Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft
File: 3GIdzcetC-Mx18mkR_KhZOQupP0.mft (raw, json)
Hash identifier: +dvYr7HPg1USJq6EwkENwwb5LvjJ8OMsEdbUSh6pUkY=
Subject key identifier: 15:F6:CA:E7:82:BE:9F:22:C8:48:DD:3B:F0:EF:FF:04:73:E1:61:40
Authority key identifier: DC:62:1D:CD:C7:AD:0B:E3:31:D7:C9:A4:47:F2:A1:64:E4:2E:A4:FD
Certificate issuer: /CN=dc621dcdc7ad0be331d7c9a447f2a164e42ea4fd
Certificate serial: 01A1114E0D2398650F0D0EFB2FFF56C408F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft
Manifest number: 0317
Signing time: Tue 06 Oct 2026 13:01:30 +0000
Manifest this update: Tue 06 Oct 2026 13:01:30 +0000
Manifest next update: Wed 07 Oct 2026 13:01:30 +0000
Files and hashes: 1: 3GIdzcetC-Mx18mkR_KhZOQupP0.crl (hash: MIHSHsUTDgG0Fg69FtvLtsOA/cN/3blQHrCrBnsNiYQ=)
2: 5AOG4kUiGD70wVs_XxJDRgh1PMY.roa (hash: MRYcI9nU4eBASWsWUt6T36KO1+qAGLyatjU9/qm4WUA=)
3: Z4m8c_khyolcVDO5PV7q2NiXQe0.asa (hash: 1+Jl7vHo2Ld6XyDIDZY+xyRWhlS4TA+0ypKq1kqiGDs=)
4: jaxXvAizdbnOZ260E3D28kqdvDc.roa (hash: DfDxUm/qCB11xHbyJJCLMlzjpAVxvuDgSoZ8iUQR0iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:4e:0d:23:98:65:0f:0d:0e:fb:2f:ff:56:c4:08:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc621dcdc7ad0be331d7c9a447f2a164e42ea4fd
Validity
Not Before: Oct 6 13:01:30 2026 GMT
Not After : Oct 7 13:01:30 2026 GMT
Subject: CN=15f6cae782be9f22c848dd3bf0efff0473e16140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:39:a2:24:1c:19:e8:22:0c:55:18:36:6b:02:
66:db:7f:d4:2e:e6:9e:06:35:3e:2d:31:e9:20:d4:
7b:0e:78:aa:4d:e3:dd:38:11:92:f8:f4:44:a9:7f:
33:fa:1e:e7:44:89:bf:88:46:32:28:d4:4e:c7:f4:
84:6c:fd:94:e5:89:6f:c9:3e:9e:cb:f7:90:c5:f0:
5a:be:e8:a0:36:c0:99:fd:11:5a:0a:a4:93:d0:df:
5f:10:1c:18:a4:ea:26:86:18:21:e2:8c:27:5d:1e:
12:a2:41:fa:95:8e:d3:2f:01:2c:f1:04:da:01:32:
56:96:5e:74:f7:35:4b:c8:09:79:c9:e1:40:c5:5b:
d2:df:a4:a9:cf:ce:07:9b:02:a2:ef:11:f4:3f:e9:
1f:86:e2:c6:1e:c3:66:ea:bf:4b:57:7f:11:f5:3c:
77:25:21:71:c6:ab:73:c2:63:0c:b4:0e:87:75:2a:
9e:c3:bc:ac:ee:d8:88:4a:90:ed:41:43:d4:83:19:
6a:a3:5f:04:5a:ad:b0:ee:e6:fc:15:08:19:d1:7d:
b0:8f:56:49:a1:f9:47:42:62:8a:ed:fa:33:c6:9d:
ef:89:12:37:0b:e7:8d:9c:ab:8f:03:86:ab:b6:d4:
22:e8:e4:f5:84:50:eb:46:f6:22:4f:1d:14:18:fa:
12:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F6:CA:E7:82:BE:9F:22:C8:48:DD:3B:F0:EF:FF:04:73:E1:61:40
X509v3 Authority Key Identifier:
keyid:DC:62:1D:CD:C7:AD:0B:E3:31:D7:C9:A4:47:F2:A1:64:E4:2E:A4:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:28:1e:03:b4:c1:98:cc:d5:c6:ee:1a:4c:16:98:9d:ee:f1:
