Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
File: 03h3GhBvaw0FSld4U1aSLK8C40M.mft (raw, json)
Hash identifier: r/KA5ZVtK8BhQQvCjh/syn0Qx8dUwQG1wHfgW/nwEtU=
Subject key identifier: 33:0E:88:A1:FB:E5:2F:76:F3:E2:F1:74:2A:58:DC:67:F1:E6:D8:EB
Authority key identifier: D3:78:77:1A:10:6F:6B:0D:05:4A:57:78:53:56:92:2C:AF:02:E3:43
Certificate issuer: /CN=d378771a106f6b0d054a57785356922caf02e343
Certificate serial: 01A0CE2349E7809441103024638C89BC1678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03h3GhBvaw0FSld4U1aSLK8C40M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
Manifest number: 0E14
Signing time: Wed 23 Sep 2026 12:00:14 +0000
Manifest this update: Wed 23 Sep 2026 12:00:14 +0000
Manifest next update: Thu 24 Sep 2026 12:00:14 +0000
Files and hashes: 1: 03h3GhBvaw0FSld4U1aSLK8C40M.crl (hash: LSeoWSNdVCMp2+ix6wzLhf4UbNHbQYJWwSX5trwBVQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
rsync://rpki.ripe.net/repository/DEFAULT/03h3GhBvaw0FSld4U1aSLK8C40M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:49:e7:80:94:41:10:30:24:63:8c:89:bc:16:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d378771a106f6b0d054a57785356922caf02e343
Validity
Not Before: Sep 23 12:00:14 2026 GMT
Not After : Sep 24 12:00:14 2026 GMT
Subject: CN=330e88a1fbe52f76f3e2f1742a58dc67f1e6d8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5d:c1:2e:da:df:f6:10:e5:59:6c:79:d2:48:
87:23:ff:e2:66:a2:fa:f4:c4:4d:4a:0e:9e:45:38:
cc:ae:49:17:90:8f:b6:cb:74:81:8c:73:57:7d:7b:
30:2e:1d:53:da:9f:24:32:e0:c5:6a:84:48:da:69:
56:d0:3d:87:ad:29:86:f6:0a:0e:63:7e:41:0e:14:
c1:f3:b6:7d:81:95:18:a2:8f:7d:6c:a5:be:03:ec:
19:46:0b:34:cd:c4:7b:83:00:5c:bc:41:d6:98:14:
cf:6a:c9:4b:ca:74:df:31:6d:c5:b2:ab:98:f8:58:
d3:2a:78:93:22:cd:52:45:e9:4c:63:2a:2c:03:e1:
74:9f:9d:aa:de:cb:18:57:2f:82:65:b1:cc:87:57:
8a:4b:c2:d0:c9:55:43:2b:2d:46:46:d3:89:cf:96:
44:a8:0d:8a:33:09:af:4a:f0:d7:d8:d8:e3:49:d2:
92:03:77:3d:4c:48:01:50:72:28:4b:03:be:cd:4e:
a3:47:26:46:57:0c:76:5b:c5:1a:88:9c:52:d8:07:
e1:75:d9:41:0e:6a:c9:5c:7b:a5:ce:1d:13:2b:26:
a0:86:9b:82:18:af:1a:17:62:03:3f:9a:ba:60:68:
63:9c:5a:92:ba:88:e7:0d:c8:28:c7:ac:64:3d:98:
20:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:0E:88:A1:FB:E5:2F:76:F3:E2:F1:74:2A:58:DC:67:F1:E6:D8:EB
X509v3 Authority Key Identifier:
keyid:D3:78:77:1A:10:6F:6B:0D:05:4A:57:78:53:56:92:2C:AF:02:E3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03h3GhBvaw0FSld4U1aSLK8C40M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/3a5423-6b92-40f4-878a-54717f72ca59/1/03h3GhBvaw0FSld4U1aSLK8C40M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:df:44:54:1d:31:cc:28:9c:93:e0:66:da:48:f3:89:68:dd:
d8:39:fe:c8:b9:10:7e:f7:69:c3:3f:64:58:3a:30:d9:31:4a:
e3:07:da:8f:fc:51:4e:c0:b4:a2:0a:a1:f5:b8:e5:60:f8:87:
50:d3:7e:c4:ca:0e:a0:15:0c:ad:ce:b2:ae:a0:03:f0:f5:61:
23:b9:e6:50:65:68:e3:f5:40:ab:ea:0f:63:a4:c7:18:84:ae:
5e:ae:5d:e3:56:1e:87:2f:d7:5c:c2:7d:bc:6d:9c:65:c3:84:
69:11:8e:de:26:09:54:bd:77:93:d1:fd:3c:47:21:9f:3b:43:
f5:54:3e:ce:92:e2:b7:46:ca:09:ea:5f:ce:fb:bf:e9:c7:cc:
be:14:d0:8c:4f:00:ff:13:99:0f:7c:a1:d6:e0:76:61:f3:c0:
6a:66:da:ff:6f:dc:47:e8:7e:38:d9:04:22:a7:89:41:27:eb:
5c:18:12:e6:ab:3c:31:db:f6:de:85:b0:be:60:a5:37:6b:47:
85:63:f2:34:f6:16:6e:04:8a:89:d8:a2:cf:21:3b:4b:51:00:
00:7f:e9:21:2c:48:c5:6e:60:78:9a:30:00:e8:0a:01:87:ef:
33:d1:d1:72:fa:a8:82:77:81:b9:8f:18:a8:68:ea:da:fb:4b:
09:c3:e4:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOI0nngJRBEDAkY4yJvBZ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNzg3NzFhMTA2ZjZiMGQwNTRhNTc3ODUzNTY5MjJjYWYw
MmUzNDMwHhcNMjYwOTIzMTIwMDE0WhcNMjYwOTI0MTIwMDE0WjAzMTEwLwYDVQQD
EygzMzBlODhhMWZiZTUyZjc2ZjNlMmYxNzQyYTU4ZGM2N2YxZTZkOGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV3BLtrf9hDlWWx50kiHI//iZqL6
9MRNSg6eRTjMrkkXkI+2y3SBjHNXfXswLh1T2p8kMuDFaoRI2mlW0D2HrSmG9goO
Y35BDhTB87Z9gZUYoo99bKW+A+wZRgs0zcR7gwBcvEHWmBTPaslLynTfMW3FsquY
+FjTKniTIs1SRelMYyosA+F0n52q3ssYVy+CZbHMh1eKS8LQyVVDKy1GRtOJz5ZE
qA2KMwmvSvDX2NjjSdKSA3c9TEgBUHIoSwO+zU6jRyZGVwx2W8UaiJxS2AfhddlB
DmrJXHulzh0TKyaghpuCGK8aF2IDP5q6YGhjnFqSuojnDcgox6xkPZggRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMOiKH75S928+LxdCpY3Gfx5tjrMB8GA1UdIwQY
MBaAFNN4dxoQb2sNBUpXeFNWkiyvAuNDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDNoM0doQnZhdzBGU2xkNFUxYVNMSzhDNDBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8zYTU0MjMtNmI5Mi00MGY0LTg3OGEt
NTQ3MTdmNzJjYTU5LzEvMDNoM0doQnZhdzBGU2xkNFUxYVNMSzhDNDBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8zYTU0MjMtNmI5Mi00MGY0LTg3OGEtNTQ3MTdmNzJjYTU5
LzEvMDNoM0doQnZhdzBGU2xkNFUxYVNMSzhDNDBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa99EVB0x
zCick+Bm2kjziWjd2Dn+yLkQfvdpwz9kWDow2TFK4wfaj/xRTsC0ogqh9bjlYPiH
UNN+xMoOoBUMrc6yrqAD8PVhI7nmUGVo4/VAq+oPY6THGISuXq5d41Yehy/XXMJ9
vG2cZcOEaRGO3iYJVL13k9H9PEchnztD9VQ+zpLit0bKCepfzvu/6cfMvhTQjE8A
/xOZD3yh1uB2YfPAamba/2/cR+h+ONkEIqeJQSfrXBgS5qs8Mdv23oWwvmClN2tH
hWPyNPYWbgSKidiizyE7S1EAAH/pISxIxW5geJowAOgKAYfvM9HRcvqogneBuY8Y
qGjq2vtLCcPkSQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:48:10 2026 by rpki-client