Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
File: 3Os5Sq4INtNDQfetMZSUdlq1awc.mft (raw, json)
Hash identifier: 1iShCAAl3z/7JqtiOPYAlyOZTQ/fUcqzv0KysXm17kc=
Subject key identifier: 4A:47:4D:CB:4B:C3:DA:08:2D:77:5C:7A:DD:B8:DA:12:99:54:8B:32
Authority key identifier: DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
Certificate issuer: /CN=dceb394aae0836d34341f7ad319494765ab56b07
Certificate serial: 01A1770354CD4719DBE292E8457317F7CFA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
Manifest number: 0667
Signing time: Mon 26 Oct 2026 07:01:09 +0000
Manifest this update: Mon 26 Oct 2026 07:01:09 +0000
Manifest next update: Tue 27 Oct 2026 07:01:09 +0000
Files and hashes: 1: 3Os5Sq4INtNDQfetMZSUdlq1awc.crl (hash: 5hWlXptAiXX9oRPfVxa+cs7Bfadf5BDJFMDT9LCn/oc=)
2: RwZ9F-pdINA65vVgGDGApgyfhto.roa (hash: eZaWhNjBT1qB/UTcePoZ/N6A45ILygXPpUHwGv0YfOw=)
3: SFQQoJg97TGHjrgzii8KpRT8xfc.roa (hash: iv/LMo2P0Oa29pglyapnh+eYTODXjJUku1HA9y8udbA=)
4: sOAijZZYpwie6wu7M4Wlx6kerB4.roa (hash: H5sz+pWO9A1d2Sg5RORtCUGJSuWJhTFvhX/iRzLdtRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:03:54:cd:47:19:db:e2:92:e8:45:73:17:f7:cf:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dceb394aae0836d34341f7ad319494765ab56b07
Validity
Not Before: Oct 26 07:01:09 2026 GMT
Not After : Oct 27 07:01:09 2026 GMT
Subject: CN=4a474dcb4bc3da082d775c7addb8da1299548b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:35:90:91:da:8a:24:3e:ee:10:fd:d9:48:59:
7a:06:f6:51:49:c1:be:73:ba:aa:73:da:1d:d6:f0:
3a:cd:fc:6c:9f:85:e2:7f:02:cb:f0:df:d0:7c:58:
b1:f6:4e:55:8e:a6:20:7c:85:64:f5:d8:f0:0d:9f:
e9:2b:de:78:8a:31:ef:53:18:77:25:0a:0c:b1:78:
e6:6b:f8:90:89:aa:7b:6b:ad:f6:b9:95:00:95:c9:
a7:97:48:69:a3:41:d3:36:70:6d:08:60:e7:12:b0:
67:12:9a:66:a1:b5:02:8d:16:a9:57:4d:9c:14:6b:
b7:e3:11:67:fd:b2:23:c7:6d:c5:58:16:0d:63:0f:
d0:1c:34:aa:3c:e1:6f:8b:19:16:ee:fd:d1:45:a5:
e2:92:30:cc:7a:fc:d2:10:22:a4:af:41:be:d8:71:
b8:7b:3b:d5:6c:f1:e8:a9:b8:a6:b8:12:bd:51:21:
22:d1:34:66:74:e4:9f:18:db:d8:4a:1c:6d:f2:5f:
2c:f8:7f:a5:4c:13:8b:9f:17:70:7f:c3:b1:e6:16:
0d:b5:5d:2d:64:d4:19:3b:3f:ec:7a:b5:75:48:88:
49:3d:1c:b2:7f:d6:6d:4d:48:80:19:f7:a5:71:d2:
22:59:e1:f4:c1:2e:52:2b:e2:b3:76:b6:e7:b9:59:
69:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:47:4D:CB:4B:C3:DA:08:2D:77:5C:7A:DD:B8:DA:12:99:54:8B:32
X509v3 Authority Key Identifier:
keyid:DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c4:27:87:62:a7:53:34:ac:98:27:3a:9b:98:3b:a0:24:ef:
53:07:93:5c:a2:52:84:a4:07:15:26:e6:33:9e:63:93:86:63:
8b:e4:5c:22:6c:86:95:84:b5:bb:e6:dc:40:34:bc:ca:55:77:
0a:03:e2:b4:08:95:03:33:0c:d0:46:05:23:bf:e6:ca:0a:2b:
35:cc:29:b8:86:4e:19:1a:87:6f:0a:ce:e0:4e:f9:09:d8:75:
83:56:6c:d6:22:f0:07:91:05:11:21:f1:66:e5:2e:71:0b:92:
e1:40:73:ca:a1:31:5f:90:a9:a2:b7:c2:55:65:47:9f:5a:9a:
11:1a:bd:8f:b9:31:fa:38:ae:61:46:a3:4b:9f:a5:cf:0b:58:
5b:3d:22:d4:ad:93:59:19:57:c9:87:8e:ab:d0:c0:01:32:91:
91:88:48:e8:69:1c:67:75:7b:2b:c7:58:0f:07:18:c2:bb:f5:
9d:2e:44:07:8c:91:99:00:7c:64:70:d1:89:76:5d:b9:8a:5c:
bd:c6:25:c7:47:0a:97:46:da:75:e4:48:23:54:47:34:28:bb:
46:f8:f1:b7:6f:82:2a:f5:58:c6:b2:23:c8:ee:14:d7:d1:f2:
61:14:e0:42:65:2a:f7:47:48:b6:3c:13:88:05:05:e8:cb:63:
01:65:9a:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF3A1TNRxnb4pLoRXMX98+lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZWIzOTRhYWUwODM2ZDM0MzQxZjdhZDMxOTQ5NDc2NWFi
NTZiMDcwHhcNMjYxMDI2MDcwMTA5WhcNMjYxMDI3MDcwMTA5WjAzMTEwLwYDVQQD
Eyg0YTQ3NGRjYjRiYzNkYTA4MmQ3NzVjN2FkZGI4ZGExMjk5NTQ4YjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjWQkdqKJD7uEP3ZSFl6BvZRScG+
c7qqc9od1vA6zfxsn4XifwLL8N/QfFix9k5VjqYgfIVk9djwDZ/pK954ijHvUxh3
JQoMsXjma/iQiap7a632uZUAlcmnl0hpo0HTNnBtCGDnErBnEppmobUCjRapV02c
FGu34xFn/bIjx23FWBYNYw/QHDSqPOFvixkW7v3RRaXikjDMevzSECKkr0G+2HG4
ezvVbPHoqbimuBK9USEi0TRmdOSfGNvYShxt8l8s+H+lTBOLnxdwf8Ox5hYNtV0t
ZNQZOz/serV1SIhJPRyyf9ZtTUiAGfelcdIiWeH0wS5SK+KzdrbnuVlpDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpHTctLw9oILXdcet242hKZVIsyMB8GA1UdIwQY
MBaAFNzrOUquCDbTQ0H3rTGUlHZatWsHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM09zNVNxNElOdE5EUWZldE1aU1VkbHExYXdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wYjA2NGYtYjAxYS00MzcxLWE0NGEt
NDBjODZiMzJlYjIyLzEvM09zNVNxNElOdE5EUWZldE1aU1VkbHExYXdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8wYjA2NGYtYjAxYS00MzcxLWE0NGEtNDBjODZiMzJlYjIy
LzEvM09zNVNxNElOdE5EUWZldE1aU1VkbHExYXdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASMQnh2Kn
UzSsmCc6m5g7oCTvUweTXKJShKQHFSbmM55jk4Zji+RcImyGlYS1u+bcQDS8ylV3
CgPitAiVAzMM0EYFI7/mygorNcwpuIZOGRqHbwrO4E75Cdh1g1Zs1iLwB5EFESHx
ZuUucQuS4UBzyqExX5CporfCVWVHn1qaERq9j7kx+jiuYUajS5+lzwtYWz0i1K2T
WRlXyYeOq9DAATKRkYhI6GkcZ3V7K8dYDwcYwrv1nS5EB4yRmQB8ZHDRiXZduYpc
vcYlx0cKl0badeRII1RHNCi7Rvjxt2+CKvVYxrIjyO4U19HyYRTgQmUq90dItjwT
iAUF6MtjAWWahQ==
-----END CERTIFICATE-----
Generated at Mon Oct 26 13:56:58 2026 by rpki-client