Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
File: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft (raw, json)
Hash identifier: EkL/K8QOG30PNzwmtg69DmrLbDCxopGZfL+9HZ5sLoA=
Subject key identifier: EE:C4:5B:B9:32:7D:0B:10:FF:CE:61:A9:E4:26:CB:7F:C9:1A:B2:2F
Authority key identifier: DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
Certificate issuer: /CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Certificate serial: 01A1DF4BF64EF48F19964202BE28C1975E26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
Manifest number: 092D
Signing time: Sun 15 Nov 2026 13:00:59 +0000
Manifest this update: Sun 15 Nov 2026 13:00:59 +0000
Manifest next update: Mon 16 Nov 2026 13:00:59 +0000
Files and hashes: 1: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl (hash: cLzdh8MBVi/B3D3oTuD3lJyKtTSuANO+Yuz+VvXFBFE=)
2: HrUPMg6A27LayY1nzJVXakWil-8.roa (hash: 6oiaD9+R084Ie04PfQ9j94YYcX9VFnuvxlsXJPk70DA=)
3: LsW7E92fgqyb4h0SFoyQ1iS_A-A.roa (hash: lZdLHI5/Pom2chJvXWn7/eiTGrnfbJ5HoDaiu046MUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4b:f6:4e:f4:8f:19:96:42:02:be:28:c1:97:5e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Validity
Not Before: Nov 15 13:00:59 2026 GMT
Not After : Nov 16 13:00:59 2026 GMT
Subject: CN=eec45bb9327d0b10ffce61a9e426cb7fc91ab22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:41:f6:76:61:e0:e4:28:c2:71:21:9f:43:e0:
19:71:36:5e:d9:e8:e9:54:c0:47:63:db:e7:45:3d:
62:da:a1:35:a5:e6:29:6a:ca:73:23:d0:91:c1:f2:
52:af:96:52:cf:c4:cb:ad:09:bf:4f:3d:1d:02:65:
89:c1:e5:be:6b:f2:75:31:94:27:2a:14:5c:61:ff:
57:92:82:1d:ea:2b:47:59:8d:62:ac:60:3c:a9:9a:
b7:b2:15:34:0d:eb:89:6d:56:59:27:9b:9d:60:53:
12:8b:2c:3c:68:80:d6:ee:a5:25:24:8e:6a:f6:ee:
b2:23:75:bd:a7:3a:b9:9a:c3:89:8c:e3:ae:4d:24:
e1:68:20:07:30:68:d3:af:84:eb:94:7d:8c:40:5e:
e0:ae:ec:83:8f:bb:18:f8:08:fd:e9:7d:52:bf:91:
bb:7c:e9:34:ed:74:c0:89:42:9e:2a:97:99:d9:e3:
51:d9:8e:9f:f4:61:de:d2:8c:8d:30:cf:4b:e3:5b:
01:04:5d:9c:d9:76:3c:12:f0:b0:9f:43:8f:61:02:
11:0a:82:53:85:1c:bf:2d:b0:70:de:bc:48:32:e0:
f1:8f:34:67:2d:34:7d:08:32:92:82:46:69:c5:c5:
90:b7:0a:46:23:b7:89:18:d4:ae:75:83:26:8d:f9:
0f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C4:5B:B9:32:7D:0B:10:FF:CE:61:A9:E4:26:CB:7F:C9:1A:B2:2F
X509v3 Authority Key Identifier:
keyid:DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:8e:90:84:29:60:38:63:78:5b:df:c2:24:d4:0c:c5:ef:3f:
