Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
File: 3iuimqARP6_TcNhl-0REmHtHMIo.mft (raw, json)
Hash identifier: gjRJPzEgdUA3cPDFmxwM0UJ0H2H0DRfdXYPa4OFaTto=
Subject key identifier: EE:2C:10:FB:DD:6E:2C:EB:CB:22:29:E3:85:53:65:A7:F9:16:E8:7F
Authority key identifier: DE:2B:A2:9A:A0:11:3F:AF:D3:70:D8:65:FB:44:44:98:7B:47:30:8A
Certificate issuer: /CN=de2ba29aa0113fafd370d865fb4444987b47308a
Certificate serial: 01A13C6E5AC0723FDA7D34D62116DBD792B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
Manifest number: 0F0F
Signing time: Wed 14 Oct 2026 22:00:27 +0000
Manifest this update: Wed 14 Oct 2026 22:00:27 +0000
Manifest next update: Thu 15 Oct 2026 22:00:27 +0000
Files and hashes: 1: 3iuimqARP6_TcNhl-0REmHtHMIo.crl (hash: ofQMZ/FrTwaoHQsaG/e2Woz0lmGK79aNOVhFslhEfH4=)
2: c52XhO4YGCrU48r6aoFS0wJifx0.roa (hash: 4+paDSnGo7aoDvCfZSAugeN0kcY8+2h3yijdRS9k2EQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:6e:5a:c0:72:3f:da:7d:34:d6:21:16:db:d7:92:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2ba29aa0113fafd370d865fb4444987b47308a
Validity
Not Before: Oct 14 22:00:27 2026 GMT
Not After : Oct 15 22:00:27 2026 GMT
Subject: CN=ee2c10fbdd6e2cebcb2229e3855365a7f916e87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:99:14:38:5e:7d:17:97:9b:57:0e:2f:78:72:
08:98:12:1b:9c:b0:73:52:0b:3b:52:42:8f:fb:0f:
f2:17:37:bb:84:1d:f9:95:65:9d:ff:42:0f:d7:a5:
03:94:2c:35:62:9e:45:f6:f4:00:51:34:d5:ab:c0:
f6:3b:e1:35:10:6f:fe:21:96:53:b9:22:30:ee:b4:
16:ca:c3:d4:41:79:05:01:c2:26:7e:ef:0d:41:f8:
70:52:96:dd:34:90:6f:a8:a8:1f:f5:5d:7b:04:64:
9a:fb:51:66:5b:8f:94:2f:5a:a0:3f:80:ab:50:cf:
53:93:f3:ed:f6:00:78:d1:14:0a:dd:92:9f:6c:05:
69:8e:eb:d5:73:ca:54:34:83:96:dd:5b:af:7b:31:
92:fc:ed:74:3b:a4:15:4f:9e:31:9c:81:8f:1a:ce:
43:ed:ea:40:a7:9c:77:c7:f1:c8:2f:1b:7b:b7:eb:
97:b2:d9:08:fa:1d:f7:91:a6:0d:19:e3:a6:99:44:
ce:66:d0:a7:46:0d:a7:ce:a0:3d:be:dd:c6:a0:52:
3e:47:95:be:1d:42:96:bb:9a:06:1d:72:be:9e:6f:
9a:78:bd:ce:3e:d2:a9:96:19:3f:8a:ae:13:62:1d:
b9:d6:91:21:13:64:e1:cd:f5:94:8f:27:1a:b2:3d:
c7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2C:10:FB:DD:6E:2C:EB:CB:22:29:E3:85:53:65:A7:F9:16:E8:7F
X509v3 Authority Key Identifier:
keyid:DE:2B:A2:9A:A0:11:3F:AF:D3:70:D8:65:FB:44:44:98:7B:47:30:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b5:40:f7:e4:1e:d8:9d:59:7a:97:1c:9a:1b:e7:46:9e:b2:
c1:62:84:54:5c:db:74:67:42:c2:f0:85:23:21:ba:7b:48:6e:
ec:dd:6f:3c:17:f9:10:8d:c0:ab:d7:1b:45:6f:d1:4b:89:39:
60:58:00:04:99:6a:27:c0:34:25:e6:05:1f:fe:04:3f:16:dc:
0e:95:45:e6:b4:0c:e5:38:0d:a9:90:4f:21:db:a6:f8:59:88:
6c:a9:ee:22:7f:26:dd:15:b6:c3:d5:55:4a:5d:02:3f:2a:a6:
8d:57:bb:00:9c:14:bb:94:a7:70:ab:b1:e5:af:5b:d1:33:6d:
fb:75:dc:71:98:45:db:40:f5:54:18:70:a7:e3:72:0e:a8:34:
d6:92:f6:a0:b9:24:aa:8c:6a:86:04:d5:7d:80:bd:81:4c:f7:
3d:36:83:b5:44:ed:65:77:7d:ad:2c:4d:1e:c0:10:78:78:59:
f8:56:75:2d:dd:fc:a9:1f:0f:92:c1:f5:48:46:62:f5:bc:00:
86:3b:e1:da:ef:22:2c:8c:13:de:2e:3f:40:ab:3c:95:7d:a2:
22:f1:75:4b:e8:ea:ee:f8:f8:38:ed:a1:cf:5a:f8:0a:37:4b:
2f:0d:a8:67:e7:dc:04:7e:55:57:b6:d3:e9:3a:56:4c:0d:04:
13:22:a5:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE8blrAcj/afTTWIRbb15KxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMmJhMjlhYTAxMTNmYWZkMzcwZDg2NWZiNDQ0NDk4N2I0
NzMwOGEwHhcNMjYxMDE0MjIwMDI3WhcNMjYxMDE1MjIwMDI3WjAzMTEwLwYDVQQD
EyhlZTJjMTBmYmRkNmUyY2ViY2IyMjI5ZTM4NTUzNjVhN2Y5MTZlODdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJkUOF59F5ebVw4veHIImBIbnLBz
Ugs7UkKP+w/yFze7hB35lWWd/0IP16UDlCw1Yp5F9vQAUTTVq8D2O+E1EG/+IZZT
uSIw7rQWysPUQXkFAcImfu8NQfhwUpbdNJBvqKgf9V17BGSa+1FmW4+UL1qgP4Cr
UM9Tk/Pt9gB40RQK3ZKfbAVpjuvVc8pUNIOW3VuvezGS/O10O6QVT54xnIGPGs5D
7epAp5x3x/HILxt7t+uXstkI+h33kaYNGeOmmUTOZtCnRg2nzqA9vt3GoFI+R5W+
HUKWu5oGHXK+nm+aeL3OPtKplhk/iq4TYh251pEhE2ThzfWUjycasj3HRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4sEPvdbizryyIp44VTZaf5Fuh/MB8GA1UdIwQY
MBaAFN4ropqgET+v03DYZftERJh7RzCKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2l1aW1xQVJQNl9UY05obC0wUkVtSHRITUlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS85NzAwNGItYjY3MS00ZjNkLThkNTAt
ZDFhNGE0NWZhZmJjLzEvM2l1aW1xQVJQNl9UY05obC0wUkVtSHRITUlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS85NzAwNGItYjY3MS00ZjNkLThkNTAtZDFhNGE0NWZhZmJj
LzEvM2l1aW1xQVJQNl9UY05obC0wUkVtSHRITUlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbVA9+Qe
2J1ZepccmhvnRp6ywWKEVFzbdGdCwvCFIyG6e0hu7N1vPBf5EI3Aq9cbRW/RS4k5
YFgABJlqJ8A0JeYFH/4EPxbcDpVF5rQM5TgNqZBPIdum+FmIbKnuIn8m3RW2w9VV
Sl0CPyqmjVe7AJwUu5SncKux5a9b0TNt+3XccZhF20D1VBhwp+NyDqg01pL2oLkk
qoxqhgTVfYC9gUz3PTaDtUTtZXd9rSxNHsAQeHhZ+FZ1Ld38qR8PksH1SEZi9bwA
hjvh2u8iLIwT3i4/QKs8lX2iIvF1S+jq7vj4OO2hz1r4CjdLLw2oZ+fcBH5VV7bT
6TpWTA0EEyKlAw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:26:44 2026 by rpki-client