f0:8b:62:8d:2e:9b:30:d3:65:f1:48:54:49:6d:1d:8b:62:30:
fb:1e:06:4d:b5:19:9b:06:57:59:ea:39:22:19:11:92:a2:c1:
3a:30:0a:7b:d8:b1:cb:93:a1:68:e8:f2:21:f2:7a:f1:fc:a9:
f5:ef:5c:c9:4d:5b:8c:00:b9:c3:60:ff:b2:ff:79:d6:a1:44:
6a:e2:b3:2a:96:b9:b7:bf:cf:88:3c:15:39:1f:d2:a6:ed:cf:
41:fb:2f:33:fc:04:d5:d8:82:ef:f5:a4:f4:77:9c:2e:e0:bf:
df:18:7c:ca:9d:11:a0:c9:ef:ff:55:e9:da:94:40:63:e1:bd:
0a:be:f7:ae:ff:a9:b7:89:cc:25:32:87:1e:58:c6:ea:be:b1:
af:cc:19:9a:35:d9:e8:b9:23:1c:6f:4f:76:ee:41:4c:6a:ff:
b9:f8:21:d1:23:ea:03:31:ee:0f:2a:d6:23:34:28:b3:e4:30:
82:c8:63:1c:f1:2b:69:3c:ae:c3:49:b4:0e:76:01:37:d3:49:
ff:65:0c:92:1a:f1:1d:de:aa:0a:d4:f5:af:55:7b:d8:02:c6:
f6:4b:59:5e:2f:e8:3d:c5:19:a2:07:ea:3a:3a:92:3d:02:d0:
fb:8f:74:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaERTg0jmGUPDQ77L/9WxAj3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNjIxZGNkYzdhZDBiZTMzMWQ3YzlhNDQ3ZjJhMTY0ZTQy
ZWE0ZmQwHhcNMjYxMDA2MTMwMTMwWhcNMjYxMDA3MTMwMTMwWjAzMTEwLwYDVQQD
EygxNWY2Y2FlNzgyYmU5ZjIyYzg0OGRkM2JmMGVmZmYwNDczZTE2MTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zmiJBwZ6CIMVRg2awJm23/ULuae
BjU+LTHpINR7DniqTePdOBGS+PREqX8z+h7nRIm/iEYyKNROx/SEbP2U5YlvyT6e
y/eQxfBavuigNsCZ/RFaCqST0N9fEBwYpOomhhgh4ownXR4SokH6lY7TLwEs8QTa
ATJWll509zVLyAl5yeFAxVvS36Spz84HmwKi7xH0P+kfhuLGHsNm6r9LV38R9Tx3
JSFxxqtzwmMMtA6HdSqew7ys7tiISpDtQUPUgxlqo18EWq2w7ub8FQgZ0X2wj1ZJ
oflHQmKK7fozxp3viRI3C+eNnKuPA4arttQi6OT1hFDrRvYiTx0UGPoSyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBX2yueCvp8iyEjdO/Dv/wRz4WFAMB8GA1UdIwQY
MBaAFNxiHc3HrQvjMdfJpEfyoWTkLqT9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0dJZHpjZXRDLU14MThta1JfS2haT1F1cFAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8xMjAwODQtYzg4Ni00N2NlLTkwNDAt
OTYyMWIyMDg4YzJkLzEvM0dJZHpjZXRDLU14MThta1JfS2haT1F1cFAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8xMjAwODQtYzg4Ni00N2NlLTkwNDAtOTYyMWIyMDg4YzJk
LzEvM0dJZHpjZXRDLU14MThta1JfS2haT1F1cFAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvigeA7TB
mMzVxu4aTBaYne7x8ItijS6bMNNl8UhUSW0di2Iw+x4GTbUZmwZXWeo5IhkRkqLB
OjAKe9ixy5OhaOjyIfJ68fyp9e9cyU1bjAC5w2D/sv951qFEauKzKpa5t7/PiDwV
OR/Spu3PQfsvM/wE1diC7/Wk9HecLuC/3xh8yp0RoMnv/1Xp2pRAY+G9Cr73rv+p
t4nMJTKHHljG6r6xr8wZmjXZ6LkjHG9Pdu5BTGr/ufgh0SPqAzHuDyrWIzQos+Qw
gshjHPEraTyuw0m0DnYBN9NJ/2UMkhrxHd6qCtT1r1V72ALG9ktZXi/oPcUZogfq
OjqSPQLQ+490bw==
-----END CERTIFICATE-----
Generated at Tue Oct 6 22:18:39 2026 by rpki-client