Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
File: 3EtKGKfhUaN9peTM2qnn29iOnZM.mft (raw, json)
Hash identifier: TDsVK/ItCHQLVa9cHUlQwG13p2O+4YyUxP/LEosqDg4=
Subject key identifier: 90:2F:FB:99:E0:41:97:E1:DF:ED:DB:99:86:E9:8E:C9:B5:B3:2F:76
Authority key identifier: DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93
Certificate issuer: /CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93
Certificate serial: 019E1DC7326D3339AF6FF46D13C5E432387A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
Manifest number: 08AF
Signing time: Tue 12 May 2026 20:00:54 +0000
Manifest this update: Tue 12 May 2026 20:00:54 +0000
Manifest next update: Wed 13 May 2026 20:00:54 +0000
Files and hashes: 1: 3EtKGKfhUaN9peTM2qnn29iOnZM.crl (hash: 4SBeylgzl/IKoKlsFQdnOosQUs+zZ23Q78fSPZskQgY=)
2: 43ymdr3K3iMs6v29pEnuXTGVVTU.roa (hash: T6YtebG+rID15qUGedeSqtw1F5/D7XsYg2ZcZB9ldO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:32:6d:33:39:af:6f:f4:6d:13:c5:e4:32:38:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93
Validity
Not Before: May 12 20:00:54 2026 GMT
Not After : May 13 20:00:54 2026 GMT
Subject: CN=902ffb99e04197e1dfeddb9986e98ec9b5b32f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b0:e7:8c:8d:8a:77:0d:7b:5a:4f:6a:97:5c:
a9:56:7d:b0:33:82:c8:ea:65:07:3d:e2:52:09:5b:
c0:55:8d:b1:2b:c6:1d:9d:1c:c2:56:18:73:28:3a:
32:6b:1e:fe:2b:fc:10:06:70:18:5c:ce:fb:d3:0d:
a4:16:66:94:aa:09:6e:e0:d6:b4:aa:5b:04:dc:fe:
25:39:63:a8:e9:47:82:77:34:24:8f:c3:5f:66:4a:
70:98:4c:36:c7:c7:03:d6:16:9d:68:36:c9:38:00:
97:00:f3:f2:1c:a2:5e:a1:ba:f2:e7:14:de:10:a8:
54:6a:67:42:13:91:74:f5:a1:64:56:68:df:af:23:
c4:89:84:4e:58:d4:19:e5:6f:2d:16:42:be:4d:2f:
4b:a8:35:0d:3a:70:ec:92:63:b5:ce:62:27:83:13:
c3:8a:52:d4:17:f3:4b:a8:47:dd:6b:3c:b9:03:58:
4a:ba:d4:8b:d4:89:ef:12:42:a5:e0:0b:cd:11:35:
16:8b:45:62:2c:c0:02:0b:32:11:af:db:77:8b:c7:
95:6f:8d:81:75:3a:d3:04:fd:8a:e0:c3:98:b3:8c:
fb:7b:1f:25:5b:f1:2a:d9:cf:33:31:42:fc:c7:be:
b2:b2:b4:6f:87:11:42:7b:5a:a7:46:9d:3a:18:78:
72:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2F:FB:99:E0:41:97:E1:DF:ED:DB:99:86:E9:8E:C9:B5:B3:2F:76
X509v3 Authority Key Identifier:
keyid:DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:5e:e3:28:66:65:b6:3d:b0:7c:8e:2b:42:97:d5:76:07:90:
a1:94:13:9f:da:ba:03:3e:b1:4c:62:fd:de:7c:41:7b:64:7d:
