0Rkmuw=
Subject key identifier: DB:38:E3:1A:8D:50:5D:DA:75:2E:AC:48:42:A9:C1:AA:A9:47:3E:0B
Authority key identifier: DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
Certificate issuer: /CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Certificate serial: 01A13ECBD2C19A1993A7172FEA81139A71C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
Manifest number: 1AA3
Signing time: Thu 15 Oct 2026 09:01:47 +0000
Manifest this update: Thu 15 Oct 2026 09:01:47 +0000
Manifest next update: Fri 16 Oct 2026 09:01:47 +0000
Files and hashes: 1: 3p8qknN4vRRV2ovfhbsauGfh9Sg.crl (hash: PXp3NpfA1mYUn0RzVErTuQuVqa/FLa8Z8zIW29SrFWw=)
2: KNINNJg3cCwRIkadz_iFDjzCAZo.roa (hash: uyBgZTWuxKjfgaFUXeyVL4F1AHNOmaLe474fWdCTqys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:d2:c1:9a:19:93:a7:17:2f:ea:81:13:9a:71:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Validity
Not Before: Oct 15 09:01:47 2026 GMT
Not After : Oct 16 09:01:47 2026 GMT
Subject: CN=db38e31a8d505dda752eac4842a9c1aaa9473e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:03:cb:c8:17:a8:61:09:81:1f:17:90:92:35:
c9:43:85:9d:3b:69:f9:92:b7:d9:43:77:4f:fe:40:
9f:23:8d:48:d8:06:65:83:3c:41:0a:e1:d5:b3:1d:
ae:38:f5:26:61:e2:e4:40:2e:18:e4:8b:8a:f8:36:
f2:ad:0c:ee:e1:e4:9c:74:f9:91:13:27:12:20:05:
13:78:67:89:95:9d:4a:88:db:e7:c1:20:65:86:36:
44:83:4e:5d:6e:1d:30:7b:61:8f:91:ac:47:1a:d1:
b3:e6:1f:cd:d7:cd:a9:96:b1:ab:6c:56:a0:ca:e7:
cb:88:9e:b2:67:f9:b0:e1:46:f4:6d:77:64:fd:4e:
f1:79:c0:ef:62:52:8f:29:69:27:54:29:f3:4b:01:
32:2e:a8:6a:0b:72:c8:b1:20:b8:97:cb:f9:2e:7a:
99:95:73:e7:66:db:e4:0e:23:e1:ea:1b:d6:cb:34:
2e:4c:4c:a7:53:a6:89:ff:47:ee:2b:86:32:63:fe:
29:9c:3a:9b:74:b7:62:44:3c:2a:e6:bd:ff:bc:fc:
48:18:61:92:b5:94:df:62:89:79:62:26:09:c2:e6:
b5:81:f8:be:70:e7:b8:bd:55:c3:3f:09:5a:cb:ed:
f1:97:a2:97:67:4d:ec:f6:f6:33:28:95:19:09:ee:
eb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:38:E3:1A:8D:50:5D:DA:75:2E:AC:48:42:A9:C1:AA:A9:47:3E:0B
X509v3 Authority Key Identifier:
keyid:DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:7f:3d:fe:d7:bc:45:d4:84:67:5a:34:96:91:38:d7:c8:cd:
e1:7a:bd:e5:ae:d5:72:fb:0b:da:05:65:8c:ba:db:c3:58:02:
09:a2:2d:de:41:ab:63:3a:23:f4:af:0f:c4:3d:d9:a7:28:1b:
ed:44:06:cb:ed:25:b4:13:f3:c9:50:a2:05:34:f1:4b:da:e3:
c3:42:24:80:6a:89:b5:0d:67:54:ab:c4:74:39:ff:21:7a:9b:
d6:31:85:79:af:af:74:61:57:e4:73:b8:d5:9b:a2:9f:0c:a3:
4a:d2:07:ab:cc:d1:ce:81:55:ce:12:f4:56:91:8c:28:e4:02:
d3:44:c2:5e:b0:9b:f9:bf:73:b1:f6:f6:8e:d7:7b:e1:5b:7e:
93:e7:92:5a:8e:03:1b:19:77:2d:27:db:56:b7:65:56:6a:85:
ef:f5:ae:61:d3:2b:d9:51:b3:04:5f:bb:7b:68:6c:1c:d6:80:
90:6e:8c:63:60:87:80:e1:c8:ba:25:00:6a:0a:67:5e:12:bf:
dc:53:2a:15:ee:7d:a9:81:eb:1e:84:f1:f2:89:2e:32:01:d7:
2e:b6:e2:b7:fc:6b:96:e6:c6:3b:91:3f:ca:75:40:45:db:fe:
6e:38:b3:5b:e1:8e:85:24:84:27:b2:38:a2:19:31:7b:7d:d4:
30:39:23:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+y9LBmhmTpxcv6oETmnHEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOWYyYTkyNzM3OGJkMTQ1NWRhOGJkZjg1YmIxYWI4Njdl
MWY1MjgwHhcNMjYxMDE1MDkwMTQ3WhcNMjYxMDE2MDkwMTQ3WjAzMTEwLwYDVQQD
EyhkYjM4ZTMxYThkNTA1ZGRhNzUyZWFjNDg0MmE5YzFhYWE5NDczZTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/APLyBeoYQmBHxeQkjXJQ4WdO2n5
krfZQ3dP/kCfI41I2AZlgzxBCuHVsx2uOPUmYeLkQC4Y5IuK+DbyrQzu4eScdPmR
EycSIAUTeGeJlZ1KiNvnwSBlhjZEg05dbh0we2GPkaxHGtGz5h/N182plrGrbFag
yufLiJ6yZ/mw4Ub0bXdk/U7xecDvYlKPKWknVCnzSwEyLqhqC3LIsSC4l8v5LnqZ
lXPnZtvkDiPh6hvWyzQuTEynU6aJ/0fuK4YyY/4pnDqbdLdiRDwq5r3/vPxIGGGS
tZTfYol5YiYJwua1gfi+cOe4vVXDPwlay+3xl6KXZ03s9vYzKJUZCe7rsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNs44xqNUF3adS6sSEKpwaqpRz4LMB8GA1UdIwQY
MBaAFN6fKpJzeL0UVdqL34W7Grhn4fUoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3A4cWtuTjR2UlJWMm92Zmhic2F1R2ZoOVNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xNzU5ZGEtYzY2ZS00M2M4LTg4MWQt
NmRiMDkwMjE0MDM1LzEvM3A4cWtuTjR2UlJWMm92Zmhic2F1R2ZoOVNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xNzU5ZGEtYzY2ZS00M2M4LTg4MWQtNmRiMDkwMjE0MDM1
LzEvM3A4cWtuTjR2UlJWMm92Zmhic2F1R2ZoOVNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgn89/te8
RdSEZ1o0lpE418jN4Xq95a7VcvsL2gVljLrbw1gCCaIt3kGrYzoj9K8PxD3Zpygb
7UQGy+0ltBPzyVCiBTTxS9rjw0IkgGqJtQ1nVKvEdDn/IXqb1jGFea+vdGFX5HO4
1ZuinwyjStIHq8zRzoFVzhL0VpGMKOQC00TCXrCb+b9zsfb2jtd74Vt+k+eSWo4D
Gxl3LSfbVrdlVmqF7/WuYdMr2VGzBF+7e2hsHNaAkG6MY2CHgOHIuiUAagpnXhK/
3FMqFe59qYHrHoTx8okuMgHXLrbit/xrlubGO5E/ynVARdv+bjizW+GOhSSEJ7I4
ohkxe33UMDkjaA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 12:39:59 2026 by rpki-client