Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
File: 3VXsF19u56H8H4mt91S7KghiV4o.mft (raw, json)
Hash identifier: p9AHTqkcwLLtY3R22LYoNwlGTjECHLavjQm0G5ufw/w=
Subject key identifier: B0:EF:86:9F:B9:4A:D0:77:2D:6B:63:4E:D2:EB:A1:7F:95:E2:75:E7
Authority key identifier: DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
Certificate issuer: /CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Certificate serial: 01A14082A7852F40C66DEF508BA76A917A01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
Manifest number: 1A38
Signing time: Thu 15 Oct 2026 17:01:06 +0000
Manifest this update: Thu 15 Oct 2026 17:01:06 +0000
Manifest next update: Fri 16 Oct 2026 17:01:06 +0000
Files and hashes: 1: 3VXsF19u56H8H4mt91S7KghiV4o.crl (hash: mLSMphgmrlKfXfLCzL+I7/2Rv5uZ++SI1CKrDfKgOSI=)
2: w3_eDrVHUYCcKtbza7c41NLDYIM.roa (hash: IPJ09SAjboh4Vep0OkCZipCIUFqGArpEx9t2oIDtFc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:82:a7:85:2f:40:c6:6d:ef:50:8b:a7:6a:91:7a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd55ec175f6ee7a1fc1f89adf754bb2a0862578a
Validity
Not Before: Oct 15 17:01:06 2026 GMT
Not After : Oct 16 17:01:06 2026 GMT
Subject: CN=b0ef869fb94ad0772d6b634ed2eba17f95e275e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:94:91:f3:8c:37:bb:7c:8b:dc:8e:a5:12:b3:
2e:49:5f:f7:65:64:dd:fa:8d:06:d0:3a:bf:42:aa:
b5:50:37:49:39:b7:ae:78:55:ab:53:0b:27:7a:ba:
32:22:1e:28:d4:18:17:60:16:65:81:d0:5b:08:ad:
e3:aa:e1:d3:ac:cb:62:03:59:4c:55:e4:a0:7e:55:
71:14:63:06:96:ba:ce:2f:11:8e:f8:04:8e:c8:b9:
aa:8d:fa:27:e6:e0:10:aa:dc:d2:aa:78:2f:c8:f3:
5c:07:c0:c7:65:99:18:c9:49:90:d0:28:75:0b:38:
c3:9c:1c:47:78:49:1e:ea:18:00:be:80:e7:8e:07:
0d:b6:a5:4a:14:82:37:83:f3:40:12:6c:73:12:2c:
98:a2:f9:d6:28:69:5f:52:6a:f5:1c:40:1d:39:a2:
87:16:24:f5:67:f9:3f:00:1b:3e:2c:66:07:34:64:
7e:ce:5d:fb:46:f3:fe:26:df:f3:8a:29:0b:34:a6:
89:22:29:c5:de:e7:c2:a2:f8:ad:84:55:3d:0a:30:
a4:e2:73:98:cb:73:d5:a9:ff:d3:25:f4:fa:6d:8d:
ec:0f:ea:02:d7:d2:ba:39:a4:0a:5f:de:a1:1d:72:
9f:6c:6c:80:a5:59:d9:b5:45:5f:54:f9:e2:b4:82:
d3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EF:86:9F:B9:4A:D0:77:2D:6B:63:4E:D2:EB:A1:7F:95:E2:75:E7
X509v3 Authority Key Identifier:
keyid:DD:55:EC:17:5F:6E:E7:A1:FC:1F:89:AD:F7:54:BB:2A:08:62:57:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VXsF19u56H8H4mt91S7KghiV4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/40d407-1eac-4381-8fa6-46c2cc2802f1/1/3VXsF19u56H8H4mt91S7KghiV4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ff:b8:81:62:74:bd:ce:e5:89:79:a7:5d:2b:9e:34:92:d2:
8d:28:64:54:00:94:05:f2:8c:ba:43:28:c9:49:31:bb:34:1d:
08:20:c6:e1:44:fc:42:6e:b3:95:bb:95:bc:38:a1:fc:12:98:
20:25:fa:1f:c8:26:f7:cb:c4:5e:c6:86:db:5b:c4:8e:55:52:
21:b1:04:53:ee:7a:e5:2a:fc:49:89:6b:0c:c8:1a:df:f4:ef:
37:68:bd:eb:f7:ee:69:c5:ee:57:03:df:82:fe:76:70:e2:ae:
b6:ba:ea:10:fa:62:c9:04:d7:88:3e:93:86:67:64:fb:1e:5f:
3a:5a:d5:47:47:70:b0:32:9e:1d:7c:db:ab:0c:69:58:e7:8d:
66:45:b9:5c:c5:32:24:b0:17:bc:86:54:09:fe:94:59:d7:aa:
3b:c5:02:cd:d1:ca:a6:0d:ce:d3:a2:02:a5:a0:f1:34:7b:1b:
21:95:cf:76:52:c6:97:59:98:ae:3a:71:16:f9:d3:1a:d3:7f:
0b:fb:55:84:28:a2:37:4c:bc:c9:66:08:ec:94:a4:7e:e9:2f:
38:e9:23:5a:49:2f:fb:10:8d:03:be:e3:9f:b9:f2:77:d9:8a:
e2:7b:8a:1f:fd:ae:fb:d5:0f:fe:ee:a0:21:ec:f2:30:74:64:
19:84:5b:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFAgqeFL0DGbe9Qi6dqkXoBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNTVlYzE3NWY2ZWU3YTFmYzFmODlhZGY3NTRiYjJhMDg2
MjU3OGEwHhcNMjYxMDE1MTcwMTA2WhcNMjYxMDE2MTcwMTA2WjAzMTEwLwYDVQQD
EyhiMGVmODY5ZmI5NGFkMDc3MmQ2YjYzNGVkMmViYTE3Zjk1ZTI3NWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZSR84w3u3yL3I6lErMuSV/3ZWTd
+o0G0Dq/Qqq1UDdJObeueFWrUwsneroyIh4o1BgXYBZlgdBbCK3jquHTrMtiA1lM
VeSgflVxFGMGlrrOLxGO+ASOyLmqjfon5uAQqtzSqngvyPNcB8DHZZkYyUmQ0Ch1
CzjDnBxHeEke6hgAvoDnjgcNtqVKFII3g/NAEmxzEiyYovnWKGlfUmr1HEAdOaKH
FiT1Z/k/ABs+LGYHNGR+zl37RvP+Jt/ziikLNKaJIinF3ufCovithFU9CjCk4nOY
y3PVqf/TJfT6bY3sD+oC19K6OaQKX96hHXKfbGyApVnZtUVfVPnitILTkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLDvhp+5StB3LWtjTtLroX+V4nXnMB8GA1UdIwQY
MBaAFN1V7Bdfbueh/B+JrfdUuyoIYleKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1ZYc0YxOXU1Nkg4SDRtdDkxUzdLZ2hpVjRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy80MGQ0MDctMWVhYy00MzgxLThmYTYt
NDZjMmNjMjgwMmYxLzEvM1ZYc0YxOXU1Nkg4SDRtdDkxUzdLZ2hpVjRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy80MGQ0MDctMWVhYy00MzgxLThmYTYtNDZjMmNjMjgwMmYx
LzEvM1ZYc0YxOXU1Nkg4SDRtdDkxUzdLZ2hpVjRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACv+4gWJ0
vc7liXmnXSueNJLSjShkVACUBfKMukMoyUkxuzQdCCDG4UT8Qm6zlbuVvDih/BKY
ICX6H8gm98vEXsaG21vEjlVSIbEEU+565Sr8SYlrDMga3/TvN2i96/fuacXuVwPf
gv52cOKutrrqEPpiyQTXiD6Thmdk+x5fOlrVR0dwsDKeHXzbqwxpWOeNZkW5XMUy
JLAXvIZUCf6UWdeqO8UCzdHKpg3O06ICpaDxNHsbIZXPdlLGl1mYrjpxFvnTGtN/
C/tVhCiiN0y8yWYI7JSkfukvOOkjWkkv+xCNA77jn7nyd9mK4nuKH/2u+9UP/u6g
IezyMHRkGYRbWw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 21:36:06 2026 by rpki-client