Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/ebe6a2-bc18-44ad-97e9-42103ef5151c/1/3DmejaChPz7XDYWBl9oq0-dL6oQ.mft
File: 3DmejaChPz7XDYWBl9oq0-dL6oQ.mft (raw, json)
Hash identifier: Hmz4z9rBm18YrfXA1BZp910gk95m3OFdf8idG9SPoQ4=
Subject key identifier: E2:09:FA:61:82:D9:B7:87:44:BB:6F:F5:E7:83:4F:70:75:C6:88:EC
Authority key identifier: DC:39:9E:8D:A0:A1:3F:3E:D7:0D:85:81:97:DA:2A:D3:E7:4B:EA:84
Certificate issuer: /CN=dc399e8da0a13f3ed70d858197da2ad3e74bea84
Certificate serial: 01A1DEDEF40B3DB493048DC13C5873D52BE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DmejaChPz7XDYWBl9oq0-dL6oQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ebe6a2-bc18-44ad-97e9-42103ef5151c/1/3DmejaChPz7XDYWBl9oq0-dL6oQ.mft
Manifest number: 31
Signing time: Sun 15 Nov 2026 11:01:55 +0000
Manifest this update: Sun 15 Nov 2026 11:01:55 +0000
Manifest next update: Mon 16 Nov 2026 11:01:55 +0000
Files and hashes: 1: 3DmejaChPz7XDYWBl9oq0-dL6oQ.crl (hash: OEmKk7zxUIuNOxUFhZUTiLy+BinVd8ZgeBt3FqNBfQs=)
2: AasksM_su6YqjDWHFHQ7aAhvSFY.roa (hash: sdIhbCqJYBUY9Ejn1tDAw5yjPvX9D2EbrA0ASejQObA=)
3: Qkusjz1kJHO2cJfSYIkFnas5VaY.roa (hash: kZMjY9Y0H5x0xn9TPQ12ugZBOPNLUCNf2qhtTiW+VhA=)
4: VaUOeddLU0hCXt8tPrC1ZotSQs4.roa (hash: XSY3wuC0eD9KXuc6vR1Pu+SEWd27cbqiDNs471slwo8=)
5: wn9fOnNzTjdYPCLrdYIogXzquUw.roa (hash: 8E53ilsokVuaFd118QcSXaUgyeKAMP/bRS6VCtktU8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/ebe6a2-bc18-44ad-97e9-42103ef5151c/1/3DmejaChPz7XDYWBl9oq0-dL6oQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/ebe6a2-bc18-44ad-97e9-42103ef5151c/1/3DmejaChPz7XDYWBl9oq0-dL6oQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DmejaChPz7XDYWBl9oq0-dL6oQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:f4:0b:3d:b4:93:04:8d:c1:3c:58:73:d5:2b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc399e8da0a13f3ed70d858197da2ad3e74bea84
Validity
Not Before: Nov 15 11:01:55 2026 GMT
Not After : Nov 16 11:01:55 2026 GMT
Subject: CN=e209fa6182d9b78744bb6ff5e7834f7075c688ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5e:3c:11:3c:90:43:9c:aa:37:b6:cb:b1:10:
a3:b6:4e:b8:bd:26:76:d8:f2:b4:2f:05:9f:0b:80:
c8:e8:72:f3:f5:b5:03:23:85:67:59:eb:b6:ef:18:
97:2f:8c:dc:59:27:5c:36:27:47:86:12:fa:6b:3c:
42:14:86:7f:6c:75:75:24:59:8b:2b:e5:c2:e9:ad:
e0:22:04:37:ec:d2:08:8f:75:2e:46:ae:9e:2a:2b:
70:6f:8d:9a:e2:f7:08:37:e8:29:68:1d:62:b0:16:
26:df:45:28:67:b0:53:1a:67:f9:f0:38:3d:77:81:
26:6c:0b:ba:5e:8a:9a:f0:47:15:8b:67:95:de:90:
7f:66:9a:f2:31:96:8f:de:ff:03:8e:34:cf:4d:a5:
4d:b3:f9:83:df:f5:49:58:61:44:59:ef:52:e1:3c:
54:27:56:57:ee:8f:a1:60:ea:bc:db:73:37:8d:c5:
01:b8:14:41:6e:65:ad:15:d7:a1:51:3e:d6:35:c3:
7d:0c:c4:60:b0:e6:1d:b6:67:b2:da:5d:aa:4e:6a:
00:83:c4:bc:70:41:c3:82:e9:f3:67:53:c4:a8:fa:
a1:f5:99:89:42:a5:13:e1:8d:c4:72:b8:83:21:f7:
f4:52:fc:39:3b:5d:ca:55:d0:e6:c7:58:b0:ec:6c:
7e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:09:FA:61:82:D9:B7:87:44:BB:6F:F5:E7:83:4F:70:75:C6:88:EC
