Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
File: 3ihtA6NzvWie8EYQocithHPr3a0.mft (raw, json)
Hash identifier: DSc2wlu01YDNiagMV9H2AYkmEWITv4+7CJrHN5SWeiY=
Subject key identifier: 73:E4:18:BE:D2:02:B5:57:49:46:90:94:81:84:5B:96:BA:74:BD:D0
Authority key identifier: DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
Certificate issuer: /CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Certificate serial: 019FF8A371AE5AB029F993276048C285BED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
Manifest number: 1541
Signing time: Thu 13 Aug 2026 01:01:28 +0000
Manifest this update: Thu 13 Aug 2026 01:01:28 +0000
Manifest next update: Fri 14 Aug 2026 01:01:28 +0000
Files and hashes: 1: 3ihtA6NzvWie8EYQocithHPr3a0.crl (hash: 5NkTnv23bIEfxCj89Bj1opYTeoowIUWM8xhie6JcvGo=)
2: 6LpMhHmk89Py7vWuBJ8eEXpWnn4.asa (hash: eq0WQCdDBBCmtQF0jQMbbLOLGcIojkIy5NWC9heTYts=)
3: vlBe3oYmjLCyAb6mMX2mR3pkXOU.roa (hash: zOmjl7/VF1REeDK9Kz85f9AKUhU+m9qTE9b+EWBSHrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:a3:71:ae:5a:b0:29:f9:93:27:60:48:c2:85:be:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Validity
Not Before: Aug 13 01:01:28 2026 GMT
Not After : Aug 14 01:01:28 2026 GMT
Subject: CN=73e418bed202b5574946909481845b96ba74bdd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4a:ae:96:3a:db:bd:f5:56:30:2d:9b:37:85:
61:5b:43:11:3f:32:f0:31:28:bd:ea:77:3b:b8:f8:
b6:1b:d6:2b:8f:40:29:f2:37:3f:ac:f3:9f:fa:47:
ff:ad:43:4a:b8:26:46:fb:76:8f:d0:b1:59:01:89:
02:37:ea:66:06:c0:9f:19:3e:53:f7:5d:8a:f8:bb:
1b:08:9e:c2:79:79:2e:47:8d:47:1f:d7:b0:2c:23:
71:d1:97:d1:c3:6c:23:fb:b7:9b:5f:45:fc:86:94:
71:68:a0:53:e3:f6:ee:0e:7d:34:69:c9:c1:83:07:
81:14:58:74:a9:44:55:ff:e1:9a:5b:0b:51:b1:53:
f4:35:70:77:48:b0:88:ea:f9:4d:1e:b2:0d:ac:ca:
ec:c4:a9:d3:8b:15:ad:82:8f:a3:77:5b:5c:18:9b:
d4:ec:1b:8f:d9:17:09:f6:32:e0:7f:f1:82:ea:9f:
71:ee:6b:2d:fd:28:af:b1:d6:ce:f7:0c:92:64:dd:
77:e8:e4:34:e1:0a:12:a1:8e:f8:9d:c8:85:20:74:
4f:68:f5:18:02:3c:41:34:24:be:6b:ad:df:dc:6c:
51:c9:71:22:00:d5:d3:10:ff:82:a8:37:16:74:bb:
a2:47:fe:57:14:0b:9d:f9:f1:4e:0f:5f:e1:76:6c:
ac:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E4:18:BE:D2:02:B5:57:49:46:90:94:81:84:5B:96:BA:74:BD:D0
X509v3 Authority Key Identifier:
keyid:DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e4:9a:ff:92:58:cd:6d:9d:34:3b:f7:56:c3:f7:33:71:19:
9f:d0:d6:cd:88:d6:f5:90:8d:2d:fc:e9:ed:1c:40:fd:eb:1a:
bb:19:a0:37:89:bf:38:c5:6c:0b:b5:2f:8b:b8:9e:b3:28:4f:
b0:16:ef:b1:78:e1:93:d9:51:af:ed:68:dc:93:51:b3:71:03:
5b:03:ee:bb:9d:72:60:c1:fd:ad:66:72:85:fa:ac:8f:23:5a:
03:c8:ca:c3:eb:7d:90:9b:9f:96:dd:f3:d1:68:b1:8f:a8:12:
b8:c9:e5:47:7d:3f:34:68:4c:08:5f:53:6c:48:75:19:87:2c:
9d:aa:74:7c:6d:75:84:90:a7:e0:76:9c:8d:02:fe:c1:e7:0b:
4d:b8:14:1c:72:22:24:b7:18:3c:6c:89:1c:69:23:dd:73:47:
87:7c:58:bd:76:b1:6e:d4:9c:8e:17:7e:70:49:38:f9:b0:21:
be:c2:3c:ef:c4:0e:d1:f5:06:b7:7f:8c:b0:5a:fa:3b:a4:2a:
0a:15:c9:61:26:41:0c:30:24:50:90:4e:b7:48:9c:79:99:74:
8f:c6:82:8c:0f:78:01:63:57:5f:46:6a:83:9f:97:43:d6:ff:
d8:19:18:e0:2d:9d:6a:c6:ed:8d:c9:58:d6:f3:ca:d9:4f:9d:
2f:36:ad:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/4o3GuWrAp+ZMnYEjChb7ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMjg2ZDAzYTM3M2JkNjg5ZWYwNDYxMGExYzhhZDg0NzNl
YmRkYWQwHhcNMjYwODEzMDEwMTI4WhcNMjYwODE0MDEwMTI4WjAzMTEwLwYDVQQD
Eyg3M2U0MThiZWQyMDJiNTU3NDk0NjkwOTQ4MTg0NWI5NmJhNzRiZGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEquljrbvfVWMC2bN4VhW0MRPzLw
MSi96nc7uPi2G9Yrj0Ap8jc/rPOf+kf/rUNKuCZG+3aP0LFZAYkCN+pmBsCfGT5T
912K+LsbCJ7CeXkuR41HH9ewLCNx0ZfRw2wj+7ebX0X8hpRxaKBT4/buDn00acnB
gweBFFh0qURV/+GaWwtRsVP0NXB3SLCI6vlNHrINrMrsxKnTixWtgo+jd1tcGJvU
7BuP2RcJ9jLgf/GC6p9x7mst/SivsdbO9wySZN136OQ04QoSoY74nciFIHRPaPUY
AjxBNCS+a63f3GxRyXEiANXTEP+CqDcWdLuiR/5XFAud+fFOD1/hdmysPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPkGL7SArVXSUaQlIGEW5a6dL3QMB8GA1UdIwQY
MBaAFN4obQOjc71onvBGEKHIrYRz692tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2lodEE2Tnp2V2llOEVZUW9jaXRoSFByM2EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9kYmVmMTctOWJiOC00NmJjLTkzNDMt
Y2FkZjBjYTFkZDBkLzEvM2lodEE2Tnp2V2llOEVZUW9jaXRoSFByM2EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9kYmVmMTctOWJiOC00NmJjLTkzNDMtY2FkZjBjYTFkZDBk
LzEvM2lodEE2Tnp2V2llOEVZUW9jaXRoSFByM2EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbuSa/5JY
zW2dNDv3VsP3M3EZn9DWzYjW9ZCNLfzp7RxA/esauxmgN4m/OMVsC7Uvi7iesyhP
sBbvsXjhk9lRr+1o3JNRs3EDWwPuu51yYMH9rWZyhfqsjyNaA8jKw+t9kJuflt3z
0Wixj6gSuMnlR30/NGhMCF9TbEh1GYcsnap0fG11hJCn4HacjQL+wecLTbgUHHIi
JLcYPGyJHGkj3XNHh3xYvXaxbtScjhd+cEk4+bAhvsI878QO0fUGt3+MsFr6O6Qq
ChXJYSZBDDAkUJBOt0iceZl0j8aCjA94AWNXX0Zqg5+XQ9b/2BkY4C2dasbtjclY
1vPK2U+dLzat2Q==
-----END CERTIFICATE-----
Generated at Thu Aug 13 09:01:06 2026 by rpki-client