Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
File: 3svvNSysca1brg6LHAIkbjtlAlA.mft (raw, json)
Hash identifier: R0B63N9hr+ulrhf7U9W9O28kJ/LHOjqLkI5AKSwghI8=
Subject key identifier: FF:51:00:77:20:A6:10:78:4D:04:1B:AE:02:B9:12:F9:60:D7:93:11
Authority key identifier: DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50
Certificate issuer: /CN=decbef352cac71ad5bae0e8b1c02246e3b650250
Certificate serial: 01A08A557CDE9670423589E896DB5804C47B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
Manifest number: 0DC5
Signing time: Thu 10 Sep 2026 08:00:53 +0000
Manifest this update: Thu 10 Sep 2026 08:00:53 +0000
Manifest next update: Fri 11 Sep 2026 08:00:53 +0000
Files and hashes: 1: 3svvNSysca1brg6LHAIkbjtlAlA.crl (hash: QfSsJxDbJsc4gj6yhTH9IHfC7fPKiItcmZnJHFMuCps=)
2: VuX4J2QukxsOIE5nfEx2tHa_6Dc.roa (hash: /6Cm3xSVnWhJDBO1jxzYWi2+tCHbHsChrmLHN+jeMKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:7c:de:96:70:42:35:89:e8:96:db:58:04:c4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=decbef352cac71ad5bae0e8b1c02246e3b650250
Validity
Not Before: Sep 10 08:00:53 2026 GMT
Not After : Sep 11 08:00:53 2026 GMT
Subject: CN=ff51007720a610784d041bae02b912f960d79311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d7:be:2f:b7:2a:9b:55:1c:4a:4d:db:a7:04:
cd:e2:c2:3a:e2:e0:5b:94:35:f5:cf:bb:b0:19:b3:
28:5a:17:21:dd:b0:d1:60:d9:a1:2e:0e:c6:93:d4:
ca:7f:c7:52:b5:23:05:53:71:6f:31:e6:6d:01:6a:
6b:2d:be:e9:29:f8:da:f6:61:a9:9b:54:4b:12:12:
f7:a8:64:78:93:30:77:e4:41:dd:e4:34:fc:c3:33:
e3:05:92:27:d5:5b:04:6c:81:c1:e8:d8:9e:ce:e8:
de:60:7b:e8:54:5d:82:f4:e7:55:80:0b:92:22:ac:
24:ae:21:7f:57:60:f2:2f:af:c8:f6:af:71:49:d8:
f6:1a:57:26:e6:64:48:05:57:45:36:53:9f:df:5b:
f9:19:8c:19:e6:07:f9:06:f3:e6:72:fb:19:19:24:
e9:b5:f5:71:4c:c1:95:d8:db:98:2d:aa:70:8e:42:
3b:29:cd:3e:3c:2f:23:e4:1a:48:04:58:1d:0d:ca:
88:b3:c7:e5:a5:93:7f:16:79:1e:4f:15:4b:70:7a:
0a:44:9c:d0:0a:18:6c:2c:b3:c2:cb:cd:7e:70:65:
74:f2:9c:d1:5e:f3:86:52:ef:ff:e5:8b:6f:8b:4f:
3a:89:1a:97:9b:d3:56:af:bc:67:1f:00:fe:ad:f7:
a2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:51:00:77:20:A6:10:78:4D:04:1B:AE:02:B9:12:F9:60:D7:93:11
X509v3 Authority Key Identifier:
keyid:DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:16:5a:ed:38:4a:c3:72:b6:f0:a9:66:7d:7f:f3:c2:9a:0c:
19:95:3f:ce:6c:fb:7c:d7:ad:43:23:c9:91:29:60:db:32:15:
e1:b9:8a:c0:48:cf:19:53:be:34:f3:56:47:31:a2:84:e1:52:
e1:9e:be:c0:4e:82:1f:06:07:a7:d9:36:70:8d:34:fa:4c:dd:
9c:e5:dd:9e:74:c7:0b:bf:39:cb:09:2b:6f:26:b2:37:5f:db:
64:65:20:20:e8:96:99:69:ff:f8:6c:c1:0b:5d:47:0a:74:c6:
b9:2a:d4:e4:4d:96:9d:c2:bf:1f:cb:ce:2e:fb:c6:b5:1e:d8:
c1:e2:43:27:fe:9f:13:47:bd:9f:ca:80:77:fc:0a:be:2c:45:
fb:11:57:09:2e:c6:6e:6b:8f:27:aa:1e:08:18:b8:fe:88:38:
9a:b4:6c:1c:0c:b1:e8:ed:e3:25:ca:54:5b:90:fb:bb:e4:52:
6c:48:8b:05:d2:5f:eb:c6:4e:e7:10:6f:ac:a9:50:06:0e:11:
bc:dd:5f:b0:eb:19:2b:3b:ee:8c:81:f4:6e:a2:74:66:72:99:
fc:8f:cc:84:44:46:6f:57:96:fa:fc:95:9f:b8:68:85:cd:5f:
e7:a3:4c:4c:cc:95:f1:3b:3c:ef:b9:d2:84:93:f0:a3:e5:b8:
98:26:86:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKVXzelnBCNYnolttYBMR7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlY2JlZjM1MmNhYzcxYWQ1YmFlMGU4YjFjMDIyNDZlM2I2
NTAyNTAwHhcNMjYwOTEwMDgwMDUzWhcNMjYwOTExMDgwMDUzWjAzMTEwLwYDVQQD
EyhmZjUxMDA3NzIwYTYxMDc4NGQwNDFiYWUwMmI5MTJmOTYwZDc5MzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9e+L7cqm1UcSk3bpwTN4sI64uBb
lDX1z7uwGbMoWhch3bDRYNmhLg7Gk9TKf8dStSMFU3FvMeZtAWprLb7pKfja9mGp
m1RLEhL3qGR4kzB35EHd5DT8wzPjBZIn1VsEbIHB6NiezujeYHvoVF2C9OdVgAuS
IqwkriF/V2DyL6/I9q9xSdj2Glcm5mRIBVdFNlOf31v5GYwZ5gf5BvPmcvsZGSTp
tfVxTMGV2NuYLapwjkI7Kc0+PC8j5BpIBFgdDcqIs8flpZN/FnkeTxVLcHoKRJzQ
ChhsLLPCy81+cGV08pzRXvOGUu//5Ytvi086iRqXm9NWr7xnHwD+rfeiewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9RAHcgphB4TQQbrgK5Evlg15MRMB8GA1UdIwQY
MBaAFN7L7zUsrHGtW64OixwCJG47ZQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3N2dk5TeXNjYTFicmc2TEhBSWtianRsQWxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82YmNmM2YtNWNhYy00NDcwLThhYWIt
NTQxZjlmY2JhNzQyLzEvM3N2dk5TeXNjYTFicmc2TEhBSWtianRsQWxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC82YmNmM2YtNWNhYy00NDcwLThhYWItNTQxZjlmY2JhNzQy
LzEvM3N2dk5TeXNjYTFicmc2TEhBSWtianRsQWxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADxZa7ThK
w3K28KlmfX/zwpoMGZU/zmz7fNetQyPJkSlg2zIV4bmKwEjPGVO+NPNWRzGihOFS
4Z6+wE6CHwYHp9k2cI00+kzdnOXdnnTHC785ywkrbyayN1/bZGUgIOiWmWn/+GzB
C11HCnTGuSrU5E2WncK/H8vOLvvGtR7YweJDJ/6fE0e9n8qAd/wKvixF+xFXCS7G
bmuPJ6oeCBi4/og4mrRsHAyx6O3jJcpUW5D7u+RSbEiLBdJf68ZO5xBvrKlQBg4R
vN1fsOsZKzvujIH0bqJ0ZnKZ/I/MhERGb1eW+vyVn7hohc1f56NMTMyV8Ts877nS
hJPwo+W4mCaG6w==
-----END CERTIFICATE-----
Generated at Thu Sep 10 12:01:48 2026 by rpki-client