
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
File: S3tzzZvRdD99P17GvVChk170gB4.mft (raw, json)
Hash identifier: 3eBxsFJa++odvmfLRc87P+ulZNKeJ/ojKPWSbXLs6e8=
Subject key identifier: 77:48:3E:F1:0D:E4:0D:93:41:B3:24:CF:FC:C2:C4:65:48:B2:82:1C
Authority key identifier: 4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E
Certificate issuer: /CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e
Certificate serial: 01A14FF61E46ECB30AA04206A731F276432A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
Manifest number: 1A3D
Signing time: Sun 18 Oct 2026 17:01:32 +0000
Manifest this update: Sun 18 Oct 2026 17:01:32 +0000
Manifest next update: Mon 19 Oct 2026 17:01:32 +0000
Files and hashes: 1: S3tzzZvRdD99P17GvVChk170gB4.crl (hash: it5oultx3PkCAQT8u5m4ZXZEgq8xTt72S4JlxCEdBtM=)
2: eng9RYXhOr-5HaI5uOyelA6wzbc.roa (hash: LlIBH4V68aJMu/FCHYy8zCpNmTkO2PE9LFtoa1D1JsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 14:21:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4f:f6:1e:46:ec:b3:0a:a0:42:06:a7:31:f2:76:43:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e
Validity
Not Before: Oct 18 17:01:32 2026 GMT
Not After : Oct 19 17:01:32 2026 GMT
Subject: CN=77483ef10de40d9341b324cffcc2c46548b2821c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cd:5c:d2:8d:13:8b:dc:99:be:3f:e2:ce:6c:
c2:8f:ce:a0:44:fe:a7:ac:be:bd:61:8b:ed:0a:47:
d7:c0:c1:5b:82:95:41:c6:5b:b7:48:e0:42:91:1d:
f9:e3:0f:74:f7:57:73:e9:f3:da:59:87:67:e1:de:
d2:37:ef:06:21:05:d3:b5:ad:5c:26:d4:12:17:0a:
83:bb:c4:4f:71:f5:52:3e:5f:84:5f:a7:e9:2c:85:
b2:98:30:22:51:fb:ee:7e:f9:d6:dd:1f:ce:0e:74:
4c:6b:88:91:06:ca:f9:0e:db:70:7d:37:a7:18:e0:
c1:82:12:ad:34:33:58:b9:84:c2:da:d2:f2:82:1f:
1a:44:a0:f2:bc:fb:10:5a:3c:e9:a8:5f:f0:07:d7:
59:17:da:1e:e3:bd:69:16:82:59:4c:35:45:0f:09:
f5:96:ad:79:42:0f:e5:6e:01:5f:6e:c4:6a:72:4a:
7c:84:58:e6:32:ca:d9:c2:15:b6:e6:61:12:26:92:
3d:91:8f:12:6e:d2:8a:9c:9f:6c:41:97:72:da:53:
86:ea:81:4d:34:13:40:40:27:b4:e3:bb:b0:7c:62:
26:96:f4:2b:eb:da:ad:59:a9:3a:14:c0:f0:b0:0b:
bb:00:65:2a:a2:e9:ad:87:30:68:96:1d:46:1a:db:
26:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:48:3E:F1:0D:E4:0D:93:41:B3:24:CF:FC:C2:C4:65:48:B2:82:1C
X509v3 Authority Key Identifier:
keyid:4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:76:33:0e:e8:c6:db:ec:91:1c:f2:61:d5:23:f2:4b:af:55:
a9:12:d3:d6:46:c0:a6:f4:da:77:a8:69:c0:8d:b0:b5:31:c3:
7d:d9:42:e4:92:97:92:03:0d:08:2c:03:79:37:8b:8f:56:10:
e9:94:c8:97:ef:c1:7c:c9:2d:5e:a8:e6:2d:bf:e0:99:8d:7e:
0b:f0:1b:4e:e5:83:7e:09:56:7d:0a:54:ab:82:29:17:04:23:
36:22:8a:f2:98:6e:36:93:55:db:01:e4:29:a5:b6:52:65:ef:
d5:7b:bf:fa:cb:c8:0f:8f:ae:b9:86:44:00:5d:06:7a:60:15:
cf:ae:01:40:f4:ad:f4:fe:eb:5f:0b:46:7b:b6:5c:a2:af:16:
4c:8a:74:4c:65:9c:48:ec:c3:99:7f:76:1f:07:c0:fc:5d:43:
48:dd:26:f8:b3:91:d1:f5:9c:23:f7:0c:e2:7c:4f:38:df:db:
c3:2e:fc:ca:df:d1:70:ce:87:55:72:69:30:65:57:78:9d:5d:
3f:05:cf:42:2f:62:05:f9:9c:a8:79:97:58:a8:b7:d6:bb:13:
65:bc:0b:b9:0a:30:59:91:62:19:bf:3c:cf:4c:df:50:00:75:
5e:8a:23:f9:56:da:53:93:e1:c5:f2:9e:89:be:ab:27:6c:26:
d8:18:1c:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFP9h5G7LMKoEIGpzHydkMqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiN2I3M2NkOWJkMTc0M2Y3ZDNmNWVjNmJkNTBhMTkzNWVm
NDgwMWUwHhcNMjYxMDE4MTcwMTMyWhcNMjYxMDE5MTcwMTMyWjAzMTEwLwYDVQQD
Eyg3NzQ4M2VmMTBkZTQwZDkzNDFiMzI0Y2ZmY2MyYzQ2NTQ4YjI4MjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt81c0o0Ti9yZvj/izmzCj86gRP6n
rL69YYvtCkfXwMFbgpVBxlu3SOBCkR354w9091dz6fPaWYdn4d7SN+8GIQXTta1c
JtQSFwqDu8RPcfVSPl+EX6fpLIWymDAiUfvufvnW3R/ODnRMa4iRBsr5DttwfTen
GODBghKtNDNYuYTC2tLygh8aRKDyvPsQWjzpqF/wB9dZF9oe471pFoJZTDVFDwn1
lq15Qg/lbgFfbsRqckp8hFjmMsrZwhW25mESJpI9kY8SbtKKnJ9sQZdy2lOG6oFN
NBNAQCe047uwfGImlvQr69qtWak6FMDwsAu7AGUqoumthzBolh1GGtsmTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHdIPvEN5A2TQbMkz/zCxGVIsoIcMB8GA1UdIwQY
MBaAFEt7c82b0XQ/fT9exr1QoZNe9IAeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzN0enpadlJkRDk5UDE3R3ZWQ2hrMTcwZ0I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85NWY0NzktYjUwNy00ZWRiLTkyZjMt
ZTJiNThmNWU0YWJiLzEvUzN0enpadlJkRDk5UDE3R3ZWQ2hrMTcwZ0I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85NWY0NzktYjUwNy00ZWRiLTkyZjMtZTJiNThmNWU0YWJi
LzEvUzN0enpadlJkRDk5UDE3R3ZWQ2hrMTcwZ0I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASnYzDujG
2+yRHPJh1SPyS69VqRLT1kbApvTad6hpwI2wtTHDfdlC5JKXkgMNCCwDeTeLj1YQ
6ZTIl+/BfMktXqjmLb/gmY1+C/AbTuWDfglWfQpUq4IpFwQjNiKK8phuNpNV2wHk
KaW2UmXv1Xu/+svID4+uuYZEAF0GemAVz64BQPSt9P7rXwtGe7Zcoq8WTIp0TGWc
SOzDmX92HwfA/F1DSN0m+LOR0fWcI/cM4nxPON/bwy78yt/RcM6HVXJpMGVXeJ1d
PwXPQi9iBfmcqHmXWKi31rsTZbwLuQowWZFiGb88z0zfUAB1Xooj+VbaU5PhxfKe
ib6rJ2wm2BgcuQ==
-----END CERTIFICATE-----
Generated at Sun Oct 18 21:01:36 2026 by rpki-client