Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
File: 3OVHLr4StLVw-CcUOHkX7LTE3lM.mft (raw, json)
Hash identifier: 5YjN9rI+6H2oHVQ8wEqA/QtfONTl6ZxR8C1y+V2PSaM=
Subject key identifier: 8F:6E:D4:EE:C5:FF:F8:0E:8C:E4:39:CF:F4:89:C9:40:62:F7:FD:A1
Authority key identifier: DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53
Certificate issuer: /CN=dce5472ebe12b4b570f82714387917ecb4c4de53
Certificate serial: 01A0CCA34A8B29DA89518A70FC791C4A84C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
Manifest number: 159D
Signing time: Wed 23 Sep 2026 05:00:48 +0000
Manifest this update: Wed 23 Sep 2026 05:00:48 +0000
Manifest next update: Thu 24 Sep 2026 05:00:48 +0000
Files and hashes: 1: 3OVHLr4StLVw-CcUOHkX7LTE3lM.crl (hash: hSVMz9Ofp809lXDIJ+Bq26GxhuGgMXzMh0kEWJv+DGI=)
2: S_e75AZV3-MMHLgXTcVLGq4T6uc.roa (hash: AVmxa5KmaRL9M9i0sdO8A9BbJeQGosTTukip4Q42nu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:4a:8b:29:da:89:51:8a:70:fc:79:1c:4a:84:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce5472ebe12b4b570f82714387917ecb4c4de53
Validity
Not Before: Sep 23 05:00:48 2026 GMT
Not After : Sep 24 05:00:48 2026 GMT
Subject: CN=8f6ed4eec5fff80e8ce439cff489c94062f7fda1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0a:e4:59:f2:86:84:bf:65:8f:56:5f:2f:6c:
9e:e7:43:af:67:ec:a7:cf:86:e6:68:2f:3f:47:57:
42:ab:13:c3:73:1d:f8:5f:9f:98:a2:8b:c0:2b:1f:
22:cb:c0:6c:5a:15:d2:ad:e2:cf:7d:ea:94:49:66:
5f:6c:60:cd:b8:61:63:42:1f:95:61:2a:3c:d0:51:
22:99:93:88:08:1c:60:c4:e9:9a:e3:c5:07:f6:20:
bc:2f:53:de:43:6b:bd:0e:95:7e:46:fe:23:88:f3:
3b:b6:09:94:78:1b:49:af:d3:77:10:fa:8a:28:eb:
1a:42:4c:b7:71:eb:97:b9:9b:1c:48:6f:96:99:f5:
91:79:f5:7b:52:9a:0b:e7:17:f9:02:76:f0:a2:f3:
3d:f1:1b:6f:2c:26:c8:fb:7c:02:61:ab:4f:66:78:
45:b9:0e:a2:77:9d:18:39:8f:00:81:a4:09:52:b2:
00:17:90:7f:78:53:26:88:29:e8:7a:e6:09:76:74:
e7:62:57:99:66:18:ec:55:da:74:45:24:94:54:a2:
ba:88:b9:77:1d:3a:e8:88:5d:51:71:90:f2:c7:39:
15:58:11:02:1a:6a:84:ae:45:c2:a4:58:97:cc:01:
dc:85:7b:fd:85:97:4f:ea:91:48:d4:e2:b6:58:8f:
58:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6E:D4:EE:C5:FF:F8:0E:8C:E4:39:CF:F4:89:C9:40:62:F7:FD:A1
X509v3 Authority Key Identifier:
keyid:DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:7a:86:c8:6e:21:b4:a8:f0:8c:96:0b:49:46:39:15:59:fe:
38:7a:4e:7f:c3:9a:c1:93:a3:70:64:c6:af:a4:2d:ea:7b:51:
5c:69:88:7f:4e:0e:d3:be:8d:e9:6b:52:81:92:c0:df:fb:46:
3e:2c:f1:99:27:12:74:1b:06:ee:a0:c7:1d:16:bf:fe:3a:3f:
bd:3b:3e:92:f7:df:5a:c9:1f:a1:b0:44:34:49:f9:76:76:2d:
8e:3a:06:23:65:0f:53:0c:1a:41:21:27:13:61:49:fe:ed:02:
e5:7d:03:59:d8:a3:4e:c6:90:27:f4:e0:8e:98:78:23:e2:05:
d4:e2:c3:e5:53:d1:d9:c8:b3:43:4a:fb:f5:33:61:da:b5:d3:
8f:a5:19:d3:70:10:45:d8:a2:7d:d6:42:e8:ab:21:f4:b2:53:
4b:97:7d:2f:25:2f:b0:d1:05:7a:01:90:c0:29:2d:14:a1:53:
6c:a0:a9:19:40:ef:34:17:74:bb:c4:92:a1:73:71:b1:ad:6b:
37:39:cd:67:e8:57:9d:bb:78:dd:a3:5c:a5:25:5d:1b:e2:2c:
39:50:68:26:1d:ec:c5:6d:ab:4f:c8:34:3f:28:4b:b8:3e:23:
21:fb:03:10:ef:7f:3d:d8:82:6d:0e:f4:22:59:7b:98:83:fe:
ab:7f:cf:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDMo0qLKdqJUYpw/HkcSoTAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZTU0NzJlYmUxMmI0YjU3MGY4MjcxNDM4NzkxN2VjYjRj
NGRlNTMwHhcNMjYwOTIzMDUwMDQ4WhcNMjYwOTI0MDUwMDQ4WjAzMTEwLwYDVQQD
Eyg4ZjZlZDRlZWM1ZmZmODBlOGNlNDM5Y2ZmNDg5Yzk0MDYyZjdmZGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwrkWfKGhL9lj1ZfL2ye50OvZ+yn
z4bmaC8/R1dCqxPDcx34X5+YoovAKx8iy8BsWhXSreLPfeqUSWZfbGDNuGFjQh+V
YSo80FEimZOICBxgxOma48UH9iC8L1PeQ2u9DpV+Rv4jiPM7tgmUeBtJr9N3EPqK
KOsaQky3ceuXuZscSG+WmfWRefV7UpoL5xf5AnbwovM98RtvLCbI+3wCYatPZnhF
uQ6id50YOY8AgaQJUrIAF5B/eFMmiCnoeuYJdnTnYleZZhjsVdp0RSSUVKK6iLl3
HTroiF1RcZDyxzkVWBECGmqErkXCpFiXzAHchXv9hZdP6pFI1OK2WI9YyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9u1O7F//gOjOQ5z/SJyUBi9/2hMB8GA1UdIwQY
MBaAFNzlRy6+ErS1cPgnFDh5F+y0xN5TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM09WSExyNFN0TFZ3LUNjVU9Ia1g3TFRFM2xNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81YWYxZDYtNTU5Ny00ZGNiLThjMjkt
OWYwNWYxMzVkY2Y5LzEvM09WSExyNFN0TFZ3LUNjVU9Ia1g3TFRFM2xNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81YWYxZDYtNTU5Ny00ZGNiLThjMjktOWYwNWYxMzVkY2Y5
LzEvM09WSExyNFN0TFZ3LUNjVU9Ia1g3TFRFM2xNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFXqGyG4h
tKjwjJYLSUY5FVn+OHpOf8OawZOjcGTGr6Qt6ntRXGmIf04O076N6WtSgZLA3/tG
PizxmScSdBsG7qDHHRa//jo/vTs+kvffWskfobBENEn5dnYtjjoGI2UPUwwaQSEn
E2FJ/u0C5X0DWdijTsaQJ/Tgjph4I+IF1OLD5VPR2cizQ0r79TNh2rXTj6UZ03AQ
RdiifdZC6Ksh9LJTS5d9LyUvsNEFegGQwCktFKFTbKCpGUDvNBd0u8SSoXNxsa1r
NznNZ+hXnbt43aNcpSVdG+IsOVBoJh3sxW2rT8g0PyhLuD4jIfsDEO9/PdiCbQ70
Ill7mIP+q3/P9Q==
-----END CERTIFICATE-----
Generated at Wed Sep 23 08:57:05 2026 by rpki-client