X509v3 Authority Key Identifier:
keyid:DC:39:9E:8D:A0:A1:3F:3E:D7:0D:85:81:97:DA:2A:D3:E7:4B:EA:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DmejaChPz7XDYWBl9oq0-dL6oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ebe6a2-bc18-44ad-97e9-42103ef5151c/1/3DmejaChPz7XDYWBl9oq0-dL6oQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ebe6a2-bc18-44ad-97e9-42103ef5151c/1/3DmejaChPz7XDYWBl9oq0-dL6oQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f5:b6:0c:b8:ce:e1:45:da:fe:77:49:b4:c5:c5:3d:30:a2:
aa:81:d9:e0:2d:f8:96:c5:9d:3a:40:43:6f:e4:ca:04:25:24:
39:36:4b:f4:9b:97:01:7f:80:7c:f2:01:99:b4:64:c7:d7:19:
fc:43:13:c0:5d:65:39:5e:ae:bd:54:b8:f7:f3:60:c2:f7:e7:
34:22:13:79:db:9f:29:df:e0:ad:b9:da:fa:07:15:6b:18:12:
6e:f4:1a:01:46:59:fc:15:ed:b1:29:6c:51:2f:ed:22:d1:49:
42:79:fe:94:49:6e:d2:21:04:47:54:eb:13:95:b6:b9:14:2e:
8c:2c:12:57:83:6e:ee:0d:c7:9d:37:c4:d0:6f:ab:56:37:0b:
a2:97:c3:f5:74:43:61:8b:75:c2:56:a1:fd:20:4b:70:0b:9b:
cc:3c:bc:06:9f:04:4c:21:98:39:54:33:5b:f4:37:8f:f4:c7:
02:f2:31:7d:3f:bd:b5:a3:b4:7b:dc:df:3e:58:1b:71:45:04:
31:d8:da:5f:06:e8:a9:49:e5:d9:6c:bc:f2:ab:d7:f9:1f:e4:
b5:82:8b:9d:d9:d1:a1:1f:02:e3:39:4e:b7:03:a9:13:e1:61:
e4:a8:6b:6c:c5:a0:bb:bc:af:60:e2:28:64:71:ab:ec:bd:72:
92:85:92:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHe3vQLPbSTBI3BPFhz1SvpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMzk5ZThkYTBhMTNmM2VkNzBkODU4MTk3ZGEyYWQzZTc0
YmVhODQwHhcNMjYxMTE1MTEwMTU1WhcNMjYxMTE2MTEwMTU1WjAzMTEwLwYDVQQD
EyhlMjA5ZmE2MTgyZDliNzg3NDRiYjZmZjVlNzgzNGY3MDc1YzY4OGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApl48ETyQQ5yqN7bLsRCjtk64vSZ2
2PK0LwWfC4DI6HLz9bUDI4VnWeu27xiXL4zcWSdcNidHhhL6azxCFIZ/bHV1JFmL
K+XC6a3gIgQ37NIIj3UuRq6eKitwb42a4vcIN+gpaB1isBYm30UoZ7BTGmf58Dg9
d4EmbAu6Xoqa8EcVi2eV3pB/ZpryMZaP3v8DjjTPTaVNs/mD3/VJWGFEWe9S4TxU
J1ZX7o+hYOq823M3jcUBuBRBbmWtFdehUT7WNcN9DMRgsOYdtmey2l2qTmoAg8S8
cEHDgunzZ1PEqPqh9ZmJQqUT4Y3EcriDIff0Uvw5O13KVdDmx1iw7Gx+FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIJ+mGC2beHRLtv9eeDT3B1xojsMB8GA1UdIwQY
MBaAFNw5no2goT8+1w2FgZfaKtPnS+qEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0RtZWphQ2hQejdYRFlXQmw5b3EwLWRMNm9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9lYmU2YTItYmMxOC00NGFkLTk3ZTkt
NDIxMDNlZjUxNTFjLzEvM0RtZWphQ2hQejdYRFlXQmw5b3EwLWRMNm9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9lYmU2YTItYmMxOC00NGFkLTk3ZTktNDIxMDNlZjUxNTFj
LzEvM0RtZWphQ2hQejdYRFlXQmw5b3EwLWRMNm9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmvW2DLjO
4UXa/ndJtMXFPTCiqoHZ4C34lsWdOkBDb+TKBCUkOTZL9JuXAX+AfPIBmbRkx9cZ
/EMTwF1lOV6uvVS49/NgwvfnNCITedufKd/grbna+gcVaxgSbvQaAUZZ/BXtsSls
US/tItFJQnn+lElu0iEER1TrE5W2uRQujCwSV4Nu7g3HnTfE0G+rVjcLopfD9XRD
YYt1wlah/SBLcAubzDy8Bp8ETCGYOVQzW/Q3j/THAvIxfT+9taO0e9zfPlgbcUUE
MdjaXwboqUnl2Wy88qvX+R/ktYKLndnRoR8C4zlOtwOpE+Fh5KhrbMWgu7yvYOIo
ZHGr7L1ykoWSQA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 16:07:03 2026 by rpki-client