Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/f4b9b0-702d-4351-8f26-8ea3bf751f91/1/3HD46wQ8RN9iLnU6t_H3e34du7g.mft
File: 3HD46wQ8RN9iLnU6t_H3e34du7g.mft (raw, json)
Hash identifier: WIuqWx7A8IvtvULqyOdgpmO6X3IXNPZZlzggr1Dd64c=
Subject key identifier: B3:17:B6:B6:69:FA:22:A4:0B:9C:17:E9:29:1F:9D:8E:E9:07:EC:70
Authority key identifier: DC:70:F8:EB:04:3C:44:DF:62:2E:75:3A:B7:F1:F7:7B:7E:1D:BB:B8
Certificate issuer: /CN=dc70f8eb043c44df622e753ab7f1f77b7e1dbbb8
Certificate serial: 01A18ED4F8B1FA097727FE78414249AAEE43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HD46wQ8RN9iLnU6t_H3e34du7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f4b9b0-702d-4351-8f26-8ea3bf751f91/1/3HD46wQ8RN9iLnU6t_H3e34du7g.mft
Manifest number: 4E
Signing time: Fri 30 Oct 2026 22:01:24 +0000
Manifest this update: Fri 30 Oct 2026 22:01:24 +0000
Manifest next update: Sat 31 Oct 2026 22:01:24 +0000
Files and hashes: 1: 3HD46wQ8RN9iLnU6t_H3e34du7g.crl (hash: /XCkWM0AHjxCsz2OMcKS846wOwZ1ILoIi8SxTgPjjaQ=)
2: gEZcdZz7z6dGkLs1cl9tfEFlCGc.roa (hash: Xf7WlANUfn1z8PHRe3mKG3PE8OvnHVCOT/oTuvXYEvM=)
3: sWWsEN31q_NXH27tiXvXsHLbStQ.roa (hash: 3GkdvcbfV03sAP9hrllS3hwfTI6F25H3pl+wgfTOhbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f4b9b0-702d-4351-8f26-8ea3bf751f91/1/3HD46wQ8RN9iLnU6t_H3e34du7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f4b9b0-702d-4351-8f26-8ea3bf751f91/1/3HD46wQ8RN9iLnU6t_H3e34du7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HD46wQ8RN9iLnU6t_H3e34du7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 22:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8e:d4:f8:b1:fa:09:77:27:fe:78:41:42:49:aa:ee:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc70f8eb043c44df622e753ab7f1f77b7e1dbbb8
Validity
Not Before: Oct 30 22:01:24 2026 GMT
Not After : Oct 31 22:01:24 2026 GMT
Subject: CN=b317b6b669fa22a40b9c17e9291f9d8ee907ec70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ac:11:88:2f:b3:03:48:6d:00:5c:f1:f6:67:
fd:69:09:c2:b2:b7:9b:e3:82:c4:eb:3a:a3:b8:b1:
68:46:5e:f0:75:d1:17:86:aa:fd:d7:7f:d4:61:6d:
9b:a5:07:ad:b8:17:57:24:e3:fa:61:f6:67:91:89:
ef:db:12:0b:eb:06:01:6f:67:52:de:54:9f:3e:f7:
72:27:62:60:8c:8b:b0:44:e2:e9:9e:ec:8a:9a:7d:
e2:27:56:44:9d:31:73:e5:28:94:4c:43:cc:35:a3:
77:9f:0d:46:bc:44:32:83:3f:ec:76:a3:d5:68:dc:
b8:c8:a0:2f:1f:ff:ee:40:18:f4:fc:18:eb:e5:39:
5d:7d:64:50:1f:d4:8b:12:b5:6f:a4:84:1b:e8:0f:
f7:79:ef:50:aa:78:ff:b6:d6:f8:e0:1a:e5:44:63:
9b:e5:0e:50:26:6e:91:9a:4c:75:97:b1:27:28:97:
ef:bc:ca:11:a4:ba:01:4b:34:b2:37:41:04:d3:20:
89:cc:c7:a0:72:68:51:b1:67:f1:18:e3:63:dd:16:
2a:b1:f3:ed:d5:51:76:fd:6c:6f:d8:ce:e8:1b:1e:
21:3a:04:b8:9a:8c:01:35:55:9d:eb:20:f1:20:1c:
7d:37:26:ab:1d:2b:78:f4:a1:9f:65:5b:f9:e2:19:
c9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:17:B6:B6:69:FA:22:A4:0B:9C:17:E9:29:1F:9D:8E:E9:07:EC:70
X509v3 Authority Key Identifier:
keyid:DC:70:F8:EB:04:3C:44:DF:62:2E:75:3A:B7:F1:F7:7B:7E:1D:BB:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HD46wQ8RN9iLnU6t_H3e34du7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f4b9b0-702d-4351-8f26-8ea3bf751f91/1/3HD46wQ8RN9iLnU6t_H3e34du7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f4b9b0-702d-4351-8f26-8ea3bf751f91/1/3HD46wQ8RN9iLnU6t_H3e34du7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ca:97:0e:ba:84:9d:96:19:5f:c0:92:d4:01:cc:8c:30:97:
fe:fb:7e:fd:d3:11:85:39:e4:b3:1f:c4:84:72:7d:e3:66:0b:
00:b5:4c:ed:7a:bd:c6:1a:79:03:08:b9:7f:db:c9:33:3d:0d:
f8:33:46:84:d0:93:a7:8b:62:af:b8:3d:d4:85:a9:19:8e:f6:
f2:ee:6a:c9:da:15:1d:a3:22:12:78:90:4c:9b:e2:f0:d9:78:
7f:08:6f:1a:ed:7a:72:4d:b4:13:02:76:31:02:5c:4a:6a:81:
1c:59:9f:4c:49:09:d6:d1:fa:73:a6:fd:9f:44:3f:c4:c2:a6:
8b:d6:71:be:05:df:31:a2:52:04:ed:0e:ba:22:02:45:a7:d0:
14:a9:a7:13:66:1d:5a:ae:90:0a:17:44:e4:35:15:15:1d:c5:
f1:ee:72:7c:ef:9b:ae:d2:4c:1e:46:c4:bf:76:66:ea:65:1d:
8d:08:dd:65:3c:fc:5b:47:b5:13:10:86:1c:90:81:43:ce:9f:
eb:f6:d2:64:21:4c:c4:4d:fa:b7:f9:74:2a:d8:f9:e0:9f:7f:
6d:cf:5a:3a:48:e2:68:40:f0:85:16:e8:4c:49:87:a8:6c:a4:
9d:01:c5:a7:a0:3b:68:e7:44:b4:df:c5:5d:04:33:a0:31:4e:
69:e1:04:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGO1Pix+gl3J/54QUJJqu5DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNzBmOGViMDQzYzQ0ZGY2MjJlNzUzYWI3ZjFmNzdiN2Ux
ZGJiYjgwHhcNMjYxMDMwMjIwMTI0WhcNMjYxMDMxMjIwMTI0WjAzMTEwLwYDVQQD
EyhiMzE3YjZiNjY5ZmEyMmE0MGI5YzE3ZTkyOTFmOWQ4ZWU5MDdlYzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56wRiC+zA0htAFzx9mf9aQnCsreb
44LE6zqjuLFoRl7wddEXhqr913/UYW2bpQetuBdXJOP6YfZnkYnv2xIL6wYBb2dS
3lSfPvdyJ2JgjIuwROLpnuyKmn3iJ1ZEnTFz5SiUTEPMNaN3nw1GvEQygz/sdqPV
aNy4yKAvH//uQBj0/Bjr5TldfWRQH9SLErVvpIQb6A/3ee9Qqnj/ttb44BrlRGOb
5Q5QJm6Rmkx1l7EnKJfvvMoRpLoBSzSyN0EE0yCJzMegcmhRsWfxGONj3RYqsfPt
1VF2/Wxv2M7oGx4hOgS4mowBNVWd6yDxIBx9NyarHSt49KGfZVv54hnJQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMXtrZp+iKkC5wX6SkfnY7pB+xwMB8GA1UdIwQY
MBaAFNxw+OsEPETfYi51Orfx93t+Hbu4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0hENDZ3UThSTjlpTG5VNnRfSDNlMzRkdTdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mNGI5YjAtNzAyZC00MzUxLThmMjYt
OGVhM2JmNzUxZjkxLzEvM0hENDZ3UThSTjlpTG5VNnRfSDNlMzRkdTdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9mNGI5YjAtNzAyZC00MzUxLThmMjYtOGVhM2JmNzUxZjkx
LzEvM0hENDZ3UThSTjlpTG5VNnRfSDNlMzRkdTdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd8qXDrqE
nZYZX8CS1AHMjDCX/vt+/dMRhTnksx/EhHJ942YLALVM7Xq9xhp5Awi5f9vJMz0N
+DNGhNCTp4tir7g91IWpGY728u5qydoVHaMiEniQTJvi8Nl4fwhvGu16ck20EwJ2
MQJcSmqBHFmfTEkJ1tH6c6b9n0Q/xMKmi9ZxvgXfMaJSBO0OuiICRafQFKmnE2Yd
Wq6QChdE5DUVFR3F8e5yfO+brtJMHkbEv3Zm6mUdjQjdZTz8W0e1ExCGHJCBQ86f
6/bSZCFMxE36t/l0Ktj54J9/bc9aOkjiaEDwhRboTEmHqGyknQHFp6A7aOdEtN/F
XQQzoDFOaeEElw==
-----END CERTIFICATE-----
Generated at Sat Oct 31 08:37:36 2026 by rpki-client