Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
File: 3QtmPEXXvCck0WhIUIdYHhREj7Y.mft (raw, json)
Hash identifier: T4fFXL46CXfL4xVj/HM2wCRkCWRsnjdf6M1xkgiX67Q=
Subject key identifier: 1D:F0:A3:97:86:A4:01:5F:67:8A:F5:C9:47:DB:0D:C7:40:55:8D:24
Authority key identifier: DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
Certificate issuer: /CN=dd0b663c45d7bc2724d168485087581e14448fb6
Certificate serial: 01A13F704F4315DF8DD8F240E8FF108A0CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 12:01:27 +0000
Manifest this update: Thu 15 Oct 2026 12:01:27 +0000
Manifest next update: Fri 16 Oct 2026 12:01:27 +0000
Files and hashes: 1: 0zAvG8q_rQz542VLQHfI3pwn2hU.roa (hash: EpeZpmHs3b50RgbC9T7I86EOA85BMvieUCH/Qo6Mt6U=)
2: 3QtmPEXXvCck0WhIUIdYHhREj7Y.crl (hash: 5lOvZ5dqZ0k+bhKrOZ+f5CRtiXz++ymTNSjqpF/G8Pc=)
3: gozTMRP9KybW0YQlfst5QWvJTAc.roa (hash: 1fB1QbWdo2Si+L9RD7xiEIKgMl1IQRY1BWEJBSr6TVA=)
4: nCAbVn_gsNs4x4asBKyazyvKXR0.roa (hash: Ir2ZDg7CX0Hx7nK6/8SSzS9hwNZYvwP7LhXhdGV2tlA=)
5: s5RTg8fa0nQHIcIumLzUhuAAt24.roa (hash: cqMD2IDYqFBpxsaJVxm5d2TxnTtqRKRBltHR4geFTsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:4f:43:15:df:8d:d8:f2:40:e8:ff:10:8a:0c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd0b663c45d7bc2724d168485087581e14448fb6
Validity
Not Before: Oct 15 12:01:27 2026 GMT
Not After : Oct 16 12:01:27 2026 GMT
Subject: CN=1df0a39786a4015f678af5c947db0dc740558d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:59:2a:e1:1e:25:f9:7c:d8:4e:b3:c8:10:cf:
a4:5c:dc:dc:aa:72:7f:ab:84:1a:65:c0:6e:14:bc:
d9:48:cb:eb:91:ec:6b:43:8b:ca:a1:f5:f3:3b:76:
c0:42:89:0c:4a:ac:31:10:4b:bc:0b:2a:2b:1a:e8:
0e:2b:fd:e0:22:67:a6:db:a9:31:39:e1:b2:9a:ef:
2d:19:d2:3b:a5:43:f1:aa:bb:da:98:79:1c:3f:32:
2d:c8:01:e0:76:a9:28:fd:e8:78:76:95:84:49:0e:
ef:7f:cc:d1:7b:c4:c0:73:e0:12:6e:61:df:19:bf:
fa:fd:14:71:87:3c:d4:42:d6:d9:9b:73:58:4f:43:
57:ab:98:dd:8e:bc:e2:c9:71:bf:f0:0d:d0:68:3f:
6e:96:c6:2c:4a:8f:c6:eb:a6:2b:6d:11:4d:68:dd:
8b:a8:a5:0c:32:59:01:37:a4:a1:eb:43:ba:23:0e:
e6:00:92:46:ef:6a:56:86:d5:74:1f:05:ae:da:78:
d5:58:5b:b0:2f:f9:f5:e9:ff:10:21:9f:9a:7f:d0:
30:1e:64:9f:d6:73:bc:43:58:57:60:89:ac:a3:cb:
fa:e4:b5:63:09:3d:06:bd:86:76:db:85:1f:d6:e9:
cf:7d:e8:3c:f1:ba:8b:4f:a6:73:68:26:52:61:da:
47:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F0:A3:97:86:A4:01:5F:67:8A:F5:C9:47:DB:0D:C7:40:55:8D:24
X509v3 Authority Key Identifier:
keyid:DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:dc:72:46:bc:15:e0:93:3a:3f:43:01:54:c7:30:35:96:c8:
