Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
File: 3EFBHpPiXV7GUJlWmxtcX63Brj0.mft (raw, json)
Hash identifier: GETlDusBmtQF1Smllb2CkibxOMEdXwGYvWyX25TwlZo=
Subject key identifier: 83:5B:62:F3:F1:41:F5:CA:D2:48:72:6B:F1:F7:56:52:8D:8C:4C:F1
Authority key identifier: DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
Certificate issuer: /CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Certificate serial: 01A08CE895057ADAC75678835847B99E3F56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
Manifest number: 1613
Signing time: Thu 10 Sep 2026 20:00:47 +0000
Manifest this update: Thu 10 Sep 2026 20:00:47 +0000
Manifest next update: Fri 11 Sep 2026 20:00:47 +0000
Files and hashes: 1: 2uJAkewiUJwsbNaj2yvunQboIco.roa (hash: FFjpTcabKOY4bvHAqUpVIWDG0dv6yHtpa4jSe9dcbIQ=)
2: 3EFBHpPiXV7GUJlWmxtcX63Brj0.crl (hash: 7MTtfDOE6nWNirHNNMXLoIo8psJhz4E2Eung/WLCIF4=)
3: B1STsfdesV5NfTBKRKCVN2ABrCw.roa (hash: NWB6mpqgZNqK5Ki19/Fr7idV+OhlroMe3Jwdlj+J+M0=)
4: VaQhwNUDpB1f377_pgDC7bKIVs8.roa (hash: yIsP2S+y7+H5E1qVaCf/heokAGlt0wDZeCh1+1PijTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e8:95:05:7a:da:c7:56:78:83:58:47:b9:9e:3f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Validity
Not Before: Sep 10 20:00:47 2026 GMT
Not After : Sep 11 20:00:47 2026 GMT
Subject: CN=835b62f3f141f5cad248726bf1f756528d8c4cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0a:ea:97:dc:a2:93:82:e0:79:a3:85:49:ff:
8d:db:05:86:e4:eb:a5:7e:2b:93:2a:10:50:8d:59:
8a:9c:90:ad:f7:db:95:f4:74:1f:51:76:f3:f8:37:
11:a1:28:f6:b6:a9:96:9d:a4:7f:c5:5b:28:fc:b1:
28:01:e7:ff:da:b3:a7:0a:1c:50:9f:96:d1:de:6d:
78:c3:54:fa:0d:2c:00:30:cf:39:16:bc:53:ec:ea:
52:b2:46:c9:1e:c0:16:9c:e0:e8:ec:4e:96:0b:8e:
32:11:24:c7:11:54:e3:db:40:9c:a3:5d:3f:11:36:
f1:27:a2:b9:4f:37:b3:de:37:aa:a1:86:53:fd:ed:
0a:2f:d8:34:03:09:1a:b2:9d:5f:be:8c:a4:ad:26:
40:72:d7:e2:67:0c:20:17:03:9e:f1:51:1b:e4:e6:
04:74:c4:19:44:0b:6e:8a:29:96:19:a6:fc:6c:4c:
59:de:28:98:8f:96:ec:80:92:b0:f5:41:b3:22:3e:
e5:90:b4:80:18:68:96:1f:28:16:9b:ce:29:39:3b:
c7:34:60:c4:f2:fa:10:d3:90:e4:d3:e1:72:45:a0:
f8:65:97:19:79:e3:4e:71:9a:10:67:b4:44:41:b9:
a6:1e:18:e2:c6:e9:0f:04:9e:47:cd:ac:f4:de:c0:
1a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5B:62:F3:F1:41:F5:CA:D2:48:72:6B:F1:F7:56:52:8D:8C:4C:F1
X509v3 Authority Key Identifier:
keyid:DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ab:e9:ac:d6:2f:ee:fd:07:60:04:fd:6e:eb:53:f4:4c:52:
09:04:af:87:26:d3:bb:e0:cc:6f:30:64:fc:2e:32:67:94:3c:
76:8e:4b:49:1b:24:c3:aa:24:56:0f:c3:8a:16:28:9a:97:40:
33:5e:3e:67:20:20:71:9e:22:78:c9:cb:0d:d8:38:8e:ae:bd:
62:58:3c:92:79:16:ff:21:18:d6:2f:23:24:96:f6:2e:7b:ac:
d4:f8:0b:a7:84:6a:9b:fd:83:11:42:b9:d6:23:25:17:e5:42:
b1:68:53:d6:66:85:60:d8:d7:6a:02:cb:7f:e7:88:cc:cf:35:
91:a0:38:fe:11:1a:5e:fe:63:54:10:7c:73:b6:d6:d1:f1:65:
f6:ae:21:af:40:15:b6:01:1b:14:32:77:d8:27:26:d8:93:d0:
f0:f7:55:75:29:61:d3:e0:1c:7e:23:22:78:3a:da:c1:04:a8:
55:da:16:0c:be:2f:24:ba:95:0b:71:04:c9:bf:f1:91:57:86:
89:0c:da:86:0a:70:bf:fd:5e:38:f3:bd:3a:52:88:ec:ca:e4:
aa:20:44:86:e8:72:37:aa:bc:81:77:b3:e1:f3:d1:86:9d:cd:
a9:9c:93:b0:38:02:05:a9:2e:b3:f9:95:48:6d:9b:db:7e:4c:
f0:22:18:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCM6JUFetrHVniDWEe5nj9WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNDE0MTFlOTNlMjVkNWVjNjUwOTk1NjliMWI1YzVmYWRj
MWFlM2QwHhcNMjYwOTEwMjAwMDQ3WhcNMjYwOTExMjAwMDQ3WjAzMTEwLwYDVQQD
Eyg4MzViNjJmM2YxNDFmNWNhZDI0ODcyNmJmMWY3NTY1MjhkOGM0Y2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Qrql9yik4LgeaOFSf+N2wWG5Oul
fiuTKhBQjVmKnJCt99uV9HQfUXbz+DcRoSj2tqmWnaR/xVso/LEoAef/2rOnChxQ
n5bR3m14w1T6DSwAMM85FrxT7OpSskbJHsAWnODo7E6WC44yESTHEVTj20Cco10/
ETbxJ6K5Tzez3jeqoYZT/e0KL9g0Awkasp1fvoykrSZActfiZwwgFwOe8VEb5OYE
dMQZRAtuiimWGab8bExZ3iiYj5bsgJKw9UGzIj7lkLSAGGiWHygWm84pOTvHNGDE
8voQ05Dk0+FyRaD4ZZcZeeNOcZoQZ7REQbmmHhjixukPBJ5Hzaz03sAaHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINbYvPxQfXK0khya/H3VlKNjEzxMB8GA1UdIwQY
MBaAFNxBQR6T4l1exlCZVpsbXF+twa49MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0VGQkhwUGlYVjdHVUpsV214dGNYNjNCcmowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8zZDQ3MzEtOGNmMy00MzI3LWFlNmEt
NTEzODdkMTYwYmE5LzEvM0VGQkhwUGlYVjdHVUpsV214dGNYNjNCcmowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8zZDQ3MzEtOGNmMy00MzI3LWFlNmEtNTEzODdkMTYwYmE5
LzEvM0VGQkhwUGlYVjdHVUpsV214dGNYNjNCcmowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIKvprNYv
7v0HYAT9butT9ExSCQSvhybTu+DMbzBk/C4yZ5Q8do5LSRskw6okVg/DihYompdA
M14+ZyAgcZ4ieMnLDdg4jq69Ylg8knkW/yEY1i8jJJb2Lnus1PgLp4Rqm/2DEUK5
1iMlF+VCsWhT1maFYNjXagLLf+eIzM81kaA4/hEaXv5jVBB8c7bW0fFl9q4hr0AV
tgEbFDJ32Ccm2JPQ8PdVdSlh0+AcfiMieDrawQSoVdoWDL4vJLqVC3EEyb/xkVeG
iQzahgpwv/1eOPO9OlKI7MrkqiBEhuhyN6q8gXez4fPRhp3NqZyTsDgCBakus/mV
SG2b235M8CIY2g==
-----END CERTIFICATE-----
Generated at Fri Sep 11 02:50:23 2026 by rpki-client