Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
File: 3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft (raw, json)
Hash identifier: YesNZo0GTBDruP8mcXy2+DFF5Q3r+ARQG4m3MccvG0w=
Subject key identifier: 17:93:C3:01:9E:52:06:85:EC:57:C4:1C:0C:3A:19:4B:0F:C0:2B:8E
Authority key identifier: DE:23:F1:8C:57:6D:6F:A6:09:13:35:33:C0:D0:E3:8D:77:32:C6:52
Certificate issuer: /CN=de23f18c576d6fa609133533c0d0e38d7732c652
Certificate serial: 01A13F02F6FC4F9408E7A0AC91B4FD667D0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
Manifest number: 074D
Signing time: Thu 15 Oct 2026 10:02:01 +0000
Manifest this update: Thu 15 Oct 2026 10:02:01 +0000
Manifest next update: Fri 16 Oct 2026 10:02:01 +0000
Files and hashes: 1: 3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl (hash: 0JFgrNtCoa8FLGtY8JAZ/wmBzksLOQAaESd1SuB6N4s=)
2: GUtmTasoYg9vC_X6TeYo5LqnthI.roa (hash: h4pcOYZGVhmcTnXyyDF08GhSsY9jTxf6Vxsbll0E63Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:f6:fc:4f:94:08:e7:a0:ac:91:b4:fd:66:7d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de23f18c576d6fa609133533c0d0e38d7732c652
Validity
Not Before: Oct 15 10:02:01 2026 GMT
Not After : Oct 16 10:02:01 2026 GMT
Subject: CN=1793c3019e520685ec57c41c0c3a194b0fc02b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:56:26:24:67:01:aa:cb:00:98:db:69:8c:fd:
3d:4b:60:a1:03:73:22:e3:29:e7:c8:8a:d4:5e:96:
fe:3a:aa:5a:99:7d:2f:07:a0:5b:7e:29:61:97:18:
f2:db:0f:ee:7a:b8:e1:95:25:2f:a7:87:e8:2a:d8:
41:3a:c1:eb:b6:2e:63:c4:ec:09:1b:4f:6b:76:d6:
a9:1d:eb:8d:5e:d2:2f:18:d1:f9:53:0c:8e:f6:a2:
a6:58:90:a7:24:e0:7e:b7:7c:94:86:28:6d:0c:61:
26:72:d2:24:d7:ef:1b:52:22:03:a8:a1:54:70:b6:
11:1c:62:21:0e:f7:a1:93:0d:7f:34:e1:06:5e:f7:
7e:31:74:a9:84:8c:bd:1f:29:79:fe:de:93:cd:f8:
17:5b:dd:33:44:6e:56:b8:cc:3c:b4:cb:d8:8f:e2:
6f:9d:85:74:b7:fa:8e:4a:f8:97:48:80:be:2e:19:
80:69:f4:23:a3:d6:33:61:64:b0:56:0a:cd:0c:e3:
a2:63:e0:2b:76:80:37:1f:e8:5a:83:6a:e8:47:46:
a9:ad:12:ca:e2:f4:d7:56:8c:2f:49:c1:2e:3c:43:
a6:07:bd:97:fe:a0:60:1f:f3:6a:b0:05:90:4f:ed:
90:88:8d:2d:c7:84:0a:63:85:0f:cb:b8:c2:cc:ac:
a9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:93:C3:01:9E:52:06:85:EC:57:C4:1C:0C:3A:19:4B:0F:C0:2B:8E
X509v3 Authority Key Identifier:
keyid:DE:23:F1:8C:57:6D:6F:A6:09:13:35:33:C0:D0:E3:8D:77:32:C6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ac:17:00:97:c6:ee:85:64:5a:55:35:a0:3f:af:29:59:7e:
bb:9e:29:11:ab:76:9e:51:77:0b:01:99:5c:61:d3:8c:fb:d4:
73:50:84:b4:92:c7:af:aa:34:7d:4c:5e:8d:42:b7:69:06:6d:
3f:9d:4c:62:62:2f:a5:a7:ad:e0:29:7a:d3:9f:88:13:01:0e:
a9:23:e7:58:fa:7c:cd:db:e6:e3:ea:10:af:e9:20:17:c2:91:
5c:e3:33:f0:ad:ec:9a:69:29:55:4d:9e:b9:36:26:5a:ec:76:
93:7f:b3:d4:1f:6e:f6:92:ff:ff:f5:c1:26:26:15:71:f1:74:
11:6f:94:f8:dd:80:59:5e:ad:26:fa:63:6e:01:40:e3:c7:3d:
61:d4:02:02:d9:86:47:6f:97:50:f1:0d:f2:82:3c:2a:cc:10:
8f:d1:36:58:7e:38:19:c9:12:70:8e:a6:7b:f0:61:31:9b:7e:
5b:a8:99:ca:cf:e6:64:d3:3a:b3:e0:25:41:4f:3d:f2:ff:51:
84:0c:36:71:ef:60:17:50:8c:c6:eb:0a:40:2b:33:c1:bd:5a:
28:de:e3:50:3b:e9:84:c2:e2:99:a3:ef:50:96:e1:18:81:80:
58:71:02:6a:3c:38:b9:2c:98:0e:ea:dc:f0:d8:5f:75:81:bb:
f7:0b:43:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/Avb8T5QI56CskbT9Zn0MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMjNmMThjNTc2ZDZmYTYwOTEzMzUzM2MwZDBlMzhkNzcz
MmM2NTIwHhcNMjYxMDE1MTAwMjAxWhcNMjYxMDE2MTAwMjAxWjAzMTEwLwYDVQQD
EygxNzkzYzMwMTllNTIwNjg1ZWM1N2M0MWMwYzNhMTk0YjBmYzAyYjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFYmJGcBqssAmNtpjP09S2ChA3Mi
4ynnyIrUXpb+OqpamX0vB6Bbfilhlxjy2w/uerjhlSUvp4foKthBOsHrti5jxOwJ
G09rdtapHeuNXtIvGNH5UwyO9qKmWJCnJOB+t3yUhihtDGEmctIk1+8bUiIDqKFU
cLYRHGIhDvehkw1/NOEGXvd+MXSphIy9Hyl5/t6TzfgXW90zRG5WuMw8tMvYj+Jv
nYV0t/qOSviXSIC+LhmAafQjo9YzYWSwVgrNDOOiY+ArdoA3H+hag2roR0aprRLK
4vTXVowvScEuPEOmB72X/qBgH/NqsAWQT+2QiI0tx4QKY4UPy7jCzKypPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBeTwwGeUgaF7FfEHAw6GUsPwCuOMB8GA1UdIwQY
MBaAFN4j8YxXbW+mCRM1M8DQ4413MsZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2lQeGpGZHRiNllKRXpVendORGpqWGN5eGxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi85OGM1ZDktZTJiZS00OTNiLTg2NTct
NWU4NjAwNmUyMGFlLzEvM2lQeGpGZHRiNllKRXpVendORGpqWGN5eGxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi85OGM1ZDktZTJiZS00OTNiLTg2NTctNWU4NjAwNmUyMGFl
LzEvM2lQeGpGZHRiNllKRXpVendORGpqWGN5eGxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXqwXAJfG
7oVkWlU1oD+vKVl+u54pEat2nlF3CwGZXGHTjPvUc1CEtJLHr6o0fUxejUK3aQZt
P51MYmIvpaet4Cl605+IEwEOqSPnWPp8zdvm4+oQr+kgF8KRXOMz8K3smmkpVU2e
uTYmWux2k3+z1B9u9pL///XBJiYVcfF0EW+U+N2AWV6tJvpjbgFA48c9YdQCAtmG
R2+XUPEN8oI8KswQj9E2WH44GckScI6me/BhMZt+W6iZys/mZNM6s+AlQU898v9R
hAw2ce9gF1CMxusKQCszwb1aKN7jUDvphMLimaPvUJbhGIGAWHECajw4uSyYDurc
8NhfdYG79wtDrQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 14:19:10 2026 by rpki-client