Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
File: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft (raw, json)
Hash identifier: kmic3M5HJ0+RvPrcj7NEx3vcoxAfAJcgtxvmcz+QZww=
Subject key identifier: FE:33:D6:86:62:BF:5C:65:D0:3C:1D:98:5A:F3:94:44:67:17:93:41
Authority key identifier: DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
Certificate issuer: /CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Certificate serial: 01A0CB226C3857AFBCFF1325006850B1A32B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
Manifest number: 089E
Signing time: Tue 22 Sep 2026 22:00:25 +0000
Manifest this update: Tue 22 Sep 2026 22:00:25 +0000
Manifest next update: Wed 23 Sep 2026 22:00:25 +0000
Files and hashes: 1: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl (hash: lQEx7hfzJOP71041EC9f1DvlCMlKDQ5rC1Q30+E2ddY=)
2: HrUPMg6A27LayY1nzJVXakWil-8.roa (hash: 6oiaD9+R084Ie04PfQ9j94YYcX9VFnuvxlsXJPk70DA=)
3: LsW7E92fgqyb4h0SFoyQ1iS_A-A.roa (hash: lZdLHI5/Pom2chJvXWn7/eiTGrnfbJ5HoDaiu046MUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:6c:38:57:af:bc:ff:13:25:00:68:50:b1:a3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Validity
Not Before: Sep 22 22:00:25 2026 GMT
Not After : Sep 23 22:00:25 2026 GMT
Subject: CN=fe33d68662bf5c65d03c1d985af3944467179341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:38:de:6c:63:7b:29:0a:92:78:7d:e0:30:29:
87:e6:09:2d:ac:4b:df:09:1c:21:14:e9:7e:eb:99:
5d:2f:d1:37:d3:c6:1c:49:6a:70:f7:d6:12:a4:9c:
41:6d:73:08:5a:ad:e3:39:39:f6:fb:d3:8e:41:2d:
8b:8b:34:ea:70:10:95:85:fa:6d:26:11:62:2b:47:
c6:34:f7:ad:ed:aa:83:de:e4:92:cd:7b:c0:f8:c5:
5c:74:00:e7:46:cd:5e:49:52:f9:c3:cd:0f:03:65:
2e:ef:6e:86:ca:55:c0:ca:25:b0:aa:2d:d4:07:aa:
8d:22:c3:5a:c4:48:cb:8e:41:55:5e:51:79:c2:87:
ee:a5:3a:6c:2c:1f:9f:65:06:5f:ca:00:0d:d1:70:
44:f6:3c:a1:fb:df:70:67:83:13:5a:43:85:eb:4d:
ca:57:98:13:73:ae:16:12:c7:86:8e:a7:f7:df:1a:
46:32:7d:8e:26:06:06:42:95:d8:c5:62:10:6b:08:
55:53:5c:9c:28:78:d5:d1:5c:cf:da:65:d2:fc:3d:
fe:f6:b3:1f:4e:ef:1b:6b:c6:4f:f8:df:7e:a5:f9:
65:07:95:a9:0c:d1:f8:fd:75:c8:84:71:85:9f:c0:
5e:14:9d:0d:fa:b1:79:29:8e:74:85:fa:6d:f1:2a:
55:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:33:D6:86:62:BF:5C:65:D0:3C:1D:98:5A:F3:94:44:67:17:93:41
X509v3 Authority Key Identifier:
keyid:DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
eb:2e:6e:21:ce:f4:4a:7e:d1:72:ed:c1:10:ff:0f:f4:6e:b1:
17:4f:2b:ff:03:84:e4:c1:9a:86:a5:90:81:dc:74:7e:7f:ec:
5f:1e:c6:3f:73:24:69:05:92:7a:91:43:7c:15:9e:37:19:fa:
29:f0:e9:f0:7e:52:8c:a9:34:a8:45:41:72:bf:0e:c4:b6:ae:
38:9a:41:a4:31:a6:93:f0:20:f0:a0:0b:b8:6a:13:4d:ff:01:
8c:b3:2e:2b:91:c3:03:97:f9:87:d8:78:c9:17:c4:30:47:3f:
6b:ec:b5:77:83:94:50:e7:00:5c:07:7a:3c:30:72:d3:22:9f:
dd:92:64:87:76:e4:eb:1e:72:be:4c:6e:6e:57:e9:fe:b9:81:
31:01:77:77:0b:c0:7c:b0:9f:21:72:b4:a8:3e:48:72:dc:37:
58:54:d6:aa:44:5a:c1:6b:0c:d4:7a:66:3a:91:7e:72:66:27:
f1:c4:eb:e1:df:e8:d6:a8:f9:df:e9:bb:2d:34:90:36:b3:79:
79:47:5e:92:9c:b6:c1:f6:4c:8e:00:78:b5:68:b7:42:fc:d6:
38:fd:a9:a4:64:97:fc:43:4c:95:7a:03:62:12:dc:fe:ab:6f:
86:98:f8:5f:1b:4f:37:59:e7:94:2a:4f:99:43:2f:44:59:01:
0a:dc:b1:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLImw4V6+8/xMlAGhQsaMrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZDk3NzBjMzA3ZWEzOTYwYzhkYTI2OGE4ODY1YTRhOWZh
NjM0YzkwHhcNMjYwOTIyMjIwMDI1WhcNMjYwOTIzMjIwMDI1WjAzMTEwLwYDVQQD
EyhmZTMzZDY4NjYyYmY1YzY1ZDAzYzFkOTg1YWYzOTQ0NDY3MTc5MzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDjebGN7KQqSeH3gMCmH5gktrEvf
CRwhFOl+65ldL9E308YcSWpw99YSpJxBbXMIWq3jOTn2+9OOQS2LizTqcBCVhfpt
JhFiK0fGNPet7aqD3uSSzXvA+MVcdADnRs1eSVL5w80PA2Uu726GylXAyiWwqi3U
B6qNIsNaxEjLjkFVXlF5wofupTpsLB+fZQZfygAN0XBE9jyh+99wZ4MTWkOF603K
V5gTc64WEseGjqf33xpGMn2OJgYGQpXYxWIQawhVU1ycKHjV0VzP2mXS/D3+9rMf
Tu8ba8ZP+N9+pfllB5WpDNH4/XXIhHGFn8BeFJ0N+rF5KY50hfpt8SpVWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4z1oZiv1xl0DwdmFrzlERnF5NBMB8GA1UdIwQY
MBaAFN3ZdwwwfqOWDI2iaKiGWkqfpjTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2RsM0REQi1vNVlNamFKb3FJWmFTcC1tTk1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My80NDQ0YWItM2RhMy00MThiLWExMDUt
ZjJmZTBkMDRiZmJmLzEvM2RsM0REQi1vNVlNamFKb3FJWmFTcC1tTk1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My80NDQ0YWItM2RhMy00MThiLWExMDUtZjJmZTBkMDRiZmJm
LzEvM2RsM0REQi1vNVlNamFKb3FJWmFTcC1tTk1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6y5uIc70
Sn7Rcu3BEP8P9G6xF08r/wOE5MGahqWQgdx0fn/sXx7GP3MkaQWSepFDfBWeNxn6
KfDp8H5SjKk0qEVBcr8OxLauOJpBpDGmk/Ag8KALuGoTTf8BjLMuK5HDA5f5h9h4
yRfEMEc/a+y1d4OUUOcAXAd6PDBy0yKf3ZJkh3bk6x5yvkxublfp/rmBMQF3dwvA
fLCfIXK0qD5Ictw3WFTWqkRawWsM1HpmOpF+cmYn8cTr4d/o1qj53+m7LTSQNrN5
eUdekpy2wfZMjgB4tWi3QvzWOP2ppGSX/ENMlXoDYhLc/qtvhpj4XxtPN1nnlCpP
mUMvRFkBCtyxZQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 00:27:28 2026 by rpki-client