Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
File: 3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft (raw, json)
Hash identifier: wH7waQ7ggYVecXZm9RJs3Qy11l50GZqP9rCT6d9Mf7E=
Subject key identifier: A4:F9:F0:49:C9:DA:BE:75:59:3C:7F:A0:F2:D6:D0:B1:78:DE:1D:76
Authority key identifier: DF:18:0E:05:43:D4:71:DC:F0:D8:38:60:D6:BE:63:95:C2:B8:88:88
Certificate issuer: /CN=df180e0543d471dcf0d83860d6be6395c2b88888
Certificate serial: 01A0010211EED81B5480FE46C7C30ACCB7C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
Manifest number: 0D5C
Signing time: Fri 14 Aug 2026 16:01:47 +0000
Manifest this update: Fri 14 Aug 2026 16:01:47 +0000
Manifest next update: Sat 15 Aug 2026 16:01:47 +0000
Files and hashes: 1: 3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl (hash: 4cKE8979+ovQf2bwrQ6IjJgcZHJE+9zdsCsmOZ8Fgag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:02:11:ee:d8:1b:54:80:fe:46:c7:c3:0a:cc:b7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df180e0543d471dcf0d83860d6be6395c2b88888
Validity
Not Before: Aug 14 16:01:47 2026 GMT
Not After : Aug 15 16:01:47 2026 GMT
Subject: CN=a4f9f049c9dabe75593c7fa0f2d6d0b178de1d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:af:de:3c:c4:36:9f:d8:c8:7d:35:40:4d:6d:
3f:cf:66:e5:d3:36:b6:cf:f7:49:21:11:e9:cf:94:
32:12:d0:6e:f5:25:bc:6c:da:af:15:a3:12:d0:1c:
05:22:b2:ab:6e:b8:1c:19:1a:29:35:f9:00:0a:1d:
c6:e0:42:bb:59:cb:ab:a9:0f:c2:ac:3c:45:63:75:
cd:fc:80:ab:60:c1:61:80:bb:06:dd:62:48:a2:5b:
4e:f7:56:24:04:a9:f3:59:1b:9d:73:ac:10:e0:c2:
6f:cd:9d:c9:33:08:51:d4:49:47:7e:f9:61:3b:2d:
23:1c:21:2f:7c:9f:1b:f7:06:56:50:d3:c2:27:b4:
2b:8e:e6:cd:d9:01:34:fe:f1:90:cd:18:a6:45:8a:
7e:74:31:d1:70:75:bc:7a:ca:a6:fb:c5:6b:24:45:
69:6f:15:ed:5c:e5:fa:d4:dc:11:ba:4d:8d:b5:30:
a2:35:b7:e0:bd:2b:47:a2:81:b3:ba:1e:3c:4b:cb:
5f:33:25:0a:a0:a9:d6:ec:df:8f:58:10:99:80:95:
97:6a:46:44:f4:79:71:b7:75:f1:5b:64:51:66:e5:
0b:22:5d:c2:a1:67:30:42:39:04:df:42:88:55:0b:
30:34:72:b3:3a:8d:db:f5:b5:d9:70:59:b9:98:a5:
10:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F9:F0:49:C9:DA:BE:75:59:3C:7F:A0:F2:D6:D0:B1:78:DE:1D:76
X509v3 Authority Key Identifier:
keyid:DF:18:0E:05:43:D4:71:DC:F0:D8:38:60:D6:BE:63:95:C2:B8:88:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/30f410-82bb-411a-b2bc-c4b1446c0d8b/1/3xgOBUPUcdzw2Dhg1r5jlcK4iIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:49:73:23:32:01:62:46:79:01:85:19:eb:f5:fe:e5:c1:1d:
