Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
File: 3U44kvRrEHhSw-rhsn3M9g-rmb0.mft (raw, json)
Hash identifier: nGYXyINC4sFbpAC1T7YseL53J7WgbTVNpN0EvTEJEpg=
Subject key identifier: B3:76:47:8D:C3:48:0B:8E:7A:08:F9:A4:D8:2D:DE:4A:7E:20:32:00
Authority key identifier: DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
Certificate issuer: /CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Certificate serial: 01A14B3CCEFDC1904FA7493A5E87CBFD4508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
Manifest number: 141D
Signing time: Sat 17 Oct 2026 19:00:38 +0000
Manifest this update: Sat 17 Oct 2026 19:00:38 +0000
Manifest next update: Sun 18 Oct 2026 19:00:38 +0000
Files and hashes: 1: 3U44kvRrEHhSw-rhsn3M9g-rmb0.crl (hash: ssagTHIQI9rxVs/aRAw+4N/K1fd/EXMTVytFahNzl94=)
2: _eQtw5cyWM7bN-n1wH5kFmdpMgc.roa (hash: sNGFzrnadHYgam/Tin+pJL2a8Tg3Ac1jpPx5ZlgeT5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:3c:ce:fd:c1:90:4f:a7:49:3a:5e:87:cb:fd:45:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Validity
Not Before: Oct 17 19:00:38 2026 GMT
Not After : Oct 18 19:00:38 2026 GMT
Subject: CN=b376478dc3480b8e7a08f9a4d82dde4a7e203200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:8f:3f:3c:8c:19:fc:6b:23:85:1a:1b:bf:8d:
b3:ba:34:1f:6d:0e:cd:ea:e4:57:4d:20:da:8e:89:
f4:55:36:8c:1d:43:e2:f8:69:ee:4b:49:cf:d1:00:
1b:95:54:91:7d:43:2a:d4:77:b3:b5:95:de:ec:68:
7c:65:c2:de:6b:74:b9:7a:b9:96:bd:c6:a9:78:f9:
c9:bb:f0:36:9b:4d:ae:c2:c4:73:49:bc:b5:65:59:
ab:bd:53:c0:b7:e2:16:e0:66:02:81:c4:50:2d:f9:
08:57:e9:ea:69:9e:8f:e2:9c:e5:18:ef:c3:67:67:
28:39:4e:1d:76:23:1c:52:aa:c9:35:91:ce:6d:0c:
bc:78:e2:51:1f:75:02:1a:93:a4:21:cc:1f:e3:3d:
03:59:6e:fc:ea:65:0a:c3:5b:e8:69:78:ed:5e:26:
59:de:02:94:86:c1:75:a7:9d:11:65:c8:9f:3c:32:
ac:e4:41:4a:fb:6d:87:b7:aa:31:1d:a7:1b:c3:ee:
1d:4c:30:0a:50:14:80:0c:24:20:be:22:3e:08:28:
c3:78:71:f7:f5:a5:52:40:72:79:68:c6:b9:28:b0:
02:5f:89:57:a1:93:e5:b3:b8:22:e9:d5:44:2a:a8:
9f:3a:a8:85:a6:0f:b4:cb:c2:08:f1:f8:56:c4:99:
bd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:76:47:8D:C3:48:0B:8E:7A:08:F9:A4:D8:2D:DE:4A:7E:20:32:00
X509v3 Authority Key Identifier:
keyid:DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:fc:de:79:f3:f4:6e:41:20:90:bf:eb:b6:76:7d:98:11:04:
7f:79:f6:d2:57:d1:79:0e:b4:7a:7e:37:fa:10:e1:aa:8d:57:
