Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.mft
File: 3B9SkHb0Ue2eCyIszjXbyXy9xRs.mft (raw, json)
Hash identifier: PSeOJa+JbF4ZcHclIh45CApD6Zp4OrLgfTHEa1Zo8f0=
Subject key identifier: 1D:CC:E4:96:14:57:83:BF:1B:74:ED:56:03:A6:EB:2F:76:B9:71:11
Authority key identifier: DC:1F:52:90:76:F4:51:ED:9E:0B:22:2C:CE:35:DB:C9:7C:BD:C5:1B
Certificate issuer: /CN=dc1f529076f451ed9e0b222cce35dbc97cbdc51b
Certificate serial: 01A040BC28F3FDD1D68D13238980B9DD10CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3B9SkHb0Ue2eCyIszjXbyXy9xRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.mft
Manifest number: 0294
Signing time: Thu 27 Aug 2026 01:01:08 +0000
Manifest this update: Thu 27 Aug 2026 01:01:08 +0000
Manifest next update: Fri 28 Aug 2026 01:01:08 +0000
Files and hashes: 1: 3B9SkHb0Ue2eCyIszjXbyXy9xRs.crl (hash: mdBD2TwdcU5vzHXxOimwwtwpbAZjnHEThLHjU3hN0Cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3B9SkHb0Ue2eCyIszjXbyXy9xRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:bc:28:f3:fd:d1:d6:8d:13:23:89:80:b9:dd:10:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1f529076f451ed9e0b222cce35dbc97cbdc51b
Validity
Not Before: Aug 27 01:01:08 2026 GMT
Not After : Aug 28 01:01:08 2026 GMT
Subject: CN=1dcce496145783bf1b74ed5603a6eb2f76b97111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8c:d1:44:33:4b:73:73:40:08:d9:04:65:56:
6d:89:53:16:92:9f:1c:fb:f6:2f:14:f8:81:e3:12:
3d:a5:ea:c4:59:12:36:78:ca:d4:b8:2a:7b:df:7b:
2a:75:25:60:e6:d1:3d:21:07:52:b9:30:63:05:67:
c6:fa:78:2e:fb:19:63:37:6a:78:84:6b:4e:ce:e8:
0f:cc:60:5e:9b:78:7f:6f:2a:ff:38:01:f6:42:bb:
6b:a7:81:ea:fd:6c:6a:e8:c8:61:3c:69:94:22:9a:
8e:36:a0:c7:ca:e5:d9:a8:10:93:76:4d:93:4e:01:
39:b4:e7:bd:95:d9:ee:39:51:a6:a0:fe:16:5d:96:
08:0d:c7:14:84:9a:a9:7d:54:32:13:ed:d7:0e:64:
b4:59:ae:d4:23:ec:d0:c8:5e:90:3b:64:65:25:e4:
a0:96:94:7d:ac:72:db:44:e0:e6:bf:7f:a6:f1:35:
60:7b:28:36:82:f0:4e:89:d1:e7:5f:9a:41:83:a3:
5e:b5:08:ad:d6:97:28:9f:35:31:0b:2e:16:c8:94:
87:67:2f:91:53:bd:77:ba:a4:8b:91:03:84:72:32:
85:20:79:da:8b:21:de:be:8e:ab:10:18:b1:6e:7f:
46:04:5a:5a:6d:30:0e:51:f6:6e:5c:dd:1b:2f:9d:
08:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CC:E4:96:14:57:83:BF:1B:74:ED:56:03:A6:EB:2F:76:B9:71:11
X509v3 Authority Key Identifier:
keyid:DC:1F:52:90:76:F4:51:ED:9E:0B:22:2C:CE:35:DB:C9:7C:BD:C5:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3B9SkHb0Ue2eCyIszjXbyXy9xRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b2cf17-9d27-477a-857b-2bebbf10dd2b/1/3B9SkHb0Ue2eCyIszjXbyXy9xRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:4f:11:a3:c2:d0:86:c8:42:1b:f6:ff:9b:7e:ae:82:46:a5:
a5:4d:f8:4f:c3:cf:7f:f8:df:ab:82:16:de:94:4a:44:04:c4:
93:5b:7d:57:ce:90:ff:95:a1:a8:69:f5:3c:14:e8:53:c3:1c:
07:02:f5:17:73:b6:f1:f5:40:28:c7:94:21:2d:8e:d1:c5:1a:
e2:a4:27:10:8a:d9:69:f4:f8:c3:af:d6:3c:65:f2:cd:51:14:
25:81:10:19:f1:78:01:dc:97:b3:f9:fc:7c:64:64:55:e4:1b:
ce:91:a7:f3:3e:18:18:74:ae:cf:8f:4f:09:3f:f2:c2:7a:f0:
65:e3:70:83:d6:a6:3c:0d:fd:95:18:4f:5a:22:89:46:24:5d:
6e:44:1c:3f:fd:a3:3d:a7:3c:d4:29:33:37:54:90:7a:5e:9d:
a2:ac:3e:0a:fa:7e:7c:c1:0b:4a:41:69:a3:b5:0c:de:83:25:
ad:32:f4:85:70:96:c2:95:8e:e9:77:14:9d:f9:bd:26:24:74:
97:cd:9f:29:e0:cf:2f:06:e5:18:bf:33:f7:6b:61:0e:0c:30:
b6:cb:8e:b7:2b:fb:b4:82:ab:0f:16:cf:05:65:df:cc:8a:cf:
8b:26:c6:50:fe:3d:db:a3:94:2b:66:9d:8b:e3:7d:eb:f7:ff:
5b:d3:38:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBAvCjz/dHWjRMjiYC53RDMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMWY1MjkwNzZmNDUxZWQ5ZTBiMjIyY2NlMzVkYmM5N2Ni
ZGM1MWIwHhcNMjYwODI3MDEwMTA4WhcNMjYwODI4MDEwMTA4WjAzMTEwLwYDVQQD
EygxZGNjZTQ5NjE0NTc4M2JmMWI3NGVkNTYwM2E2ZWIyZjc2Yjk3MTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIzRRDNLc3NACNkEZVZtiVMWkp8c
+/YvFPiB4xI9perEWRI2eMrUuCp733sqdSVg5tE9IQdSuTBjBWfG+ngu+xljN2p4
hGtOzugPzGBem3h/byr/OAH2Qrtrp4Hq/Wxq6MhhPGmUIpqONqDHyuXZqBCTdk2T
TgE5tOe9ldnuOVGmoP4WXZYIDccUhJqpfVQyE+3XDmS0Wa7UI+zQyF6QO2RlJeSg
lpR9rHLbRODmv3+m8TVgeyg2gvBOidHnX5pBg6NetQit1pconzUxCy4WyJSHZy+R
U713uqSLkQOEcjKFIHnaiyHevo6rEBixbn9GBFpabTAOUfZuXN0bL50IfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3M5JYUV4O/G3TtVgOm6y92uXERMB8GA1UdIwQY
MBaAFNwfUpB29FHtngsiLM4128l8vcUbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0I5U2tIYjBVZTJlQ3lJc3pqWGJ5WHk5eFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iMmNmMTctOWQyNy00NzdhLTg1N2It
MmJlYmJmMTBkZDJiLzEvM0I5U2tIYjBVZTJlQ3lJc3pqWGJ5WHk5eFJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9iMmNmMTctOWQyNy00NzdhLTg1N2ItMmJlYmJmMTBkZDJi
LzEvM0I5U2tIYjBVZTJlQ3lJc3pqWGJ5WHk5eFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIk8Ro8LQ
hshCG/b/m36ugkalpU34T8PPf/jfq4IW3pRKRATEk1t9V86Q/5WhqGn1PBToU8Mc
BwL1F3O28fVAKMeUIS2O0cUa4qQnEIrZafT4w6/WPGXyzVEUJYEQGfF4AdyXs/n8
fGRkVeQbzpGn8z4YGHSuz49PCT/ywnrwZeNwg9amPA39lRhPWiKJRiRdbkQcP/2j
Pac81CkzN1SQel6doqw+Cvp+fMELSkFpo7UM3oMlrTL0hXCWwpWO6XcUnfm9JiR0
l82fKeDPLwblGL8z92thDgwwtsuOtyv7tIKrDxbPBWXfzIrPiybGUP4926OUK2ad
i+N96/f/W9M44g==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:51:25 2026 by rpki-client