Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
File: 3OVHLr4StLVw-CcUOHkX7LTE3lM.mft (raw, json)
Hash identifier: ymw/UlK1w/QAa4mzjaPjYDoxlDJx0C6V1OrBkh8IJow=
Subject key identifier: 8D:F8:A4:DF:7D:1F:7D:D6:EC:7C:AE:50:B3:A5:16:9E:5A:8F:63:97
Authority key identifier: DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53
Certificate issuer: /CN=dce5472ebe12b4b570f82714387917ecb4c4de53
Certificate serial: 01A13E94FDC678A689F97295D06DA904E78C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
Manifest number: 15D8
Signing time: Thu 15 Oct 2026 08:01:53 +0000
Manifest this update: Thu 15 Oct 2026 08:01:53 +0000
Manifest next update: Fri 16 Oct 2026 08:01:53 +0000
Files and hashes: 1: 3OVHLr4StLVw-CcUOHkX7LTE3lM.crl (hash: jBzE7KzIQwMQrHXSV6GkClwKqa2GGWSeM7VZRi3ymxc=)
2: S_e75AZV3-MMHLgXTcVLGq4T6uc.roa (hash: AVmxa5KmaRL9M9i0sdO8A9BbJeQGosTTukip4Q42nu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:fd:c6:78:a6:89:f9:72:95:d0:6d:a9:04:e7:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce5472ebe12b4b570f82714387917ecb4c4de53
Validity
Not Before: Oct 15 08:01:53 2026 GMT
Not After : Oct 16 08:01:53 2026 GMT
Subject: CN=8df8a4df7d1f7dd6ec7cae50b3a5169e5a8f6397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f8:1b:22:bc:aa:dd:45:a5:c3:26:04:ce:f4:
e9:a5:17:3f:fa:ba:99:65:72:14:c5:ab:ab:1a:52:
81:74:e2:45:a4:2c:ea:83:ca:0c:cb:ba:8c:15:3f:
ff:cd:9c:80:89:f7:48:ad:a2:f6:53:4f:7e:a1:11:
fd:5f:8f:e2:c3:3a:66:73:91:14:2e:65:1d:34:5d:
fa:5e:ab:db:45:41:4c:df:fa:73:a5:31:d0:7b:d4:
35:88:d5:e0:b6:60:79:38:4a:37:00:4b:de:68:f0:
3a:03:9d:ce:96:3e:ff:f7:a1:5d:05:43:ee:4f:56:
96:2d:f2:ef:be:1f:53:5f:12:0e:a6:20:9e:3d:94:
a3:15:38:b1:2c:cd:5d:42:a6:36:0d:3b:c3:2a:d5:
c2:ee:45:57:57:7b:d5:43:44:31:4f:70:ff:7f:1d:
48:a9:86:3e:a2:48:96:7a:a2:79:a3:11:e6:5a:24:
b0:f1:e7:92:19:e7:2e:ac:99:30:b5:24:58:ce:c2:
62:61:a3:a7:97:8a:07:b0:b4:78:fb:57:84:68:26:
b3:4c:74:2a:4f:83:29:4f:0e:d8:5c:fc:45:b5:f3:
93:7d:90:b6:b7:09:94:f3:d8:bb:59:f8:e2:8e:78:
9b:85:8f:d5:48:c1:a5:d4:6b:3e:35:f2:44:e3:ae:
45:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F8:A4:DF:7D:1F:7D:D6:EC:7C:AE:50:B3:A5:16:9E:5A:8F:63:97
X509v3 Authority Key Identifier:
keyid:DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:57:4a:f0:e7:eb:cf:df:a1:02:6b:19:33:cb:38:57:d8:7c:
11:36:e7:88:e1:7c:26:8b:0e:40:6e:20:59:08:62:0e:ca:a9:
cb:4c:79:b8:c4:36:15:9b:03:3f:1e:f0:73:31:c9:c0:bc:16:
d9:2c:87:94:21:18:f5:bb:ed:c3:c5:7c:12:72:b8:3f:ab:a9:
46:f9:4a:bd:c4:cb:5d:2a:0e:8c:1f:42:e8:3b:4e:e2:c4:ea:
88:af:d7:25:7d:7d:c8:1f:5d:eb:5e:2b:9d:90:82:a6:5e:f8:
13:78:c8:6e:24:35:a8:32:30:bd:24:9b:12:52:e5:10:07:2e:
85:b1:ba:17:de:ff:01:95:92:e7:58:9d:66:2b:0b:33:87:b9:
17:2b:45:05:9a:22:bb:4f:41:dc:a8:a3:d7:9a:ce:89:c0:ab:
49:50:72:f0:68:9c:9a:0d:2d:ac:ff:fa:36:4e:50:81:c6:78:
e2:3c:81:15:dc:d3:d4:67:84:09:54:cd:5c:23:b2:c1:80:2d:
56:68:25:ca:d7:4a:8b:68:5b:db:69:62:55:dd:46:b2:f6:94:
87:2a:c0:13:9a:ae:3d:6b:68:c6:33:7c:b4:47:48:cd:05:02:
67:4f:68:40:c5:69:a3:55:ba:54:9c:ae:45:a7:ee:7f:8d:e2:
5e:7a:12:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+lP3GeKaJ+XKV0G2pBOeMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZTU0NzJlYmUxMmI0YjU3MGY4MjcxNDM4NzkxN2VjYjRj
NGRlNTMwHhcNMjYxMDE1MDgwMTUzWhcNMjYxMDE2MDgwMTUzWjAzMTEwLwYDVQQD
Eyg4ZGY4YTRkZjdkMWY3ZGQ2ZWM3Y2FlNTBiM2E1MTY5ZTVhOGY2Mzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPgbIryq3UWlwyYEzvTppRc/+rqZ
ZXIUxaurGlKBdOJFpCzqg8oMy7qMFT//zZyAifdIraL2U09+oRH9X4/iwzpmc5EU
LmUdNF36XqvbRUFM3/pzpTHQe9Q1iNXgtmB5OEo3AEveaPA6A53Olj7/96FdBUPu
T1aWLfLvvh9TXxIOpiCePZSjFTixLM1dQqY2DTvDKtXC7kVXV3vVQ0QxT3D/fx1I
qYY+okiWeqJ5oxHmWiSw8eeSGecurJkwtSRYzsJiYaOnl4oHsLR4+1eEaCazTHQq
T4MpTw7YXPxFtfOTfZC2twmU89i7WfjijnibhY/VSMGl1Gs+NfJE465FHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI34pN99H33W7HyuULOlFp5aj2OXMB8GA1UdIwQY
MBaAFNzlRy6+ErS1cPgnFDh5F+y0xN5TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM09WSExyNFN0TFZ3LUNjVU9Ia1g3TFRFM2xNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81YWYxZDYtNTU5Ny00ZGNiLThjMjkt
OWYwNWYxMzVkY2Y5LzEvM09WSExyNFN0TFZ3LUNjVU9Ia1g3TFRFM2xNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81YWYxZDYtNTU5Ny00ZGNiLThjMjktOWYwNWYxMzVkY2Y5
LzEvM09WSExyNFN0TFZ3LUNjVU9Ia1g3TFRFM2xNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWVdK8Ofr
z9+hAmsZM8s4V9h8ETbniOF8JosOQG4gWQhiDsqpy0x5uMQ2FZsDPx7wczHJwLwW
2SyHlCEY9bvtw8V8EnK4P6upRvlKvcTLXSoOjB9C6DtO4sTqiK/XJX19yB9d614r
nZCCpl74E3jIbiQ1qDIwvSSbElLlEAcuhbG6F97/AZWS51idZisLM4e5FytFBZoi
u09B3Kij15rOicCrSVBy8Gicmg0trP/6Nk5QgcZ44jyBFdzT1GeECVTNXCOywYAt
VmglytdKi2hb22liVd1GsvaUhyrAE5quPWtoxjN8tEdIzQUCZ09oQMVpo1W6VJyu
Rafuf43iXnoSrw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 15:29:31 2026 by rpki-client