c4:d2:09:46:51:1f:88:39:d9:73:e6:9a:83:05:ca:c4:01:bc:
90:e6:a6:1f:20:f3:e0:6c:10:a7:4a:31:1f:f9:29:37:b6:3e:
b7:a9:a1:ec:eb:84:21:a9:bb:4e:23:6e:ea:30:64:d0:4f:ed:
45:5c:03:0d:3e:57:2c:39:0b:20:40:db:54:9a:3b:d4:d4:57:
39:4b:65:ec:1d:f5:da:2a:ff:8c:2e:1a:1d:bc:b2:bf:a8:7d:
78:c6:ae:bb:c3:f0:21:f1:0e:f2:ef:f6:fc:a6:bb:9f:27:29:
72:0e:c5:63:a4:40:21:66:b9:03:2c:1c:01:d3:67:17:37:65:
93:5a:62:f7:b4:86:48:30:dc:33:6d:2a:fc:11:1d:89:5e:19:
ea:d8:5a:41:cc:ed:ad:ad:26:09:6c:a8:69:f0:c5:ea:4a:35:
b0:6c:4e:de:10:2d:05:41:1c:a0:e5:9e:6f:da:4f:07:b3:24:
79:05:aa:5a:45:14:50:b0:c4:dd:16:7c:68:2b:27:9e:d9:7d:
f3:dc:dd:51:ca:96:f9:d0:c1:d2:52:d0:d1:fc:4c:37:4c:4c:
cd:49:e1:cb:ab:b0:86:35:6c:a0:84:1f:7e:54:0f:4b:da:68:
60:3b:da:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/cE9DFd+N2PJA6P8QigzsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMGI2NjNjNDVkN2JjMjcyNGQxNjg0ODUwODc1ODFlMTQ0
NDhmYjYwHhcNMjYxMDE1MTIwMTI3WhcNMjYxMDE2MTIwMTI3WjAzMTEwLwYDVQQD
EygxZGYwYTM5Nzg2YTQwMTVmNjc4YWY1Yzk0N2RiMGRjNzQwNTU4ZDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1kq4R4l+XzYTrPIEM+kXNzcqnJ/
q4QaZcBuFLzZSMvrkexrQ4vKofXzO3bAQokMSqwxEEu8CyorGugOK/3gImem26kx
OeGymu8tGdI7pUPxqrvamHkcPzItyAHgdqko/eh4dpWESQ7vf8zRe8TAc+ASbmHf
Gb/6/RRxhzzUQtbZm3NYT0NXq5jdjrziyXG/8A3QaD9ulsYsSo/G66YrbRFNaN2L
qKUMMlkBN6Sh60O6Iw7mAJJG72pWhtV0HwWu2njVWFuwL/n16f8QIZ+af9AwHmSf
1nO8Q1hXYImso8v65LVjCT0GvYZ224Uf1unPfeg88bqLT6ZzaCZSYdpHkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3wo5eGpAFfZ4r1yUfbDcdAVY0kMB8GA1UdIwQY
MBaAFN0LZjxF17wnJNFoSFCHWB4URI+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1F0bVBFWFh2Q2NrMFdoSVVJZFlIaFJFajdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9lZGMyMzgtNGMwYS00NmVkLWJjMjQt
M2I5ZTNjOGEyZmNhLzEvM1F0bVBFWFh2Q2NrMFdoSVVJZFlIaFJFajdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9lZGMyMzgtNGMwYS00NmVkLWJjMjQtM2I5ZTNjOGEyZmNh
LzEvM1F0bVBFWFh2Q2NrMFdoSVVJZFlIaFJFajdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfNxyRrwV
4JM6P0MBVMcwNZbIxNIJRlEfiDnZc+aagwXKxAG8kOamHyDz4GwQp0oxH/kpN7Y+
t6mh7OuEIam7TiNu6jBk0E/tRVwDDT5XLDkLIEDbVJo71NRXOUtl7B312ir/jC4a
Hbyyv6h9eMauu8PwIfEO8u/2/Ka7nycpcg7FY6RAIWa5AywcAdNnFzdlk1pi97SG
SDDcM20q/BEdiV4Z6thaQcztra0mCWyoafDF6ko1sGxO3hAtBUEcoOWeb9pPB7Mk
eQWqWkUUULDE3RZ8aCsnntl989zdUcqW+dDB0lLQ0fxMN0xMzUnhy6uwhjVsoIQf
flQPS9poYDvang==
-----END CERTIFICATE-----
Generated at Thu Oct 15 18:22:42 2026 by rpki-client