Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft
File: 3dBY7vGdEboOq68EbnKibl5XJkM.mft (raw, json)
Hash identifier: fQhuaAl1/T5OBUo39eLsEJjkRF2VA7zftbfCDucM+V4=
Subject key identifier: CC:FC:E9:2E:96:EF:9B:C0:92:C7:01:25:FC:35:83:0A:72:83:30:B2
Authority key identifier: DD:D0:58:EE:F1:9D:11:BA:0E:AB:AF:04:6E:72:A2:6E:5E:57:26:43
Certificate issuer: /CN=ddd058eef19d11ba0eabaf046e72a26e5e572643
Certificate serial: 01A17995ABC7674DA1A2480033BD2DBB1C36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dBY7vGdEboOq68EbnKibl5XJkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft
Manifest number: 02DB
Signing time: Mon 26 Oct 2026 19:00:14 +0000
Manifest this update: Mon 26 Oct 2026 19:00:14 +0000
Manifest next update: Tue 27 Oct 2026 19:00:14 +0000
Files and hashes: 1: 3dBY7vGdEboOq68EbnKibl5XJkM.crl (hash: 7SkkEqFIziROpUXskRIxPYD8d2eqhcr0w8MhxS+QDX8=)
2: 6w_LmvhXnOF2ik3DDNvsrEWVCI8.roa (hash: 6W4Vav7RSMNSHDF7FWCiUK0cI2saEqhD9eRkDI4fbG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dBY7vGdEboOq68EbnKibl5XJkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:95:ab:c7:67:4d:a1:a2:48:00:33:bd:2d:bb:1c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd058eef19d11ba0eabaf046e72a26e5e572643
Validity
Not Before: Oct 26 19:00:14 2026 GMT
Not After : Oct 27 19:00:14 2026 GMT
Subject: CN=ccfce92e96ef9bc092c70125fc35830a728330b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c3:2a:c6:d5:b6:c2:a1:0b:ef:4e:c6:27:c2:
ee:3c:66:bf:48:75:84:e1:61:90:f1:ac:e3:dd:29:
71:b3:6b:6b:8a:7b:3e:a0:db:45:01:e8:27:8e:a4:
53:2a:47:b5:55:ab:ee:e1:b9:fd:f9:d9:bc:f3:d6:
36:a6:b2:0c:c0:02:be:58:fa:6f:cb:2f:73:75:60:
f5:31:56:2e:db:a8:87:a7:fe:87:b0:25:b4:52:7f:
1b:c6:d2:52:96:71:7e:cb:12:c6:56:c0:56:d4:ee:
28:ef:de:db:3c:be:c0:f5:a4:77:e3:bb:48:5c:7b:
41:4b:8f:75:b5:bc:d4:c5:f3:95:58:a5:7c:e9:e4:
7a:1c:38:bc:f0:4e:de:ab:ce:d7:02:4f:9d:ee:03:
29:6e:13:92:c5:81:bc:45:c2:52:12:d1:4d:fb:cc:
4a:45:a7:bf:9e:7f:f1:0f:94:d3:81:83:50:eb:8b:
49:12:ae:52:24:d7:77:32:72:0e:a2:95:98:2a:fc:
3c:92:b9:92:2d:35:10:30:cd:b7:a1:75:09:f8:c2:
78:56:2f:b5:9c:cf:59:f9:44:bf:ac:b0:c3:fa:a8:
7d:4e:fa:79:a8:2e:43:58:38:f9:34:ba:9b:c3:b0:
05:52:49:f6:1e:a9:31:a2:85:c2:28:9d:07:3e:95:
65:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FC:E9:2E:96:EF:9B:C0:92:C7:01:25:FC:35:83:0A:72:83:30:B2
X509v3 Authority Key Identifier:
keyid:DD:D0:58:EE:F1:9D:11:BA:0E:AB:AF:04:6E:72:A2:6E:5E:57:26:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dBY7vGdEboOq68EbnKibl5XJkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c9:6f:34:22:f2:e9:48:71:86:26:27:f4:43:5d:d7:95:6e:
cd:2b:e2:ed:0c:e5:31:d3:d5:95:33:99:f8:ca:13:45:3c:82:
9a:fd:28:b8:5c:a8:47:3e:70:7d:34:0e:a4:1a:ec:f2:6a:74:
b3:63:eb:6e:df:19:6a:6b:af:c3:a1:b5:41:68:bf:0c:56:5b:
f3:79:4b:83:fb:de:c3:17:ba:5a:b5:32:cd:2a:e3:7d:7e:ef:
15:fe:f2:f9:05:99:0f:d2:30:8f:95:e6:4c:97:2a:0e:d6:78:
8b:9f:07:86:45:49:58:a8:17:f6:da:9b:98:2f:ca:43:90:c2:
ad:a6:4b:91:12:6b:c7:30:58:60:e9:ee:df:df:03:8c:12:7a:
d6:dc:4c:e8:0d:8f:2d:db:d6:1e:a6:a0:c6:d8:ba:0c:0d:ed:
54:10:87:45:55:2e:26:ea:9c:2f:b1:0f:97:f0:17:0a:b4:d2:
98:a8:2d:e2:5a:2e:9d:26:ce:25:d9:60:57:78:21:36:c7:80:
c0:07:03:86:e3:1f:71:9b:73:85:17:0e:de:02:87:19:93:5a:
dc:41:42:69:7c:62:de:51:73:fe:67:77:09:5c:d3:28:e2:7f:
2e:7a:37:02:d5:3c:57:e9:67:e2:1e:a5:7a:0f:89:5a:ee:bc:
74:08:00:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF5lavHZ02hokgAM70tuxw2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZDA1OGVlZjE5ZDExYmEwZWFiYWYwNDZlNzJhMjZlNWU1
NzI2NDMwHhcNMjYxMDI2MTkwMDE0WhcNMjYxMDI3MTkwMDE0WjAzMTEwLwYDVQQD
EyhjY2ZjZTkyZTk2ZWY5YmMwOTJjNzAxMjVmYzM1ODMwYTcyODMzMGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMMqxtW2wqEL707GJ8LuPGa/SHWE
4WGQ8azj3Slxs2trins+oNtFAegnjqRTKke1Vavu4bn9+dm889Y2prIMwAK+WPpv
yy9zdWD1MVYu26iHp/6HsCW0Un8bxtJSlnF+yxLGVsBW1O4o797bPL7A9aR347tI
XHtBS491tbzUxfOVWKV86eR6HDi88E7eq87XAk+d7gMpbhOSxYG8RcJSEtFN+8xK
Rae/nn/xD5TTgYNQ64tJEq5SJNd3MnIOopWYKvw8krmSLTUQMM23oXUJ+MJ4Vi+1
nM9Z+US/rLDD+qh9Tvp5qC5DWDj5NLqbw7AFUkn2HqkxooXCKJ0HPpVl/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMz86S6W75vAkscBJfw1gwpygzCyMB8GA1UdIwQY
MBaAFN3QWO7xnRG6DquvBG5yom5eVyZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2RCWTd2R2RFYm9PcTY4RWJuS2libDVYSmtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9lNDgzNGYtZTVkMC00YjY0LTkyY2Ut
ZjU0OTkzMzZjMmI0LzEvM2RCWTd2R2RFYm9PcTY4RWJuS2libDVYSmtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9lNDgzNGYtZTVkMC00YjY0LTkyY2UtZjU0OTkzMzZjMmI0
LzEvM2RCWTd2R2RFYm9PcTY4RWJuS2libDVYSmtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJslvNCLy
6UhxhiYn9ENd15VuzSvi7QzlMdPVlTOZ+MoTRTyCmv0ouFyoRz5wfTQOpBrs8mp0
s2Prbt8Zamuvw6G1QWi/DFZb83lLg/vewxe6WrUyzSrjfX7vFf7y+QWZD9Iwj5Xm
TJcqDtZ4i58HhkVJWKgX9tqbmC/KQ5DCraZLkRJrxzBYYOnu398DjBJ61txM6A2P
LdvWHqagxti6DA3tVBCHRVUuJuqcL7EPl/AXCrTSmKgt4lounSbOJdlgV3ghNseA
wAcDhuMfcZtzhRcO3gKHGZNa3EFCaXxi3lFz/md3CVzTKOJ/Lno3AtU8V+ln4h6l
eg+JWu68dAgArQ==
-----END CERTIFICATE-----
Generated at Tue Oct 27 01:50:58 2026 by rpki-client