Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
File: 3U44kvRrEHhSw-rhsn3M9g-rmb0.mft (raw, json)
Hash identifier: tXyalrJ5db68sklzq0WhdpckDH7nvhl7JEvonp1ZOPA=
Subject key identifier: 66:0B:FB:0D:61:0A:D6:D4:69:C6:08:63:28:18:C3:8E:19:DC:96:B8
Authority key identifier: DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
Certificate issuer: /CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Certificate serial: 01A0E2F5244A41692632AC59BFAD9A41A317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
Manifest number: 13E7
Signing time: Sun 27 Sep 2026 13:01:51 +0000
Manifest this update: Sun 27 Sep 2026 13:01:51 +0000
Manifest next update: Mon 28 Sep 2026 13:01:51 +0000
Files and hashes: 1: 3U44kvRrEHhSw-rhsn3M9g-rmb0.crl (hash: ftAvLs7Ff7PiAuf22Zbhni7CPTm5ruD+OHqI3CYQMt4=)
2: _eQtw5cyWM7bN-n1wH5kFmdpMgc.roa (hash: sNGFzrnadHYgam/Tin+pJL2a8Tg3Ac1jpPx5ZlgeT5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 13:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:f5:24:4a:41:69:26:32:ac:59:bf:ad:9a:41:a3:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Validity
Not Before: Sep 27 13:01:51 2026 GMT
Not After : Sep 28 13:01:51 2026 GMT
Subject: CN=660bfb0d610ad6d469c608632818c38e19dc96b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0e:e5:e5:03:70:c5:3b:85:ab:ff:02:f5:0f:
4a:3a:25:79:09:64:bc:4a:a3:66:6d:61:0a:55:dd:
c0:9e:01:12:ea:88:01:a9:a9:60:29:02:20:c6:89:
87:60:38:52:20:23:df:b8:e4:ec:9d:f2:4d:96:a5:
c9:fd:07:9b:76:40:27:a6:ea:13:ae:a3:1a:fe:67:
02:d3:15:7c:56:bf:f9:c5:40:fe:66:d7:02:8a:cc:
8d:f2:30:e2:77:a5:a1:3b:07:8c:40:27:6a:a2:50:
2a:0c:6b:81:80:6b:45:8b:be:68:7b:36:48:fd:bf:
24:d2:c8:4e:59:ca:c2:68:2f:47:e5:37:c6:4e:aa:
61:05:ff:2b:c3:9f:c0:2e:0e:6b:14:de:a7:2e:2c:
08:52:e3:ad:08:ea:10:c5:47:97:3d:5c:93:56:b2:
40:38:d8:17:3d:6d:79:52:e7:04:a9:48:7f:f1:6e:
c9:79:4e:07:aa:1b:44:e1:29:97:a7:cb:bb:9c:8b:
27:27:55:9d:a7:5f:54:94:47:cb:b5:4e:02:d6:93:
19:83:b6:12:3b:1d:9c:39:48:71:72:c1:9a:9f:71:
b1:5b:a0:15:e6:98:c0:2a:9b:0b:ac:a9:46:24:88:
0f:71:ae:c1:36:bf:f3:69:aa:41:db:83:1f:f8:73:
b8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0B:FB:0D:61:0A:D6:D4:69:C6:08:63:28:18:C3:8E:19:DC:96:B8
X509v3 Authority Key Identifier:
keyid:DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:02:9b:54:f9:1f:ce:4a:4b:87:8d:c1:4a:0f:ad:11:41:c9:
b7:ab:8b:3e:00:6d:a9:4d:c1:7d:76:e3:dc:cb:b9:62:bd:e6:
