Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
File: 3OVg8OyFDainwPjW84JRAtTeSs4.mft (raw, json)
Hash identifier: qCedfvbtsfLNbm1qG0tLeAJXsCLmMGRu4NS0RCm7iYc=
Subject key identifier: F3:04:0D:68:FB:14:5C:5E:B4:43:8E:75:7B:F9:C3:96:65:6C:90:0A
Authority key identifier: DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE
Certificate issuer: /CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
Certificate serial: 01A001DD0DA108D753DAF287A6B23727E8B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 20:00:59 +0000
Manifest this update: Fri 14 Aug 2026 20:00:59 +0000
Manifest next update: Sat 15 Aug 2026 20:00:59 +0000
Files and hashes: 1: 3OVg8OyFDainwPjW84JRAtTeSs4.crl (hash: zo/DmjTMJEVA9gEuuLuJqr0TP0CFKFRIZYC6JSefnoE=)
2: 6K26AJnKFSRQ6qeqQiaBSR5tmsk.roa (hash: Uasee9UdIsrJgyTXIlKOU2BJMKL73nIUt5Ls4sJkN9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:0d:a1:08:d7:53:da:f2:87:a6:b2:37:27:e8:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
Validity
Not Before: Aug 14 20:00:59 2026 GMT
Not After : Aug 15 20:00:59 2026 GMT
Subject: CN=f3040d68fb145c5eb4438e757bf9c396656c900a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cf:61:b6:4c:ee:67:ec:4f:cf:d7:fc:77:88:
a8:72:f0:a1:f6:13:ef:03:40:bc:c4:8a:85:1a:10:
ba:bb:8e:30:6f:d2:24:3c:a0:7a:dd:af:34:3c:42:
96:c6:cc:62:6b:2e:27:86:34:48:08:76:42:57:dd:
11:43:d0:2d:85:2d:11:1f:be:8a:1f:17:9d:53:1a:
8f:a4:65:92:f4:76:0a:c6:8c:78:08:d9:d0:b7:fc:
1b:bb:db:28:eb:6b:23:7f:69:48:49:f6:39:f9:1f:
13:02:cd:c1:f9:1e:37:22:a0:bc:43:d7:95:0d:5e:
68:d5:43:57:43:9f:fc:74:bb:fe:ba:a1:cd:0a:c9:
99:3a:a1:1a:7d:ff:ca:aa:3a:b3:7a:ec:7a:9a:30:
2d:e8:65:be:4a:bd:e1:b7:7b:1a:94:ad:ee:c8:27:
f6:b8:1a:d2:8b:ba:bb:d5:e6:91:90:80:22:42:5c:
64:26:b5:66:b7:dd:4f:a1:a7:c7:fb:0c:03:f7:ee:
bb:c2:22:0b:ca:d3:10:1b:46:5a:72:0c:98:99:77:
fd:86:09:fa:05:4e:94:55:71:8c:0f:22:aa:67:d9:
84:4a:bd:5c:bb:84:ce:f3:7a:48:22:1f:5f:ec:40:
2f:61:ff:48:73:12:38:23:34:d9:2c:d8:52:6b:43:
7c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:04:0D:68:FB:14:5C:5E:B4:43:8E:75:7B:F9:C3:96:65:6C:90:0A
X509v3 Authority Key Identifier:
keyid:DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:62:d1:44:a3:d3:6d:a7:03:66:36:cc:a5:17:82:ae:ed:d7:
c1:6d:81:f3:7a:ee:bc:b3:01:0c:55:a7:c8:7e:db:79:38:01:
46:45:40:84:5f:6f:db:2a:ba:71:40:1b:c5:a5:5b:4b:0c:c0:
6e:d8:9b:05:37:d0:bb:3d:0e:c4:5f:ae:4d:ce:55:f8:e6:99:
02:b9:15:b8:6a:52:7e:9e:c9:62:2d:e2:2c:a8:83:74:17:6b:
85:c1:78:8e:a0:79:d5:db:1a:48:a5:b7:ee:10:70:7e:f4:dc:
83:0d:5c:29:ec:39:f3:00:60:1f:6f:38:bf:60:4e:57:be:13:
45:15:19:5a:bb:36:95:f4:ff:b0:9b:9f:a2:e8:f2:29:68:78:
f3:7b:68:93:bb:8e:cf:95:99:89:30:8a:37:35:f5:70:bb:1e:
74:3b:36:83:a4:a2:20:3c:98:7a:1a:57:fa:f5:10:b0:e9:9a:
e0:d2:be:d5:31:29:5c:f4:43:28:6c:fa:ec:e9:ca:4d:4c:2a:
03:2a:3e:4e:4f:c4:08:33:99:b7:30:75:90:6a:64:32:53:fa:
4d:d4:f5:e8:29:a9:d6:07:d7:b3:bf:97:28:b4:2d:04:a4:61:
9f:1d:5a:c7:aa:68:2e:08:96:fa:68:ce:21:39:05:f7:93:a2:
33:65:d7:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAB3Q2hCNdT2vKHprI3J+i0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZTU2MGYwZWM4NTBkYThhN2MwZjhkNmYzODI1MTAyZDRk
ZTRhY2UwHhcNMjYwODE0MjAwMDU5WhcNMjYwODE1MjAwMDU5WjAzMTEwLwYDVQQD
EyhmMzA0MGQ2OGZiMTQ1YzVlYjQ0MzhlNzU3YmY5YzM5NjY1NmM5MDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt89htkzuZ+xPz9f8d4iocvCh9hPv
A0C8xIqFGhC6u44wb9IkPKB63a80PEKWxsxiay4nhjRICHZCV90RQ9AthS0RH76K
HxedUxqPpGWS9HYKxox4CNnQt/wbu9so62sjf2lISfY5+R8TAs3B+R43IqC8Q9eV
DV5o1UNXQ5/8dLv+uqHNCsmZOqEaff/Kqjqzeux6mjAt6GW+Sr3ht3salK3uyCf2
uBrSi7q71eaRkIAiQlxkJrVmt91PoafH+wwD9+67wiILytMQG0ZacgyYmXf9hgn6
BU6UVXGMDyKqZ9mESr1cu4TO83pIIh9f7EAvYf9IcxI4IzTZLNhSa0N8nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMEDWj7FFxetEOOdXv5w5ZlbJAKMB8GA1UdIwQY
MBaAFNzlYPDshQ2op8D41vOCUQLU3krOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM09WZzhPeUZEYWlud1BqVzg0SlJBdFRlU3M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8wNTNkMzktMzc0Yy00Mzg3LTk5NDUt
NDMxZjc1YmE4Njc1LzEvM09WZzhPeUZEYWlud1BqVzg0SlJBdFRlU3M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8wNTNkMzktMzc0Yy00Mzg3LTk5NDUtNDMxZjc1YmE4Njc1
LzEvM09WZzhPeUZEYWlud1BqVzg0SlJBdFRlU3M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU2LRRKPT
bacDZjbMpReCru3XwW2B83ruvLMBDFWnyH7beTgBRkVAhF9v2yq6cUAbxaVbSwzA
btibBTfQuz0OxF+uTc5V+OaZArkVuGpSfp7JYi3iLKiDdBdrhcF4jqB51dsaSKW3
7hBwfvTcgw1cKew58wBgH284v2BOV74TRRUZWrs2lfT/sJufoujyKWh483tok7uO
z5WZiTCKNzX1cLsedDs2g6SiIDyYehpX+vUQsOma4NK+1TEpXPRDKGz67OnKTUwq
Ayo+Tk/ECDOZtzB1kGpkMlP6TdT16Cmp1gfXs7+XKLQtBKRhnx1ax6poLgiW+mjO
ITkF95OiM2XXLQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:24:03 2026 by rpki-client