d9:10:30:65:52:b9:88:96:e7:23:20:26:53:25:63:89:b9:d8:
e0:cf:3b:ce:52:f5:b7:c2:61:9b:fd:a0:ef:c7:bd:9f:fe:26:
4d:df:33:b6:e4:b4:31:21:c8:e2:cf:16:a8:8e:03:2a:c2:fd:
3e:bb:ff:a6:a5:57:ca:af:39:4e:3d:b2:00:d5:4b:41:26:04:
a6:f3:25:d5:ae:02:b3:2b:17:53:f3:ff:3c:0e:ef:ba:42:29:
1c:2b:4e:5d:f0:cb:e3:ca:62:56:4a:49:ef:85:45:e8:05:1c:
c5:04:fa:38:17:be:ac:a0:c0:d5:0c:1a:b7:84:4b:13:40:06:
75:60:55:62:ef:50:b5:3f:bc:9f:f2:11:26:1d:4f:68:5e:ee:
19:69:7b:9b:63:6a:60:b7:2e:51:68:90:3b:dd:c2:88:5a:af:
55:20:0c:b1:b2:ec:36:47:a5:0b:4c:de:4d:1e:72:29:ea:a0:
e1:1f:8d:7a:ea:d7:84:b3:c5:17:56:a1:4c:d5:25:1c:ca:44:
07:73:5c:03:d3:3f:1a:fb:04:70:32:56:e6:4c:0c:82:3c:7f:
ad:71:78:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFLPM79wZBPp0k6XofL/UUIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNGUzODkyZjQ2YjEwNzg1MmMzZWFlMWIyN2RjY2Y2MGZh
Yjk5YmQwHhcNMjYxMDE3MTkwMDM4WhcNMjYxMDE4MTkwMDM4WjAzMTEwLwYDVQQD
EyhiMzc2NDc4ZGMzNDgwYjhlN2EwOGY5YTRkODJkZGU0YTdlMjAzMjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA748/PIwZ/GsjhRobv42zujQfbQ7N
6uRXTSDajon0VTaMHUPi+GnuS0nP0QAblVSRfUMq1HeztZXe7Gh8ZcLea3S5ermW
vcapePnJu/A2m02uwsRzSby1ZVmrvVPAt+IW4GYCgcRQLfkIV+nqaZ6P4pzlGO/D
Z2coOU4ddiMcUqrJNZHObQy8eOJRH3UCGpOkIcwf4z0DWW786mUKw1voaXjtXiZZ
3gKUhsF1p50RZcifPDKs5EFK+22Ht6oxHacbw+4dTDAKUBSADCQgviI+CCjDeHH3
9aVSQHJ5aMa5KLACX4lXoZPls7gi6dVEKqifOqiFpg+0y8II8fhWxJm9lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLN2R43DSAuOegj5pNgt3kp+IDIAMB8GA1UdIwQY
MBaAFN1OOJL0axB4UsPq4bJ9zPYPq5m9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1U0NGt2UnJFSGhTdy1yaHNuM005Zy1ybWIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NDg4N2MtNjgwOS00NDI1LWJjZTkt
M2I1YjcxY2JiMzIyLzEvM1U0NGt2UnJFSGhTdy1yaHNuM005Zy1ybWIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS84NDg4N2MtNjgwOS00NDI1LWJjZTktM2I1YjcxY2JiMzIy
LzEvM1U0NGt2UnJFSGhTdy1yaHNuM005Zy1ybWIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFPzeefP0
bkEgkL/rtnZ9mBEEf3n20lfReQ60en43+hDhqo1X2RAwZVK5iJbnIyAmUyVjibnY
4M87zlL1t8Jhm/2g78e9n/4mTd8ztuS0MSHI4s8WqI4DKsL9Prv/pqVXyq85Tj2y
ANVLQSYEpvMl1a4CsysXU/P/PA7vukIpHCtOXfDL48piVkpJ74VF6AUcxQT6OBe+
rKDA1Qwat4RLE0AGdWBVYu9QtT+8n/IRJh1PaF7uGWl7m2NqYLcuUWiQO93CiFqv
VSAMsbLsNkelC0zeTR5yKeqg4R+NeurXhLPFF1ahTNUlHMpEB3NcA9M/GvsEcDJW
5kwMgjx/rXF4Sw==
-----END CERTIFICATE-----
Generated at Sat Oct 17 22:08:50 2026 by rpki-client