35:f2:99:4a:d8:57:a0:51:93:48:95:63:9a:bc:38:f7:86:33:
f2:ea:d0:16:cc:db:62:12:92:62:49:75:16:5a:21:35:87:18:
2e:aa:bc:60:cb:f6:e7:42:cc:00:a5:f0:71:e9:a9:7c:f6:cc:
47:59:5f:69:c5:4c:56:3d:a8:9c:d2:d4:ec:c3:65:22:7c:ee:
0f:eb:f3:99:43:cd:d4:df:f3:f3:1a:51:6f:dc:93:f6:6b:c6:
e1:bc:50:99:08:d7:95:c6:6f:6b:3d:27:d0:c9:0a:59:4a:ec:
62:c8:d8:2f:68:71:38:57:d3:65:0c:ea:b1:a8:6f:a3:cb:cf:
71:fd:4b:49:21:5c:46:2c:ad:dd:9f:62:71:4b:45:eb:cd:01:
20:23:1b:fe:01:7d:1d:cd:5e:9a:b0:d0:9b:4a:8d:47:d5:f8:
f1:a5:78:32:d4:e6:b4:3e:83:54:87:c6:fb:f2:78:b7:54:29:
20:1f:65:41:c9:bc:be:bb:ed:55:e0:7c:41:af:f0:0e:86:a2:
14:4a:33:1d:96:48:a1:e3:ef:a7:23:b7:db:28:50:cf:ec:73:
32:12:cd:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dxzJtMzmvb/RtE8XkMjh6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNGI0YTE4YTdlMTUxYTM3ZGE1ZTRjY2RhYTllN2RiZDg4
ZTlkOTMwHhcNMjYwNTEyMjAwMDU0WhcNMjYwNTEzMjAwMDU0WjAzMTEwLwYDVQQD
Eyg5MDJmZmI5OWUwNDE5N2UxZGZlZGRiOTk4NmU5OGVjOWI1YjMyZjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7DnjI2Kdw17Wk9ql1ypVn2wM4LI
6mUHPeJSCVvAVY2xK8YdnRzCVhhzKDoyax7+K/wQBnAYXM770w2kFmaUqglu4Na0
qlsE3P4lOWOo6UeCdzQkj8NfZkpwmEw2x8cD1hadaDbJOACXAPPyHKJeobry5xTe
EKhUamdCE5F09aFkVmjfryPEiYROWNQZ5W8tFkK+TS9LqDUNOnDskmO1zmIngxPD
ilLUF/NLqEfdazy5A1hKutSL1InvEkKl4AvNETUWi0ViLMACCzIRr9t3i8eVb42B
dTrTBP2K4MOYs4z7ex8lW/Eq2c8zMUL8x76ysrRvhxFCe1qnRp06GHhyyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJAv+5ngQZfh3+3bmYbpjsm1sy92MB8GA1UdIwQY
MBaAFNxLShin4VGjfaXkzNqp59vYjp2TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0V0S0dLZmhVYU45cGVUTTJxbm4yOWlPblpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zNjFhMjEtMGI1YS00MzY3LTg0MWUt
M2RkMjkzZjc0ZTVlLzEvM0V0S0dLZmhVYU45cGVUTTJxbm4yOWlPblpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8zNjFhMjEtMGI1YS00MzY3LTg0MWUtM2RkMjkzZjc0ZTVl
LzEvM0V0S0dLZmhVYU45cGVUTTJxbm4yOWlPblpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMV7jKGZl
tj2wfI4rQpfVdgeQoZQTn9q6Az6xTGL93nxBe2R9NfKZSthXoFGTSJVjmrw494Yz
8urQFszbYhKSYkl1FlohNYcYLqq8YMv250LMAKXwcempfPbMR1lfacVMVj2onNLU
7MNlInzuD+vzmUPN1N/z8xpRb9yT9mvG4bxQmQjXlcZvaz0n0MkKWUrsYsjYL2hx
OFfTZQzqsahvo8vPcf1LSSFcRiyt3Z9icUtF680BICMb/gF9Hc1emrDQm0qNR9X4
8aV4MtTmtD6DVIfG+/J4t1QpIB9lQcm8vrvtVeB8Qa/wDoaiFEozHZZIoePvpyO3
2yhQz+xzMhLN9Q==
-----END CERTIFICATE-----
Generated at Wed May 13 03:29:47 2026 by rpki-client