Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/3K8sW-MHpGphaXvKhwvsojTsKkc.mft
File: 3K8sW-MHpGphaXvKhwvsojTsKkc.mft (raw, json)
Hash identifier: 09iJI5d2W1WQathVUloMWeOrSadu1dZiU8CXtpqQ0rg=
Subject key identifier: 4C:CD:32:2A:A5:4B:80:E7:E5:CD:42:DC:2E:E8:C8:65:50:FF:A2:66
Authority key identifier: DC:AF:2C:5B:E3:07:A4:6A:61:69:7B:CA:87:0B:EC:A2:34:EC:2A:47
Certificate issuer: /CN=dcaf2c5be307a46a61697bca870beca234ec2a47
Certificate serial: 01A14BAAD22B1907D0FF98E2DD674327DC69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K8sW-MHpGphaXvKhwvsojTsKkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/3K8sW-MHpGphaXvKhwvsojTsKkc.mft
Manifest number: 0125
Signing time: Sat 17 Oct 2026 21:00:48 +0000
Manifest this update: Sat 17 Oct 2026 21:00:48 +0000
Manifest next update: Sun 18 Oct 2026 21:00:48 +0000
Files and hashes: 1: 3K8sW-MHpGphaXvKhwvsojTsKkc.crl (hash: erm0+fSB5kMaTQrxejpiTgYL5mtxcQUPW2I1HUrRVBA=)
2: kOfsiEQyAOFEFp6bNE421gle90w.roa (hash: +TRgEzJtF640HkMV28QrOSBubxXo5DyV0zLHNPpuhXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/3K8sW-MHpGphaXvKhwvsojTsKkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/3K8sW-MHpGphaXvKhwvsojTsKkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3K8sW-MHpGphaXvKhwvsojTsKkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:aa:d2:2b:19:07:d0:ff:98:e2:dd:67:43:27:dc:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcaf2c5be307a46a61697bca870beca234ec2a47
Validity
Not Before: Oct 17 21:00:48 2026 GMT
Not After : Oct 18 21:00:48 2026 GMT
Subject: CN=4ccd322aa54b80e7e5cd42dc2ee8c86550ffa266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:00:8c:53:59:14:f1:8d:ad:07:91:7f:38:7c:
12:ef:3f:45:da:a9:5e:36:a0:d1:c9:11:ef:18:c1:
3d:d6:cd:7d:bc:5f:01:a1:f1:90:ec:3c:56:4e:fc:
7f:33:13:04:ef:61:b0:86:be:82:76:25:1a:6c:28:
df:0d:c8:9a:1c:93:95:ba:d2:5d:45:1b:dd:29:6d:
b9:6b:d8:6f:8a:38:07:cf:80:27:5e:6e:54:b8:68:
e1:e1:a8:45:fb:b6:58:88:b4:3a:3c:d3:a6:93:84:
dd:bd:49:74:ef:42:11:3e:49:e6:ad:53:97:ee:da:
ea:bc:d9:98:c8:e6:b5:2a:7d:a6:c9:49:e3:0e:f5:
d8:b1:41:e3:f0:57:f4:4e:36:19:09:35:e5:99:ce:
b7:64:45:f1:e8:11:ad:ca:e3:a4:dd:97:03:a6:3d:
2a:4b:b3:65:43:be:57:90:32:45:fa:47:dc:fa:22:
af:27:8a:d5:62:11:00:d0:d2:f9:b8:b7:a5:b4:62:
b6:fc:76:c1:9f:d1:8f:42:1e:16:55:7e:6d:06:7e:
17:64:66:27:0f:f2:19:f8:2e:25:1b:eb:e0:ea:5e:
b8:29:f2:31:bd:09:d3:24:f9:77:3c:70:8c:eb:af:
78:dc:1f:e7:d0:d4:0e:5a:fd:cc:99:cc:86:eb:8c:
c2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CD:32:2A:A5:4B:80:E7:E5:CD:42:DC:2E:E8:C8:65:50:FF:A2:66
X509v3 Authority Key Identifier:
keyid:DC:AF:2C:5B:E3:07:A4:6A:61:69:7B:CA:87:0B:EC:A2:34:EC:2A:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K8sW-MHpGphaXvKhwvsojTsKkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/3K8sW-MHpGphaXvKhwvsojTsKkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/3K8sW-MHpGphaXvKhwvsojTsKkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:60:cd:2a:5d:5e:af:cd:a9:d1:b8:4e:d5:dc:ab:d4:3a:1c:
5d:6e:21:88:db:23:9b:a8:3a:2f:45:ca:3a:34:97:c7:04:0c:
c3:df:3e:64:f0:60:3d:7f:28:9f:d4:32:25:0c:c9:be:bc:89:
5a:a5:8d:d8:42:9d:36:16:d7:51:42:1b:e2:eb:81:2c:54:18:
d2:3e:61:db:ac:2c:cc:fb:39:e1:f8:f5:1b:60:6d:fe:cd:9a:
bb:3e:88:91:df:da:c2:b4:02:f5:59:dc:2b:10:48:d4:85:03:
b4:09:aa:58:bc:16:d2:05:dc:1b:d3:44:f3:b5:85:5e:bb:ba:
0a:6d:ed:5b:a4:74:5b:41:1d:94:fb:dc:25:37:18:11:16:b4:
58:a4:bb:66:fd:ab:9e:3f:08:79:bd:7a:a4:26:d1:43:06:79:
47:e9:4f:94:c5:ee:61:63:e5:94:e0:9b:a8:33:f6:0f:9f:93:
53:13:84:03:40:96:55:ca:17:7b:f3:94:a6:78:55:54:c5:f3:
62:93:d1:ca:c4:a7:60:67:62:3a:e3:2b:36:8c:96:11:54:78:
ec:ce:5a:c5:ed:3c:f0:49:81:ea:9d:ff:60:28:c9:ab:80:02:
61:07:a4:52:27:a9:d8:79:96:b5:7f:cb:fb:1f:7f:7a:3b:93:
cc:5d:3e:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFLqtIrGQfQ/5ji3WdDJ9xpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYWYyYzViZTMwN2E0NmE2MTY5N2JjYTg3MGJlY2EyMzRl
YzJhNDcwHhcNMjYxMDE3MjEwMDQ4WhcNMjYxMDE4MjEwMDQ4WjAzMTEwLwYDVQQD
Eyg0Y2NkMzIyYWE1NGI4MGU3ZTVjZDQyZGMyZWU4Yzg2NTUwZmZhMjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQCMU1kU8Y2tB5F/OHwS7z9F2qle
NqDRyRHvGME91s19vF8BofGQ7DxWTvx/MxME72Gwhr6CdiUabCjfDciaHJOVutJd
RRvdKW25a9hvijgHz4AnXm5UuGjh4ahF+7ZYiLQ6PNOmk4TdvUl070IRPknmrVOX
7trqvNmYyOa1Kn2myUnjDvXYsUHj8Ff0TjYZCTXlmc63ZEXx6BGtyuOk3ZcDpj0q
S7NlQ75XkDJF+kfc+iKvJ4rVYhEA0NL5uLeltGK2/HbBn9GPQh4WVX5tBn4XZGYn
D/IZ+C4lG+vg6l64KfIxvQnTJPl3PHCM66943B/n0NQOWv3MmcyG64zCowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEzNMiqlS4Dn5c1C3C7oyGVQ/6JmMB8GA1UdIwQY
MBaAFNyvLFvjB6RqYWl7yocL7KI07CpHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0s4c1ctTUhwR3BoYVh2S2h3dnNvalRzS2tjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85NGY1YzgtYjQxYy00ODVhLWIzZGIt
N2Q4Y2I1M2RjMDg2LzEvM0s4c1ctTUhwR3BoYVh2S2h3dnNvalRzS2tjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni85NGY1YzgtYjQxYy00ODVhLWIzZGItN2Q4Y2I1M2RjMDg2
LzEvM0s4c1ctTUhwR3BoYVh2S2h3dnNvalRzS2tjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfGDNKl1e
r82p0bhO1dyr1DocXW4hiNsjm6g6L0XKOjSXxwQMw98+ZPBgPX8on9QyJQzJvryJ
WqWN2EKdNhbXUUIb4uuBLFQY0j5h26wszPs54fj1G2Bt/s2auz6Ikd/awrQC9Vnc
KxBI1IUDtAmqWLwW0gXcG9NE87WFXru6Cm3tW6R0W0EdlPvcJTcYERa0WKS7Zv2r
nj8Ieb16pCbRQwZ5R+lPlMXuYWPllOCbqDP2D5+TUxOEA0CWVcoXe/OUpnhVVMXz
YpPRysSnYGdiOuMrNoyWEVR47M5axe088EmB6p3/YCjJq4ACYQekUiep2HmWtX/L
+x9/ejuTzF0+Nw==
-----END CERTIFICATE-----
Generated at Sun Oct 18 07:08:14 2026 by rpki-client