Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
File: 3o44GHrnDLx77WlXWfDgMpn7swI.mft (raw, json)
Hash identifier: JKLaiEy9tLfa8Aluq951ZZkbe7gzrM5AFdH5t/hwyaQ=
Subject key identifier: 80:EB:97:D1:AB:2C:FC:A1:40:AE:D6:50:52:2E:1D:88:E8:06:14:9F
Authority key identifier: DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02
Certificate issuer: /CN=de8e38187ae70cbc7bed695759f0e03299fbb302
Certificate serial: 01A1DE396719033FFB5B8E475D0557A1E629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
Manifest number: 0780
Signing time: Sun 15 Nov 2026 08:01:06 +0000
Manifest this update: Sun 15 Nov 2026 08:01:06 +0000
Manifest next update: Mon 16 Nov 2026 08:01:06 +0000
Files and hashes: 1: 3o44GHrnDLx77WlXWfDgMpn7swI.crl (hash: Znnm2vMQyWgrcXs+wNZH9jYyuPSSX0/QXtOpxrf/oyg=)
2: RPnqpd4QiTnwCz1MgHARgUiKRfA.roa (hash: EMQ9uAHdxhy6q4kC92RKeDGjFCm7FDg8EbfwYcj/lNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:67:19:03:3f:fb:5b:8e:47:5d:05:57:a1:e6:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8e38187ae70cbc7bed695759f0e03299fbb302
Validity
Not Before: Nov 15 08:01:06 2026 GMT
Not After : Nov 16 08:01:06 2026 GMT
Subject: CN=80eb97d1ab2cfca140aed650522e1d88e806149f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:77:ba:a4:96:58:c1:a9:e3:91:90:cf:60:75:
cb:f3:30:8a:11:e4:48:ec:69:d3:ff:f8:b2:e9:ba:
0c:31:27:77:07:55:bc:0c:01:60:3f:a2:f5:c3:f8:
01:74:91:90:03:2c:2f:c8:7e:23:ad:19:ab:4a:48:
a9:35:fd:7a:dc:48:39:f6:d7:5a:88:13:e2:6c:b0:
6a:3b:bb:b2:84:15:72:f9:ca:0f:1a:5f:d9:34:d0:
1e:4a:99:fc:be:52:59:aa:af:b3:af:d6:7e:bc:4f:
22:45:c2:43:68:3f:fa:65:ae:0d:dc:94:07:d0:69:
ca:9f:ba:22:a1:5e:a0:c6:c8:bf:bd:68:94:eb:77:
d3:43:9a:f0:d3:0c:56:99:e7:63:ca:7a:7f:0e:5d:
04:a5:ef:0d:6f:c7:44:86:64:9a:12:8c:72:ea:da:
ff:61:91:b1:ea:b7:fb:4e:e6:98:a1:46:97:98:ee:
43:00:12:b4:aa:f1:96:22:19:90:99:ad:45:76:d4:
fa:4c:00:fe:1b:5d:50:74:84:fd:d8:e8:78:a0:46:
21:d4:c8:fc:e3:0a:ea:37:31:10:03:c0:f3:ab:19:
0a:2a:5f:d2:42:46:ea:46:63:2d:dc:6d:c4:1f:01:
85:2a:b6:9f:86:96:38:5f:e1:9c:7b:1d:95:6e:4a:
1a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EB:97:D1:AB:2C:FC:A1:40:AE:D6:50:52:2E:1D:88:E8:06:14:9F
X509v3 Authority Key Identifier:
keyid:DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:63:00:4a:d7:0b:a0:f3:c6:05:e6:ae:ad:42:44:d1:97:4b:
02:78:ac:67:bc:5e:ec:32:54:b8:27:61:64:fb:b8:a9:1a:0f:
a0:6e:7a:9d:8d:cc:46:5e:fd:5e:da:1b:a9:0b:73:ff:c6:84:
9b:12:c8:17:a2:f6:51:45:4d:e1:e6:f5:18:6e:71:50:e9:a8:
90:7c:15:30:b2:1c:40:f3:fc:7c:e5:36:85:bd:ca:53:bd:d3:
a0:9e:d6:22:a1:94:cb:a8:b2:f2:85:d4:16:00:7e:04:d8:be:
92:ff:3d:b3:43:73:be:61:a2:93:73:4f:66:70:e0:28:fb:f0:
99:18:96:e2:2c:bb:a2:3c:4e:8a:5c:12:0b:b7:5f:0f:32:ae:
3b:7f:2a:84:5a:04:75:d7:ba:f2:3d:7f:d9:56:51:de:4e:a7:
c2:11:23:af:d8:00:f8:db:5f:67:c1:82:01:00:5b:c8:10:24:
70:db:8c:b2:eb:d4:7a:eb:3f:f1:4c:26:44:bc:a6:f6:c3:00:
b4:60:3f:98:67:44:f0:05:c4:22:f0:ed:0b:ab:b2:0c:e6:0f:
4d:10:e2:8c:47:55:7f:b0:66:87:19:65:60:03:3d:d0:9d:a3:
11:46:cf:f9:a7:a3:5e:23:45:b1:7c:1c:52:0f:05:c2:85:0e:
d2:04:89:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHeOWcZAz/7W45HXQVXoeYpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOGUzODE4N2FlNzBjYmM3YmVkNjk1NzU5ZjBlMDMyOTlm
YmIzMDIwHhcNMjYxMTE1MDgwMTA2WhcNMjYxMTE2MDgwMTA2WjAzMTEwLwYDVQQD
Eyg4MGViOTdkMWFiMmNmY2ExNDBhZWQ2NTA1MjJlMWQ4OGU4MDYxNDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83e6pJZYwanjkZDPYHXL8zCKEeRI
7GnT//iy6boMMSd3B1W8DAFgP6L1w/gBdJGQAywvyH4jrRmrSkipNf163Eg59tda
iBPibLBqO7uyhBVy+coPGl/ZNNAeSpn8vlJZqq+zr9Z+vE8iRcJDaD/6Za4N3JQH
0GnKn7oioV6gxsi/vWiU63fTQ5rw0wxWmedjynp/Dl0Epe8Nb8dEhmSaEoxy6tr/
YZGx6rf7TuaYoUaXmO5DABK0qvGWIhmQma1FdtT6TAD+G11QdIT92Oh4oEYh1Mj8
4wrqNzEQA8DzqxkKKl/SQkbqRmMt3G3EHwGFKrafhpY4X+Gcex2VbkoasQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIDrl9GrLPyhQK7WUFIuHYjoBhSfMB8GA1UdIwQY
MBaAFN6OOBh65wy8e+1pV1nw4DKZ+7MCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM280NEdIcm5ETHg3N1dsWFdmRGdNcG43c3dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS81ODBjMTEtMzkxMy00NDc5LWJlYTMt
NWIxZjQ4YjNlMjE0LzEvM280NEdIcm5ETHg3N1dsWFdmRGdNcG43c3dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS81ODBjMTEtMzkxMy00NDc5LWJlYTMtNWIxZjQ4YjNlMjE0
LzEvM280NEdIcm5ETHg3N1dsWFdmRGdNcG43c3dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfGMAStcL
oPPGBeaurUJE0ZdLAnisZ7xe7DJUuCdhZPu4qRoPoG56nY3MRl79XtobqQtz/8aE
mxLIF6L2UUVN4eb1GG5xUOmokHwVMLIcQPP8fOU2hb3KU73ToJ7WIqGUy6iy8oXU
FgB+BNi+kv89s0NzvmGik3NPZnDgKPvwmRiW4iy7ojxOilwSC7dfDzKuO38qhFoE
dde68j1/2VZR3k6nwhEjr9gA+NtfZ8GCAQBbyBAkcNuMsuvUeus/8UwmRLym9sMA
tGA/mGdE8AXEIvDtC6uyDOYPTRDijEdVf7BmhxllYAM90J2jEUbP+aejXiNFsXwc
Ug8FwoUO0gSJ+g==
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:46:37 2026 by rpki-client