Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
File: 3Os5Sq4INtNDQfetMZSUdlq1awc.mft (raw, json)
Hash identifier: l31P5jiato/ZChRowDFwQBCPYWEjd3wvvjXwn2tNVe4=
Subject key identifier: B1:B6:F9:E1:D7:0C:77:7D:60:7F:76:76:CA:05:CE:E9:8E:65:58:42
Authority key identifier: DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
Certificate issuer: /CN=dceb394aae0836d34341f7ad319494765ab56b07
Certificate serial: 019DCCE19E75DDB40B8BA863EA4266196AB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
Manifest number: 0480
Signing time: Mon 27 Apr 2026 03:00:31 +0000
Manifest this update: Mon 27 Apr 2026 03:00:31 +0000
Manifest next update: Tue 28 Apr 2026 03:00:31 +0000
Files and hashes: 1: 3Os5Sq4INtNDQfetMZSUdlq1awc.crl (hash: tzx4fmFkKSf9chgriFHNa89QG/DHmfrnxpoX/l4Gpow=)
2: RwZ9F-pdINA65vVgGDGApgyfhto.roa (hash: eZaWhNjBT1qB/UTcePoZ/N6A45ILygXPpUHwGv0YfOw=)
3: SFQQoJg97TGHjrgzii8KpRT8xfc.roa (hash: iv/LMo2P0Oa29pglyapnh+eYTODXjJUku1HA9y8udbA=)
4: epxl9L9HWnrGUI5XuexvyGVngTU.roa (hash: 6h181ow5CoYXxR4oepREBM0W4TQFaDLQ6AfqnnaQ+Lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:e1:9e:75:dd:b4:0b:8b:a8:63:ea:42:66:19:6a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dceb394aae0836d34341f7ad319494765ab56b07
Validity
Not Before: Apr 27 03:00:31 2026 GMT
Not After : Apr 28 03:00:31 2026 GMT
Subject: CN=b1b6f9e1d70c777d607f7676ca05cee98e655842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:75:40:c5:88:c7:e9:d1:f6:28:07:14:af:de:
48:d6:f2:0c:6e:c4:0e:f8:0b:20:70:48:11:92:82:
50:a5:7e:b1:64:54:ae:83:e6:d4:b7:70:94:23:69:
fc:b5:a8:ad:12:04:79:6a:23:e6:01:a8:ec:71:7b:
5c:c9:6f:b8:ed:e6:10:ca:d9:4e:f3:d9:71:a3:42:
1d:fc:36:e0:ce:83:77:58:cc:71:90:50:f7:97:d3:
ce:c5:39:bc:29:3c:4f:58:fd:9b:ba:c2:9e:57:5c:
4f:7d:6d:fe:42:64:af:33:fe:22:68:13:dc:63:0f:
81:e8:2c:3d:5c:9f:09:2a:e7:28:99:12:a3:32:b4:
72:da:21:3a:a8:cf:07:1f:4f:0c:9a:1e:7f:b2:dc:
2d:33:2c:36:88:e8:ff:8d:41:9f:f5:9d:5e:cf:b0:
09:3c:2f:24:f4:4f:c4:ae:03:ad:34:5a:8b:e0:86:
7f:b4:13:6a:0f:6e:e1:fd:4a:b6:4a:82:5b:6f:84:
39:bd:14:43:91:e1:c8:d8:2a:65:11:3f:0c:4a:47:
7b:f9:db:a6:c4:b5:d6:a2:26:ff:09:c0:fc:2e:c5:
7e:01:e7:f1:6c:c6:cf:c5:fd:22:f6:0a:ae:90:62:
1d:0f:ee:bb:ce:63:6a:ce:7e:86:c1:c6:f5:71:2b:
3b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B6:F9:E1:D7:0C:77:7D:60:7F:76:76:CA:05:CE:E9:8E:65:58:42
X509v3 Authority Key Identifier:
keyid:DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:07:cb:35:d2:54:04:18:8b:8f:bb:bb:23:5c:ba:33:0a:0c:
28:bd:33:af:8f:60:90:b8:52:58:20:86:56:61:93:1f:9e:3d:
8a:e2:57:5d:65:4b:83:e6:53:10:2e:43:2a:7f:a7:a8:21:92:
e4:43:7e:10:77:0d:5e:02:d5:50:9e:05:cb:60:e4:bf:3b:75:
36:d8:e0:98:22:46:c8:42:a2:ae:05:dc:b1:45:e2:71:91:e2:
80:17:c7:22:9a:2a:9f:9e:fe:bf:a0:26:e4:81:51:26:a3:59:
fb:ee:b0:16:3f:06:3d:80:fa:8f:69:b9:a2:ef:90:e8:33:17:
96:74:4a:f6:12:ba:41:f3:40:6e:2d:fc:d8:0a:36:6e:48:9f:
51:c3:eb:fd:8d:14:c3:fe:f1:7e:be:d1:fa:fa:71:6b:f2:1c:
cd:e2:f9:77:13:9f:3c:27:74:3e:a7:75:fc:8c:4d:bb:e0:ee:
c3:51:f0:d8:c3:9a:5c:86:f3:32:0d:4b:02:9d:3b:db:c2:55:
de:d8:4d:97:84:6e:b1:85:2a:1f:5a:2c:fb:d9:ed:93:7d:9e:
4a:21:ca:25:07:b1:96:65:48:e0:55:64:95:ce:c6:76:9d:36:
fe:19:af:d6:2f:61:8b:9a:af:75:36:8c:9e:33:c9:bf:0c:82:
f1:7b:0c:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3M4Z513bQLi6hj6kJmGWq4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZWIzOTRhYWUwODM2ZDM0MzQxZjdhZDMxOTQ5NDc2NWFi
NTZiMDcwHhcNMjYwNDI3MDMwMDMxWhcNMjYwNDI4MDMwMDMxWjAzMTEwLwYDVQQD
EyhiMWI2ZjllMWQ3MGM3NzdkNjA3Zjc2NzZjYTA1Y2VlOThlNjU1ODQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XVAxYjH6dH2KAcUr95I1vIMbsQO
+AsgcEgRkoJQpX6xZFSug+bUt3CUI2n8taitEgR5aiPmAajscXtcyW+47eYQytlO
89lxo0Id/DbgzoN3WMxxkFD3l9POxTm8KTxPWP2busKeV1xPfW3+QmSvM/4iaBPc
Yw+B6Cw9XJ8JKucomRKjMrRy2iE6qM8HH08Mmh5/stwtMyw2iOj/jUGf9Z1ez7AJ
PC8k9E/ErgOtNFqL4IZ/tBNqD27h/Uq2SoJbb4Q5vRRDkeHI2CplET8MSkd7+dum
xLXWoib/CcD8LsV+AefxbMbPxf0i9gqukGIdD+67zmNqzn6Gwcb1cSs7qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLG2+eHXDHd9YH92dsoFzumOZVhCMB8GA1UdIwQY
MBaAFNzrOUquCDbTQ0H3rTGUlHZatWsHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM09zNVNxNElOdE5EUWZldE1aU1VkbHExYXdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wYjA2NGYtYjAxYS00MzcxLWE0NGEt
NDBjODZiMzJlYjIyLzEvM09zNVNxNElOdE5EUWZldE1aU1VkbHExYXdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8wYjA2NGYtYjAxYS00MzcxLWE0NGEtNDBjODZiMzJlYjIy
LzEvM09zNVNxNElOdE5EUWZldE1aU1VkbHExYXdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiQfLNdJU
BBiLj7u7I1y6MwoMKL0zr49gkLhSWCCGVmGTH549iuJXXWVLg+ZTEC5DKn+nqCGS
5EN+EHcNXgLVUJ4Fy2Dkvzt1NtjgmCJGyEKirgXcsUXicZHigBfHIpoqn57+v6Am
5IFRJqNZ++6wFj8GPYD6j2m5ou+Q6DMXlnRK9hK6QfNAbi382Ao2bkifUcPr/Y0U
w/7xfr7R+vpxa/IczeL5dxOfPCd0Pqd1/IxNu+Duw1Hw2MOaXIbzMg1LAp0728JV
3thNl4RusYUqH1os+9ntk32eSiHKJQexlmVI4FVklc7Gdp02/hmv1i9hi5qvdTaM
njPJvwyC8XsMYg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 09:56:28 2026 by rpki-client