Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
File: 3O8ZrfppRVibwtEAFU5aWMRJihQ.mft (raw, json)
Hash identifier: xjzm/jtdas/wOr7qwW2up2j41hN8ozSVzFcFDkhARbY=
Subject key identifier: CD:18:BB:FF:F7:66:36:CC:C7:E6:B5:5E:08:76:E7:A6:F6:C4:21:66
Authority key identifier: DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
Certificate issuer: /CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Certificate serial: 019E30E0D91B66E54C0690CB1AAD119AE159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
Manifest number: 171D
Signing time: Sat 16 May 2026 13:01:42 +0000
Manifest this update: Sat 16 May 2026 13:01:42 +0000
Manifest next update: Sun 17 May 2026 13:01:42 +0000
Files and hashes: 1: 3O8ZrfppRVibwtEAFU5aWMRJihQ.crl (hash: aTaNT9771Fw4SvRDkemk/9/+7flLXcrKQBegLIR8hNA=)
2: itoTic7G_-G7jco2XW4Z1NEcbCw.roa (hash: +uznw2maAhBkp9yoIBUiVjV+pSA2CpeiVnSVCi83O3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:d9:1b:66:e5:4c:06:90:cb:1a:ad:11:9a:e1:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Validity
Not Before: May 16 13:01:42 2026 GMT
Not After : May 17 13:01:42 2026 GMT
Subject: CN=cd18bbfff76636ccc7e6b55e0876e7a6f6c42166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a7:d3:be:84:cb:c2:91:53:df:5e:e4:9a:06:
e6:8a:d3:ce:55:b6:b7:af:bd:db:86:97:e2:55:33:
59:a7:1b:d7:d6:82:33:1c:e3:f7:05:9c:65:61:e9:
f4:d1:36:30:bf:66:88:34:30:99:05:c3:c7:86:a9:
29:b4:e1:f6:1e:50:74:fa:43:1f:6b:cf:09:8d:2e:
61:fe:5d:b7:09:4b:4a:38:52:b6:bc:5f:99:39:69:
ed:eb:98:55:57:03:3e:3b:34:a6:6b:64:09:30:4f:
a6:7e:1a:6d:41:a2:96:c3:87:58:13:a1:13:0c:08:
ea:a1:ea:31:bb:03:9d:9e:2a:db:1b:71:c7:dd:9e:
bf:9c:f1:cb:f7:2e:d6:af:ad:f8:2f:dc:2d:a9:d4:
8f:19:6b:d9:5c:01:3a:52:24:7b:9b:f5:88:1a:95:
92:64:ab:73:c0:0b:a6:9d:4a:be:0a:67:fe:20:c9:
42:e7:83:b9:aa:fe:98:62:d6:2b:72:3d:e5:6d:12:
51:bf:17:74:c8:6b:66:91:80:20:84:30:00:2d:87:
b7:b7:ac:15:6b:09:b6:81:a5:29:63:a2:1d:28:ca:
8e:41:c4:ce:ed:2f:15:bb:39:e6:e6:bc:da:a5:30:
80:6d:fc:6a:29:8f:04:16:c1:02:04:51:20:e5:a2:
32:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:18:BB:FF:F7:66:36:CC:C7:E6:B5:5E:08:76:E7:A6:F6:C4:21:66
X509v3 Authority Key Identifier:
keyid:DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d1:60:87:ff:21:42:70:e6:d9:08:15:26:17:11:d1:c0:fb:
85:1e:42:9b:cf:f8:32:2e:4c:af:0e:97:c4:da:bc:d7:ce:bc:
d1:7d:a3:7b:a5:9a:df:74:2e:e6:16:49:0a:d9:e5:98:bb:22:
86:e1:59:ec:c8:90:e8:9d:19:b6:54:e5:8f:24:7e:a9:a9:67:
5c:d9:f7:5f:91:d2:69:be:de:e8:cb:90:95:c6:53:e7:a6:38:
7e:7a:bc:a6:3d:e5:40:b1:68:f3:47:a5:50:01:75:a2:db:2a:
6d:dc:88:26:bd:f9:a9:54:e1:26:ac:bf:8e:40:2e:b0:da:47:
fe:a0:84:37:47:67:71:ab:c7:b4:69:40:8c:5d:3e:08:2e:c6:
16:80:6f:ff:5a:0a:c6:67:65:d0:7c:f5:5b:a8:4c:fa:17:5b:
af:95:3f:32:b8:b9:c0:ae:1c:46:d6:b7:c1:50:33:ff:df:49:
28:44:65:85:c2:66:38:98:78:03:69:ec:0b:da:67:8f:76:c3:
1a:5b:75:be:82:27:43:8b:53:44:e4:a9:db:20:e4:f0:9d:c6:
46:51:55:10:9b:12:ba:3f:59:26:f1:6f:eb:1f:19:7f:bf:54:
a8:ff:0d:e7:fa:d3:f9:3c:f0:42:68:5c:89:6f:4c:cb:70:a4:
b6:8d:f9:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w4NkbZuVMBpDLGq0RmuFZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZWYxOWFkZmE2OTQ1NTg5YmMyZDEwMDE1NGU1YTU4YzQ0
OThhMTQwHhcNMjYwNTE2MTMwMTQyWhcNMjYwNTE3MTMwMTQyWjAzMTEwLwYDVQQD
EyhjZDE4YmJmZmY3NjYzNmNjYzdlNmI1NWUwODc2ZTdhNmY2YzQyMTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKfTvoTLwpFT317kmgbmitPOVba3
r73bhpfiVTNZpxvX1oIzHOP3BZxlYen00TYwv2aINDCZBcPHhqkptOH2HlB0+kMf
a88JjS5h/l23CUtKOFK2vF+ZOWnt65hVVwM+OzSma2QJME+mfhptQaKWw4dYE6ET
DAjqoeoxuwOdnirbG3HH3Z6/nPHL9y7Wr634L9wtqdSPGWvZXAE6UiR7m/WIGpWS
ZKtzwAumnUq+Cmf+IMlC54O5qv6YYtYrcj3lbRJRvxd0yGtmkYAghDAALYe3t6wV
awm2gaUpY6IdKMqOQcTO7S8Vuznm5rzapTCAbfxqKY8EFsECBFEg5aIyaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0Yu//3ZjbMx+a1Xgh256b2xCFmMB8GA1UdIwQY
MBaAFNzvGa36aUVYm8LRABVOWljESYoUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM084WnJmcHBSVmlid3RFQUZVNWFXTVJKaWhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82MDJjMzUtZDM2Ni00N2MwLWEzMzQt
MjFkZWFkMGM1ZTljLzEvM084WnJmcHBSVmlid3RFQUZVNWFXTVJKaWhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC82MDJjMzUtZDM2Ni00N2MwLWEzMzQtMjFkZWFkMGM1ZTlj
LzEvM084WnJmcHBSVmlid3RFQUZVNWFXTVJKaWhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAftFgh/8h
QnDm2QgVJhcR0cD7hR5Cm8/4Mi5Mrw6XxNq818680X2je6Wa33Qu5hZJCtnlmLsi
huFZ7MiQ6J0ZtlTljyR+qalnXNn3X5HSab7e6MuQlcZT56Y4fnq8pj3lQLFo80el
UAF1otsqbdyIJr35qVThJqy/jkAusNpH/qCEN0dncavHtGlAjF0+CC7GFoBv/1oK
xmdl0Hz1W6hM+hdbr5U/Mri5wK4cRta3wVAz/99JKERlhcJmOJh4A2nsC9pnj3bD
Glt1voInQ4tTROSp2yDk8J3GRlFVEJsSuj9ZJvFv6x8Zf79UqP8N5/rT+TzwQmhc
iW9My3Ckto35Qw==
-----END CERTIFICATE-----
Generated at Sat May 16 16:24:34 2026 by rpki-client