Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
File: 3RWKDaAyZt8UTImntuNadhxJmPc.mft (raw, json)
Hash identifier: VnhEdncOp5ye+1TkNU9cbRhMINC69d14GH3wmYpD7P8=
Subject key identifier: 19:68:2D:17:68:FE:2D:10:3E:05:24:6F:EF:8D:60:14:D0:9D:8D:C1
Authority key identifier: DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7
Certificate issuer: /CN=dd158a0da03266df144c89a7b6e35a761c4998f7
Certificate serial: 01A17E859FC7316CE7B66575CFC81CD87EF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
Manifest number: 07BF
Signing time: Tue 27 Oct 2026 18:00:48 +0000
Manifest this update: Tue 27 Oct 2026 18:00:48 +0000
Manifest next update: Wed 28 Oct 2026 18:00:48 +0000
Files and hashes: 1: 3RWKDaAyZt8UTImntuNadhxJmPc.crl (hash: u7lbPBjeZGRziQBfF6nJAVHX8MaPXmA4ilBDGti1nAw=)
2: KspZGEs5E9kBto-BDRNBpwgMozk.roa (hash: fEFWOKz8D3otbrIF7eDSpQJCGfc9dNpOBoympwBaaIo=)
3: _u0GYQJkGDKJGQy_cIUVysNdl-Y.roa (hash: NS2H85YUlo/0gpq3fxBfbH1id4mYTnAFlnyWNFbuJ2A=)
4: jBPPic1_WDiPKVrnfNcPILaGEPs.roa (hash: UZz5IRcSRwfo/4r9rh5sOcK5GPeqYQtDEcdC/J2p/UU=)
5: lwH0nqYhX__-20vFmPdqHfNDIrg.roa (hash: wCraYk4JI+EHVkIbds0t6IzfVaol6i4LvLzpJq3OoSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 18:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:85:9f:c7:31:6c:e7:b6:65:75:cf:c8:1c:d8:7e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd158a0da03266df144c89a7b6e35a761c4998f7
Validity
Not Before: Oct 27 18:00:48 2026 GMT
Not After : Oct 28 18:00:48 2026 GMT
Subject: CN=19682d1768fe2d103e05246fef8d6014d09d8dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:11:84:d9:34:6c:4d:d5:bc:7c:a6:51:75:9c:
59:9f:68:ac:0f:8c:90:b6:5c:9d:20:7d:0c:f3:61:
43:8a:6a:ab:b8:0f:8d:39:d6:0b:b0:4f:db:ed:27:
28:4f:ff:60:ce:eb:cb:18:ca:da:b9:f5:69:e1:1a:
cd:93:73:32:b8:4a:35:5c:a9:d2:32:b3:a8:a2:25:
0a:fb:4d:dd:24:65:d0:4d:f6:c7:07:24:fb:11:f7:
7c:d2:fc:bc:77:88:49:92:6c:41:7c:1b:9f:e2:b6:
52:3b:e6:73:60:06:9a:11:e9:62:12:01:1d:45:19:
d0:9f:d6:74:2a:6c:bf:7d:fa:54:5b:24:05:3f:c0:
ca:4c:76:66:e2:76:05:2f:b5:c2:e8:aa:e5:63:bd:
84:fe:e5:c3:03:30:fc:ed:7f:30:55:00:63:d3:e7:
4c:40:f3:b9:55:92:03:25:e0:8a:24:8e:af:f6:b4:
e5:a6:2c:cc:da:a5:b1:84:5a:f9:ec:7b:23:64:6f:
f0:54:40:7b:16:ed:e2:b5:4a:bf:f7:4f:57:6c:e4:
01:2f:74:5f:01:a9:a2:43:24:36:6a:aa:7a:aa:e2:
16:9a:53:be:33:cd:4c:5e:4e:98:c1:6e:dd:06:9c:
ba:06:75:50:24:6c:e4:8a:d6:8d:6b:d7:b5:2c:95:
f7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:68:2D:17:68:FE:2D:10:3E:05:24:6F:EF:8D:60:14:D0:9D:8D:C1
X509v3 Authority Key Identifier:
keyid:DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:2a:e6:4f:58:fa:f9:a2:9b:1c:71:3c:14:8f:0f:cd:74:5f:
4b:f8:e5:34:6c:d1:ec:48:59:bb:11:73:64:bc:2c:74:90:fb:
d6:db:6a:f1:4a:31:01:67:af:3f:09:77:f6:98:68:ce:64:88:
a7:54:31:39:6e:e9:89:b7:b4:be:cf:5f:e7:bd:72:1c:35:f3:
85:fa:43:d7:1e:bb:22:31:69:33:84:fc:9c:03:3a:ad:38:c0:
9e:a2:1f:e7:72:5f:a1:23:46:73:1c:19:ee:55:56:06:90:3e:
cc:93:6c:f6:ef:d5:b1:5d:7e:b0:fe:3b:05:93:68:97:50:78:
03:53:3d:90:d0:4f:61:6c:db:de:f3:86:68:ad:0b:a9:47:b3:
2c:7e:22:b4:11:9a:02:ee:07:bb:d8:d8:a9:04:e5:5a:92:89:
34:60:91:e0:db:52:1e:9d:18:2b:d3:fa:e2:fd:9d:ad:a4:dc:
f8:0e:89:16:41:31:b1:2b:f9:a0:c7:3d:c8:ca:57:35:24:02:
e0:17:d2:bf:03:16:e3:9b:35:77:57:51:03:31:1d:64:92:a0:
21:3d:4e:61:6c:6b:f7:90:6c:f5:c4:4b:c4:13:99:6d:ef:43:
d7:c6:70:e0:ba:ec:ac:bd:7e:a2:19:66:e5:4b:90:72:c2:4b:
49:5e:27:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF+hZ/HMWzntmV1z8gc2H7xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMTU4YTBkYTAzMjY2ZGYxNDRjODlhN2I2ZTM1YTc2MWM0
OTk4ZjcwHhcNMjYxMDI3MTgwMDQ4WhcNMjYxMDI4MTgwMDQ4WjAzMTEwLwYDVQQD
EygxOTY4MmQxNzY4ZmUyZDEwM2UwNTI0NmZlZjhkNjAxNGQwOWQ4ZGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRGE2TRsTdW8fKZRdZxZn2isD4yQ
tlydIH0M82FDimqruA+NOdYLsE/b7ScoT/9gzuvLGMraufVp4RrNk3MyuEo1XKnS
MrOooiUK+03dJGXQTfbHByT7Efd80vy8d4hJkmxBfBuf4rZSO+ZzYAaaEeliEgEd
RRnQn9Z0Kmy/ffpUWyQFP8DKTHZm4nYFL7XC6KrlY72E/uXDAzD87X8wVQBj0+dM
QPO5VZIDJeCKJI6v9rTlpizM2qWxhFr57HsjZG/wVEB7Fu3itUq/909XbOQBL3Rf
AamiQyQ2aqp6quIWmlO+M81MXk6YwW7dBpy6BnVQJGzkitaNa9e1LJX3JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBloLRdo/i0QPgUkb++NYBTQnY3BMB8GA1UdIwQY
MBaAFN0Vig2gMmbfFEyJp7bjWnYcSZj3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1JXS0RhQXladDhVVEltbnR1TmFkaHhKbVBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8wYjU1YWItYWNjOC00MWRhLTljODAt
ZThmMjBhYWRkZTk5LzEvM1JXS0RhQXladDhVVEltbnR1TmFkaHhKbVBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS8wYjU1YWItYWNjOC00MWRhLTljODAtZThmMjBhYWRkZTk5
LzEvM1JXS0RhQXladDhVVEltbnR1TmFkaHhKbVBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACCrmT1j6
+aKbHHE8FI8PzXRfS/jlNGzR7EhZuxFzZLwsdJD71ttq8UoxAWevPwl39phozmSI
p1QxOW7pibe0vs9f571yHDXzhfpD1x67IjFpM4T8nAM6rTjAnqIf53JfoSNGcxwZ
7lVWBpA+zJNs9u/VsV1+sP47BZNol1B4A1M9kNBPYWzb3vOGaK0LqUezLH4itBGa
Au4Hu9jYqQTlWpKJNGCR4NtSHp0YK9P64v2draTc+A6JFkExsSv5oMc9yMpXNSQC
4BfSvwMW45s1d1dRAzEdZJKgIT1OYWxr95Bs9cRLxBOZbe9D18Zw4LrsrL1+ohlm
5UuQcsJLSV4nrA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 04:39:25 2026 by rpki-client