5d:d3:98:63:99:d5:54:ba:68:2f:87:b8:62:19:23:37:d8:7d:
a5:a8:80:55:88:df:bb:5c:f3:d9:9b:5a:a6:ee:60:89:5f:d3:
9a:73:0a:44:5d:60:54:91:d6:c6:af:00:ac:22:c0:9e:19:0e:
5a:f5:36:87:4d:87:ae:bd:85:c1:5f:d8:a0:ab:f9:ca:f1:77:
c6:43:b5:62:ff:d4:d4:ed:18:1a:29:47:cc:5b:35:2d:7c:71:
f4:98:f9:ed:f0:61:d5:bc:8d:e3:82:6d:83:82:1d:8d:a4:79:
c5:28:ab:5c:f6:56:7b:c3:15:f2:e8:7a:3a:f0:7b:1d:fd:80:
03:8a:f9:38:42:c2:e1:7b:83:3c:96:b9:8d:84:e1:7f:2c:2e:
06:1d:83:d6:96:67:94:8d:f5:f6:56:53:96:02:bd:cd:17:1a:
d8:be:55:4b:de:4f:73:05:61:fe:72:35:28:ce:bb:47:91:e4:
68:e5:39:58:db:38:bb:80:88:0c:8d:69:0d:3f:b8:b7:86:20:
f9:b0:c6:68:7c:b6:f9:4a:d8:d9:fe:ae:7c:13:5d:41:26:2f:
7e:49:7c:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDi9SRKQWkmMqxZv62aQaMXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNGUzODkyZjQ2YjEwNzg1MmMzZWFlMWIyN2RjY2Y2MGZh
Yjk5YmQwHhcNMjYwOTI3MTMwMTUxWhcNMjYwOTI4MTMwMTUxWjAzMTEwLwYDVQQD
Eyg2NjBiZmIwZDYxMGFkNmQ0NjljNjA4NjMyODE4YzM4ZTE5ZGM5NmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkA7l5QNwxTuFq/8C9Q9KOiV5CWS8
SqNmbWEKVd3AngES6ogBqalgKQIgxomHYDhSICPfuOTsnfJNlqXJ/QebdkAnpuoT
rqMa/mcC0xV8Vr/5xUD+ZtcCisyN8jDid6WhOweMQCdqolAqDGuBgGtFi75oezZI
/b8k0shOWcrCaC9H5TfGTqphBf8rw5/ALg5rFN6nLiwIUuOtCOoQxUeXPVyTVrJA
ONgXPW15UucEqUh/8W7JeU4HqhtE4SmXp8u7nIsnJ1Wdp19UlEfLtU4C1pMZg7YS
Ox2cOUhxcsGan3GxW6AV5pjAKpsLrKlGJIgPca7BNr/zaapB24Mf+HO47wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYL+w1hCtbUacYIYygYw44Z3Ja4MB8GA1UdIwQY
MBaAFN1OOJL0axB4UsPq4bJ9zPYPq5m9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1U0NGt2UnJFSGhTdy1yaHNuM005Zy1ybWIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NDg4N2MtNjgwOS00NDI1LWJjZTkt
M2I1YjcxY2JiMzIyLzEvM1U0NGt2UnJFSGhTdy1yaHNuM005Zy1ybWIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS84NDg4N2MtNjgwOS00NDI1LWJjZTktM2I1YjcxY2JiMzIy
LzEvM1U0NGt2UnJFSGhTdy1yaHNuM005Zy1ybWIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkAKbVPkf
zkpLh43BSg+tEUHJt6uLPgBtqU3BfXbj3Mu5Yr3mXdOYY5nVVLpoL4e4YhkjN9h9
paiAVYjfu1zz2Ztapu5giV/TmnMKRF1gVJHWxq8ArCLAnhkOWvU2h02Hrr2FwV/Y
oKv5yvF3xkO1Yv/U1O0YGilHzFs1LXxx9Jj57fBh1byN44Jtg4IdjaR5xSirXPZW
e8MV8uh6OvB7Hf2AA4r5OELC4XuDPJa5jYThfywuBh2D1pZnlI319lZTlgK9zRca
2L5VS95PcwVh/nI1KM67R5HkaOU5WNs4u4CIDI1pDT+4t4Yg+bDGaHy2+UrY2f6u
fBNdQSYvfkl8RA==
-----END CERTIFICATE-----
Generated at Mon Sep 28 01:12:40 2026 by rpki-client