Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
File: 3Iy0oRyrrCBK37iltYfjL-5KG1U.mft (raw, json)
Hash identifier: 8VXgsrEjolW+Tutbs5IuVPghnKw5Z7BnDXfM8czKv9c=
Subject key identifier: 55:AD:D0:53:42:74:1B:31:26:48:54:05:E6:F6:56:06:86:15:9B:FE
Authority key identifier: DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
Certificate issuer: /CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Certificate serial: 01A0D56FBD49BB159B2E5ED003D8F0BC2B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
Manifest number: 1106
Signing time: Thu 24 Sep 2026 22:01:05 +0000
Manifest this update: Thu 24 Sep 2026 22:01:05 +0000
Manifest next update: Fri 25 Sep 2026 22:01:05 +0000
Files and hashes: 1: 3Iy0oRyrrCBK37iltYfjL-5KG1U.crl (hash: vTWoIF2URS08Br8DyZTUIt++3ERdCRLHOkEC1VPkpdM=)
2: 58GFDuus_tVD8dh1HAcQzm6Bd5s.roa (hash: pyGHBxobR5Y4/oQZr4EFtkYZAaS4T1/SsoP9evw4DUA=)
3: D7CjrTPEmaFgX5q30EgqridM6Ks.roa (hash: 6VDTLT0bKAkkx8WWVo+B1/Z/i7C3vrJBLQ7Xx0A+EvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:6f:bd:49:bb:15:9b:2e:5e:d0:03:d8:f0:bc:2b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55
Validity
Not Before: Sep 24 22:01:05 2026 GMT
Not After : Sep 25 22:01:05 2026 GMT
Subject: CN=55add05342741b3126485405e6f6560686159bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:41:ad:31:1c:af:c6:06:74:33:18:0a:09:ab:
bf:a0:53:a2:4a:f6:b5:b3:f6:b0:e1:6d:ad:ab:76:
39:1a:0b:1c:a9:c7:58:2e:02:29:42:d4:ff:ce:61:
ca:7c:ab:63:65:fd:9d:55:3d:b6:e3:00:dd:f0:ea:
c0:15:f2:ad:06:06:bc:30:be:8a:12:2a:c7:de:d0:
27:83:41:9e:11:34:82:d7:75:4c:ce:33:47:29:f5:
cb:10:ee:b4:c8:1d:d5:30:a2:a2:98:26:8f:d4:e5:
22:cd:db:7a:a2:fd:d2:25:d6:17:b9:54:c3:91:84:
fe:5f:45:f0:45:b6:52:2c:65:de:10:4b:41:78:3f:
94:1d:31:65:ce:13:e1:f0:e3:14:df:22:d8:b4:2b:
4e:0c:51:99:9a:cf:42:c3:3a:ad:d0:b5:a1:27:f6:
77:f8:28:43:24:7a:d4:d0:40:51:fe:94:ea:e4:e6:
7b:d8:14:cf:a0:cd:e3:94:c1:95:5a:b3:7e:82:b0:
1b:d7:3c:70:f7:8a:3b:9d:5b:67:0c:a0:40:44:20:
df:ab:49:56:91:42:f3:07:7f:05:c2:7a:30:e1:1a:
ed:81:b6:e9:c6:ad:ba:fe:d6:c5:ba:0c:df:e4:d3:
33:a7:80:43:76:a4:c2:d9:60:d8:d2:44:85:26:84:
3d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AD:D0:53:42:74:1B:31:26:48:54:05:E6:F6:56:06:86:15:9B:FE
X509v3 Authority Key Identifier:
keyid:DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a5:32:c7:c7:de:ee:4f:d4:af:19:b0:cc:55:61:9e:08:de:
dd:a6:31:10:31:64:ad:e3:c6:ec:e0:7d:60:f3:df:ec:73:18:
30:07:7f:65:1e:99:c9:d0:35:72:24:98:85:c9:cc:2c:22:96:
5f:da:ec:82:f6:74:0a:00:75:12:7a:18:45:cf:e4:48:49:fe:
a7:9f:9f:22:3d:0f:b3:35:26:a8:34:35:ab:e4:14:15:ce:5c:
50:ac:e1:cf:f8:24:a9:6a:3e:00:54:c0:58:92:ee:c1:a6:9e:
56:f4:26:80:9f:39:7f:63:0b:c4:3b:97:c6:6a:b7:a4:86:dd:
a7:1e:1b:89:1e:7c:98:75:fd:a0:4f:8c:e7:3e:91:35:cc:8d:
ee:72:42:44:d7:4b:46:d2:d3:6d:58:c6:56:71:cb:34:66:cd:
96:47:09:85:34:3a:29:1f:9e:be:73:cb:e6:46:5f:55:7d:a7:
5f:1e:c0:df:95:93:ed:25:a7:7b:01:15:e8:d8:b6:ec:bc:f3:
16:a4:de:a1:21:b0:65:35:32:a4:db:95:cd:23:32:9e:39:44:
4a:26:15:74:20:c0:ae:5c:bd:6d:12:90:d7:3c:c0:28:41:fc:
9f:39:b7:e2:cb:f7:be:d9:8b:c6:3d:c5:21:9a:8b:68:f2:b7:
6b:84:bc:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVb71JuxWbLl7QA9jwvCsoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjOGNiNGExMWNhYmFjMjA0YWRmYjhhNWI1ODdlMzJmZWU0
YTFiNTUwHhcNMjYwOTI0MjIwMTA1WhcNMjYwOTI1MjIwMTA1WjAzMTEwLwYDVQQD
Eyg1NWFkZDA1MzQyNzQxYjMxMjY0ODU0MDVlNmY2NTYwNjg2MTU5YmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0GtMRyvxgZ0MxgKCau/oFOiSva1
s/aw4W2tq3Y5GgscqcdYLgIpQtT/zmHKfKtjZf2dVT224wDd8OrAFfKtBga8ML6K
EirH3tAng0GeETSC13VMzjNHKfXLEO60yB3VMKKimCaP1OUizdt6ov3SJdYXuVTD
kYT+X0XwRbZSLGXeEEtBeD+UHTFlzhPh8OMU3yLYtCtODFGZms9Cwzqt0LWhJ/Z3
+ChDJHrU0EBR/pTq5OZ72BTPoM3jlMGVWrN+grAb1zxw94o7nVtnDKBARCDfq0lW
kULzB38Fwnow4Rrtgbbpxq26/tbFugzf5NMzp4BDdqTC2WDY0kSFJoQ9jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWt0FNCdBsxJkhUBeb2VgaGFZv+MB8GA1UdIwQY
MBaAFNyMtKEcq6wgSt+4pbWH4y/uShtVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0l5MG9SeXJyQ0JLMzdpbHRZZmpMLTVLRzFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8wZDkxOWYtYzBlNi00NzM1LTk4MDIt
OTlkNWUwN2JhZTc2LzEvM0l5MG9SeXJyQ0JLMzdpbHRZZmpMLTVLRzFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8wZDkxOWYtYzBlNi00NzM1LTk4MDItOTlkNWUwN2JhZTc2
LzEvM0l5MG9SeXJyQ0JLMzdpbHRZZmpMLTVLRzFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOaUyx8fe
7k/UrxmwzFVhngje3aYxEDFkrePG7OB9YPPf7HMYMAd/ZR6ZydA1ciSYhcnMLCKW
X9rsgvZ0CgB1EnoYRc/kSEn+p5+fIj0PszUmqDQ1q+QUFc5cUKzhz/gkqWo+AFTA
WJLuwaaeVvQmgJ85f2MLxDuXxmq3pIbdpx4biR58mHX9oE+M5z6RNcyN7nJCRNdL
RtLTbVjGVnHLNGbNlkcJhTQ6KR+evnPL5kZfVX2nXx7A35WT7SWnewEV6Ni27Lzz
FqTeoSGwZTUypNuVzSMynjlESiYVdCDArly9bRKQ1zzAKEH8nzm34sv3vtmLxj3F
IZqLaPK3a4S8DQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 07:10:49 2026 by rpki-client