0c:00:f5:05:43:64:b7:26:4f:d7:b9:a9:af:2c:ef:0d:8a:f0:
df:0b:9b:ff:d3:42:c3:15:72:17:c2:72:0e:94:80:27:f1:71:
2b:db:26:7a:05:90:09:f4:ba:e7:8a:4c:d7:57:14:5c:4f:b3:
65:ac:cc:5d:77:be:b0:21:28:e7:71:9a:0f:a5:8f:d7:89:6e:
c2:9e:c5:bf:e7:89:ba:a0:ef:7f:d2:fa:f4:c5:7f:83:9e:80:
9e:45:e5:4f:3a:60:f7:4a:58:91:e9:77:37:10:6d:f9:79:00:
86:8e:98:f1:96:65:bc:76:57:6b:84:f2:40:f9:78:a7:08:70:
a1:53:4f:8a:d7:de:14:09:88:77:a5:ee:43:c2:e2:3c:0a:de:
bc:4c:ce:f1:0a:18:27:dd:eb:ca:ce:d3:30:24:6e:65:d3:4c:
8c:01:3d:bf:98:5b:68:df:2d:8c:1b:75:34:21:62:d4:de:2e:
f6:e3:8f:02:f7:bd:7f:48:65:20:b3:a6:fd:2b:7a:4d:1e:d1:
33:b5:ee:83:29:c4:bb:f4:73:6d:43:79:d6:c6:23:e8:2a:fc:
1c:d9:d1:85:b5:f1:b7:4f:ea:a2:81:db:22:bf:af:82:da:a6:
4c:f6:03:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABAhHu2BtUgP5Gx8MKzLfAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMTgwZTA1NDNkNDcxZGNmMGQ4Mzg2MGQ2YmU2Mzk1YzJi
ODg4ODgwHhcNMjYwODE0MTYwMTQ3WhcNMjYwODE1MTYwMTQ3WjAzMTEwLwYDVQQD
EyhhNGY5ZjA0OWM5ZGFiZTc1NTkzYzdmYTBmMmQ2ZDBiMTc4ZGUxZDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6/ePMQ2n9jIfTVATW0/z2bl0za2
z/dJIRHpz5QyEtBu9SW8bNqvFaMS0BwFIrKrbrgcGRopNfkACh3G4EK7WcurqQ/C
rDxFY3XN/ICrYMFhgLsG3WJIoltO91YkBKnzWRudc6wQ4MJvzZ3JMwhR1ElHfvlh
Oy0jHCEvfJ8b9wZWUNPCJ7QrjubN2QE0/vGQzRimRYp+dDHRcHW8esqm+8VrJEVp
bxXtXOX61NwRuk2NtTCiNbfgvStHooGzuh48S8tfMyUKoKnW7N+PWBCZgJWXakZE
9Hlxt3XxW2RRZuULIl3CoWcwQjkE30KIVQswNHKzOo3b9bXZcFm5mKUQDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKT58EnJ2r51WTx/oPLW0LF43h12MB8GA1UdIwQY
MBaAFN8YDgVD1HHc8Ng4YNa+Y5XCuIiIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3hnT0JVUFVjZHp3MkRoZzFyNWpsY0s0aUlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8zMGY0MTAtODJiYi00MTFhLWIyYmMt
YzRiMTQ0NmMwZDhiLzEvM3hnT0JVUFVjZHp3MkRoZzFyNWpsY0s0aUlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8zMGY0MTAtODJiYi00MTFhLWIyYmMtYzRiMTQ0NmMwZDhi
LzEvM3hnT0JVUFVjZHp3MkRoZzFyNWpsY0s0aUlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgUlzIzIB
YkZ5AYUZ6/X+5cEdDAD1BUNktyZP17mpryzvDYrw3wub/9NCwxVyF8JyDpSAJ/Fx
K9smegWQCfS654pM11cUXE+zZazMXXe+sCEo53GaD6WP14luwp7Fv+eJuqDvf9L6
9MV/g56AnkXlTzpg90pYkel3NxBt+XkAho6Y8ZZlvHZXa4TyQPl4pwhwoVNPitfe
FAmId6XuQ8LiPArevEzO8QoYJ93rys7TMCRuZdNMjAE9v5hbaN8tjBt1NCFi1N4u
9uOPAve9f0hlILOm/St6TR7RM7XugynEu/RzbUN51sYj6Cr8HNnRhbXxt0/qooHb
Ir+vgtqmTPYDGg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:56 2026 by rpki-client