Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
File: 3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft (raw, json)
Hash identifier: iuYTXJZFzK4yiu1OjxgahT1KlAQ4ouaTuTzrp6P40+0=
Subject key identifier: 06:F3:E4:C5:C5:4C:15:AC:59:0A:96:8F:CB:88:96:46:1A:0A:EB:5E
Authority key identifier: DC:32:7A:F3:2A:98:49:27:57:B2:00:EA:04:0D:B2:4E:C3:13:65:92
Certificate issuer: /CN=dc327af32a98492757b200ea040db24ec3136592
Certificate serial: 01A13E266A7DDDDF37CDB58005FC2EF3C732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
Manifest number: 0881
Signing time: Thu 15 Oct 2026 06:01:07 +0000
Manifest this update: Thu 15 Oct 2026 06:01:07 +0000
Manifest next update: Fri 16 Oct 2026 06:01:07 +0000
Files and hashes: 1: 3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl (hash: h2hNDIsWojHstevjTAWelE3wzod3IF93u9/1Hfe0bBg=)
2: SAIHz1BSLN8cZrRdxLMBgPm4XlA.roa (hash: McGCOon8pvSTjIiegxDTJso9YyCAyFlc2PqcW0Wd9HE=)
3: kAZJSgS29MgxZueFo76bZT3RLoo.roa (hash: 3PDTIlQgL4yc+u1IAv1XjtSyfqW/Sc3TvGpNsbSmrQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:6a:7d:dd:df:37:cd:b5:80:05:fc:2e:f3:c7:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc327af32a98492757b200ea040db24ec3136592
Validity
Not Before: Oct 15 06:01:07 2026 GMT
Not After : Oct 16 06:01:07 2026 GMT
Subject: CN=06f3e4c5c54c15ac590a968fcb8896461a0aeb5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7c:6a:e7:12:b8:26:a9:4f:7c:3d:c4:56:e9:
b7:04:a6:08:6b:4c:5f:3a:ad:0a:65:3b:bd:b5:30:
52:f7:4c:5c:1d:7c:d5:7f:b7:6c:4a:2a:c1:26:96:
fe:7f:a4:a3:4c:bb:de:92:d4:18:6b:1c:dc:4b:1e:
97:93:43:e2:0e:b8:e6:9d:6f:e0:22:05:1a:d1:e0:
aa:e7:8a:0b:d2:b1:e8:84:a3:5c:15:8c:7b:bb:23:
a0:18:2a:34:ce:31:9f:3b:41:5a:8d:a5:58:a7:53:
3d:2a:e9:73:7d:b8:db:1c:56:8d:b3:a2:3c:ba:56:
eb:f7:f0:43:cd:bb:3f:ea:3d:4e:2a:e7:7c:a7:ec:
d5:5f:63:7c:70:5a:b3:f9:ac:35:c7:8e:e7:6e:cd:
33:5d:a8:77:e9:a2:14:54:04:f5:1b:e5:c2:df:8e:
a7:f9:11:35:a0:fd:f8:76:36:ef:d5:79:28:e3:ee:
9e:93:16:f9:7d:fa:a5:7e:1a:6b:ed:72:a1:92:e1:
66:de:0a:55:4b:bd:e2:11:b4:59:03:64:95:0c:3a:
4c:4c:b0:02:b8:3f:d7:01:0b:63:3a:7a:58:56:dc:
50:a7:f3:3a:3e:da:c2:e4:36:72:a2:2d:d2:29:ce:
71:ea:91:59:2b:00:9c:9c:69:3f:f0:8c:82:86:95:
a3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F3:E4:C5:C5:4C:15:AC:59:0A:96:8F:CB:88:96:46:1A:0A:EB:5E
X509v3 Authority Key Identifier:
keyid:DC:32:7A:F3:2A:98:49:27:57:B2:00:EA:04:0D:B2:4E:C3:13:65:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DJ68yqYSSdXsgDqBA2yTsMTZZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a4f619-4e93-41d6-846c-16219e140fa7/1/3DJ68yqYSSdXsgDqBA2yTsMTZZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f1:0e:9a:f7:21:6b:8f:45:6b:07:cf:19:28:ee:b7:8b:eb:
37:bf:df:07:24:88:e5:a3:5f:e2:c0:c8:cb:6c:8c:a3:97:a5:
18:20:60:1b:fd:37:86:c8:98:2d:d6:83:5d:a9:24:53:dc:e3:
29:98:a3:1a:1f:17:04:32:ab:73:1b:0f:aa:e3:f5:09:f4:18:
ba:0d:04:40:6e:ec:a3:b0:2c:b9:76:d6:1b:bd:5b:85:e9:94:
5f:55:8e:d6:b9:67:19:eb:02:e0:60:4f:56:dc:36:11:4c:dc:
44:be:65:3a:f6:27:43:f0:fc:54:65:63:6b:5b:f5:14:4d:18:
71:ee:f7:a1:b7:6d:08:ef:0d:c7:bb:e8:6a:37:eb:bf:86:cd:
23:0a:db:60:9e:a9:a4:1e:5e:c5:b1:01:e9:31:7d:65:8c:66:
ec:d1:89:28:ec:1a:a7:f9:f2:eb:4e:02:db:04:10:ad:be:50:
f8:2c:d1:0d:03:d6:ee:9f:f6:d1:3a:cf:73:65:d0:1d:8d:aa:
90:05:93:77:c7:e1:8a:1e:b2:4e:42:71:c4:f8:ab:ac:8b:c1:
6e:25:66:83:ae:90:4b:64:de:ee:25:6e:a4:55:55:31:a6:7f:
81:35:49:ef:0f:e3:09:1d:24:d9:68:d9:14:16:91:d5:8a:11:
cf:a2:44:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+Jmp93d83zbWABfwu88cyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMzI3YWYzMmE5ODQ5Mjc1N2IyMDBlYTA0MGRiMjRlYzMx
MzY1OTIwHhcNMjYxMDE1MDYwMTA3WhcNMjYxMDE2MDYwMTA3WjAzMTEwLwYDVQQD
EygwNmYzZTRjNWM1NGMxNWFjNTkwYTk2OGZjYjg4OTY0NjFhMGFlYjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3xq5xK4JqlPfD3EVum3BKYIa0xf
Oq0KZTu9tTBS90xcHXzVf7dsSirBJpb+f6SjTLvektQYaxzcSx6Xk0PiDrjmnW/g
IgUa0eCq54oL0rHohKNcFYx7uyOgGCo0zjGfO0FajaVYp1M9KulzfbjbHFaNs6I8
ulbr9/BDzbs/6j1OKud8p+zVX2N8cFqz+aw1x47nbs0zXah36aIUVAT1G+XC346n
+RE1oP34djbv1Xko4+6ekxb5ffqlfhpr7XKhkuFm3gpVS73iEbRZA2SVDDpMTLAC
uD/XAQtjOnpYVtxQp/M6PtrC5DZyoi3SKc5x6pFZKwCcnGk/8IyChpWjTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbz5MXFTBWsWQqWj8uIlkYaCuteMB8GA1UdIwQY
MBaAFNwyevMqmEknV7IA6gQNsk7DE2WSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0RKNjh5cVlTU2RYc2dEcUJBMnlUc01UWlpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9hNGY2MTktNGU5My00MWQ2LTg0NmMt
MTYyMTllMTQwZmE3LzEvM0RKNjh5cVlTU2RYc2dEcUJBMnlUc01UWlpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9hNGY2MTktNGU5My00MWQ2LTg0NmMtMTYyMTllMTQwZmE3
LzEvM0RKNjh5cVlTU2RYc2dEcUJBMnlUc01UWlpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/EOmvch
a49FawfPGSjut4vrN7/fBySI5aNf4sDIy2yMo5elGCBgG/03hsiYLdaDXakkU9zj
KZijGh8XBDKrcxsPquP1CfQYug0EQG7so7AsuXbWG71bhemUX1WO1rlnGesC4GBP
Vtw2EUzcRL5lOvYnQ/D8VGVja1v1FE0Yce73obdtCO8Nx7voajfrv4bNIwrbYJ6p
pB5exbEB6TF9ZYxm7NGJKOwap/ny604C2wQQrb5Q+CzRDQPW7p/20TrPc2XQHY2q
kAWTd8fhih6yTkJxxPirrIvBbiVmg66QS2Te7iVupFVVMaZ/gTVJ7w/jCR0k2WjZ
FBaR1YoRz6JEXw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:30:12 2026 by rpki-client