Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
File: 3ihtA6NzvWie8EYQocithHPr3a0.mft (raw, json)
Hash identifier: IdagAvpF0q71ZrihoAVh67YkrjhLvQqRjJ/+eT68U2w=
Subject key identifier: D6:7B:D7:1E:E2:CF:C0:FC:20:84:8C:69:E2:17:39:1F:E6:6F:89:5A
Authority key identifier: DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
Certificate issuer: /CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Certificate serial: 01A13F02D0730CB6688852F6C8D0B97C17E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
Manifest number: 15EA
Signing time: Thu 15 Oct 2026 10:01:51 +0000
Manifest this update: Thu 15 Oct 2026 10:01:51 +0000
Manifest next update: Fri 16 Oct 2026 10:01:51 +0000
Files and hashes: 1: 3ihtA6NzvWie8EYQocithHPr3a0.crl (hash: T+5K3dYZWAnnr6mM+szyrlXpS3AwD5agulr+tH+jFWo=)
2: 6LpMhHmk89Py7vWuBJ8eEXpWnn4.asa (hash: eq0WQCdDBBCmtQF0jQMbbLOLGcIojkIy5NWC9heTYts=)
3: vlBe3oYmjLCyAb6mMX2mR3pkXOU.roa (hash: zOmjl7/VF1REeDK9Kz85f9AKUhU+m9qTE9b+EWBSHrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 10:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:d0:73:0c:b6:68:88:52:f6:c8:d0:b9:7c:17:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Validity
Not Before: Oct 15 10:01:51 2026 GMT
Not After : Oct 16 10:01:51 2026 GMT
Subject: CN=d67bd71ee2cfc0fc20848c69e217391fe66f895a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a0:e9:1b:b6:56:62:a4:8d:6e:d4:17:69:25:
3a:02:d7:18:45:56:b7:4c:bf:6d:d3:d9:65:a0:60:
8b:7a:71:6d:e0:28:85:66:69:9d:7a:7f:3a:66:3d:
8e:51:2a:dc:a3:dd:34:fb:35:fa:9b:89:d0:57:f1:
2b:42:b5:1c:37:3d:dc:2e:ed:b9:e3:5a:bf:7b:90:
c1:93:46:68:bc:da:6d:a2:89:b5:66:2e:f8:0b:af:
e6:33:87:b2:19:de:4b:91:3a:5d:c2:af:f1:1e:8d:
be:a5:84:5a:ca:dd:05:44:5c:9f:27:82:e5:0d:75:
35:fa:81:86:23:12:9f:58:d9:fe:e0:e2:bc:26:70:
83:2e:fc:5f:63:f4:0f:65:8d:b3:4e:f3:5f:25:30:
bf:09:57:f1:16:e5:1e:bf:82:85:91:6b:bb:29:7d:
7d:63:6a:4c:eb:57:c6:2e:2e:9e:f0:38:82:54:29:
b7:6d:41:6f:8d:a7:d3:77:c1:e5:50:55:b2:d6:93:
4a:cc:17:95:46:1f:6c:ff:dc:eb:6e:c9:6c:bf:65:
6d:07:c9:17:75:b4:3c:64:a1:92:91:e2:d2:07:1f:
90:85:fa:4b:71:44:4e:20:8e:f0:23:a9:4e:e1:20:
c0:af:7b:84:18:74:2a:ff:fe:ff:41:d1:92:87:6f:
5f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7B:D7:1E:E2:CF:C0:FC:20:84:8C:69:E2:17:39:1F:E6:6F:89:5A
X509v3 Authority Key Identifier:
keyid:DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:08:f5:62:33:e5:9a:90:f6:55:84:85:d3:bc:b3:a1:d4:e9:
b6:38:9b:66:80:36:3a:32:40:44:c4:6c:00:69:a1:8f:8c:73:
23:48:39:ff:13:dd:1e:ce:f3:2a:4c:62:eb:51:3e:18:3b:af:
7f:30:c9:b8:34:27:e2:31:03:3c:85:8a:03:65:a4:76:ac:9b:
a3:6b:10:c6:03:8f:95:91:ed:69:c0:5d:f0:2f:73:a8:de:75:
a0:59:99:27:09:22:cc:84:43:52:cc:b2:fd:b0:c0:b6:d4:68:
cc:b8:3c:fc:12:8a:31:fd:ff:03:02:9c:11:99:08:85:20:8b:
40:e1:70:a2:78:b7:3e:fb:25:93:c5:ba:30:6b:8f:31:5b:ad:
09:72:8b:e9:f2:4c:9d:69:3c:a3:d8:57:7b:6f:ea:a0:9a:3c:
22:38:e5:22:32:3d:c4:d7:ce:f1:6d:f9:d0:99:07:83:34:e0:
9a:4d:e5:18:67:28:35:b1:39:c1:08:1e:23:54:f0:61:6c:0d:
5a:72:66:64:f7:27:ee:e3:60:83:c7:7a:82:0b:12:8d:66:c4:
5e:d8:a6:af:8b:03:09:7d:df:1a:a8:bd:10:cb:fe:23:54:d6:
d0:68:02:75:2e:fb:5b:53:5d:ca:96:00:8f:56:b7:32:4a:06:
9d:94:c4:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/AtBzDLZoiFL2yNC5fBfpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMjg2ZDAzYTM3M2JkNjg5ZWYwNDYxMGExYzhhZDg0NzNl
YmRkYWQwHhcNMjYxMDE1MTAwMTUxWhcNMjYxMDE2MTAwMTUxWjAzMTEwLwYDVQQD
EyhkNjdiZDcxZWUyY2ZjMGZjMjA4NDhjNjllMjE3MzkxZmU2NmY4OTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaDpG7ZWYqSNbtQXaSU6AtcYRVa3
TL9t09lloGCLenFt4CiFZmmden86Zj2OUSrco900+zX6m4nQV/ErQrUcNz3cLu25
41q/e5DBk0ZovNptoom1Zi74C6/mM4eyGd5LkTpdwq/xHo2+pYRayt0FRFyfJ4Ll
DXU1+oGGIxKfWNn+4OK8JnCDLvxfY/QPZY2zTvNfJTC/CVfxFuUev4KFkWu7KX19
Y2pM61fGLi6e8DiCVCm3bUFvjafTd8HlUFWy1pNKzBeVRh9s/9zrbslsv2VtB8kX
dbQ8ZKGSkeLSBx+QhfpLcUROII7wI6lO4SDAr3uEGHQq//7/QdGSh29fXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZ71x7iz8D8IISMaeIXOR/mb4laMB8GA1UdIwQY
MBaAFN4obQOjc71onvBGEKHIrYRz692tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2lodEE2Tnp2V2llOEVZUW9jaXRoSFByM2EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9kYmVmMTctOWJiOC00NmJjLTkzNDMt
Y2FkZjBjYTFkZDBkLzEvM2lodEE2Tnp2V2llOEVZUW9jaXRoSFByM2EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9kYmVmMTctOWJiOC00NmJjLTkzNDMtY2FkZjBjYTFkZDBk
LzEvM2lodEE2Tnp2V2llOEVZUW9jaXRoSFByM2EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABQj1YjPl
mpD2VYSF07yzodTptjibZoA2OjJARMRsAGmhj4xzI0g5/xPdHs7zKkxi61E+GDuv
fzDJuDQn4jEDPIWKA2Wkdqybo2sQxgOPlZHtacBd8C9zqN51oFmZJwkizIRDUsyy
/bDAttRozLg8/BKKMf3/AwKcEZkIhSCLQOFwoni3Pvslk8W6MGuPMVutCXKL6fJM
nWk8o9hXe2/qoJo8IjjlIjI9xNfO8W350JkHgzTgmk3lGGcoNbE5wQgeI1TwYWwN
WnJmZPcn7uNgg8d6ggsSjWbEXtimr4sDCX3fGqi9EMv+I1TW0GgCdS77W1NdypYA
j1a3MkoGnZTEAA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 19:56:18 2026 by rpki-client