e4:ae:70:2f:47:3f:ef:6e:cb:55:8e:59:3d:a2:49:e1:28:f7:
9a:9e:2a:7b:d7:cf:62:61:18:39:9e:0b:7b:e3:d6:90:86:f4:
18:1f:b2:ef:ca:e6:34:49:7e:fb:b4:75:eb:79:ec:6c:8e:ed:
7f:2f:cf:d0:fd:d2:94:e8:44:8e:39:8d:17:b3:13:a1:37:ed:
bf:83:69:6b:01:12:3b:6c:3d:6e:4b:33:b0:63:01:68:b6:17:
80:b4:e7:e1:73:de:39:f5:58:0b:04:8d:4a:7f:3f:5b:5b:97:
3c:66:14:57:38:3c:d5:a2:0d:47:f2:2c:8c:ca:d4:37:3e:fd:
87:c4:46:1b:b4:51:44:84:21:2f:e7:e7:08:1f:7c:f2:a4:14:
da:2b:ce:22:40:e9:c8:f5:3c:9b:d4:bd:68:01:54:fb:65:3e:
15:bd:5d:23:58:68:55:98:4f:bf:cc:b3:5c:7e:b9:9b:67:f4:
57:df:a7:9e:91:f7:94:69:5a:5a:62:1b:38:98:36:ec:72:5d:
9c:0f:ef:b1:68:37:17:c9:9c:24:61:73:46:b5:c9:95:9d:58:
83:b3:c8:bf:c0:b4:1e:a7:ca:6c:bb:48:e5:94:3d:8d:64:15:
77:e2:e9:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfS/ZO9I8ZlkICvijBl14mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZDk3NzBjMzA3ZWEzOTYwYzhkYTI2OGE4ODY1YTRhOWZh
NjM0YzkwHhcNMjYxMTE1MTMwMDU5WhcNMjYxMTE2MTMwMDU5WjAzMTEwLwYDVQQD
EyhlZWM0NWJiOTMyN2QwYjEwZmZjZTYxYTllNDI2Y2I3ZmM5MWFiMjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EH2dmHg5CjCcSGfQ+AZcTZe2ejp
VMBHY9vnRT1i2qE1peYpaspzI9CRwfJSr5ZSz8TLrQm/Tz0dAmWJweW+a/J1MZQn
KhRcYf9XkoId6itHWY1irGA8qZq3shU0DeuJbVZZJ5udYFMSiyw8aIDW7qUlJI5q
9u6yI3W9pzq5msOJjOOuTSThaCAHMGjTr4TrlH2MQF7gruyDj7sY+Aj96X1Sv5G7
fOk07XTAiUKeKpeZ2eNR2Y6f9GHe0oyNMM9L41sBBF2c2XY8EvCwn0OPYQIRCoJT
hRy/LbBw3rxIMuDxjzRnLTR9CDKSgkZpxcWQtwpGI7eJGNSudYMmjfkPmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7EW7kyfQsQ/85hqeQmy3/JGrIvMB8GA1UdIwQY
MBaAFN3ZdwwwfqOWDI2iaKiGWkqfpjTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2RsM0REQi1vNVlNamFKb3FJWmFTcC1tTk1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My80NDQ0YWItM2RhMy00MThiLWExMDUt
ZjJmZTBkMDRiZmJmLzEvM2RsM0REQi1vNVlNamFKb3FJWmFTcC1tTk1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My80NDQ0YWItM2RhMy00MThiLWExMDUtZjJmZTBkMDRiZmJm
LzEvM2RsM0REQi1vNVlNamFKb3FJWmFTcC1tTk1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeo6QhClg
OGN4W9/CJNQMxe8/5K5wL0c/727LVY5ZPaJJ4Sj3mp4qe9fPYmEYOZ4Le+PWkIb0
GB+y78rmNEl++7R163nsbI7tfy/P0P3SlOhEjjmNF7MToTftv4NpawESO2w9bksz
sGMBaLYXgLTn4XPeOfVYCwSNSn8/W1uXPGYUVzg81aINR/IsjMrUNz79h8RGG7RR
RIQhL+fnCB988qQU2ivOIkDpyPU8m9S9aAFU+2U+Fb1dI1hoVZhPv8yzXH65m2f0
V9+nnpH3lGlaWmIbOJg27HJdnA/vsWg3F8mcJGFzRrXJlZ1Yg7PIv8C0HqfKbLtI
5ZQ9jWQVd+LpoQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:53:36 2026 by rpki-client