Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
File: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft (raw, json)
Hash identifier: YtG+Vt5rYaK7N+ehDgkHTUFdu4wYmPQHXicJRISTTq8=
Subject key identifier: B3:3D:EE:92:C4:7E:CE:E0:18:1F:DE:12:FF:C7:DD:65:CF:4F:05:68
Authority key identifier: DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51
Certificate issuer: /CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
Certificate serial: 01A0D19278E0CD2572F5CE0C0EC36FFFA59F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
Manifest number: 1A68
Signing time: Thu 24 Sep 2026 04:00:32 +0000
Manifest this update: Thu 24 Sep 2026 04:00:32 +0000
Manifest next update: Fri 25 Sep 2026 04:00:32 +0000
Files and hashes: 1: 3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl (hash: O888PIJSf8iSgviDa+RF18Bgghlhd3kv78ADpDpSceI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:78:e0:cd:25:72:f5:ce:0c:0e:c3:6f:ff:a5:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf4d4ba85b755ef929c9b995eaf746d0e0b6e51
Validity
Not Before: Sep 24 04:00:32 2026 GMT
Not After : Sep 25 04:00:32 2026 GMT
Subject: CN=b33dee92c47ecee0181fde12ffc7dd65cf4f0568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:db:6b:8f:b8:ac:64:84:52:0c:a4:62:a5:d1:
a9:17:fe:78:dc:50:9f:0b:df:1c:45:ff:a4:3f:f8:
86:bc:77:fe:87:37:25:1a:8d:b9:74:85:02:6b:90:
7f:35:b6:12:5f:61:fb:bc:19:a2:4d:9f:cf:d2:8e:
c5:39:64:31:51:c6:25:31:e6:fa:04:c0:09:ab:28:
c9:c5:ce:fe:69:51:4b:59:d5:5d:ee:f5:0d:17:54:
93:40:73:0f:5b:dc:0c:13:97:fc:f7:7b:8c:3f:96:
06:50:f6:d9:80:a8:2f:e3:64:04:fe:23:4c:1d:31:
bf:6b:bf:9d:16:61:2b:e1:3a:5a:39:19:0d:2b:5f:
87:f6:d3:be:96:b2:48:30:6f:c5:e6:e3:fe:52:85:
29:b7:47:55:2d:65:a6:70:66:ba:44:da:c0:15:30:
d8:6b:30:c3:76:ee:76:7c:5d:84:07:3a:a8:b1:2f:
49:e9:0a:74:22:64:73:6e:a5:da:45:34:78:28:da:
7f:f3:51:39:32:7e:07:6b:05:7d:02:a0:ef:92:9d:
64:76:74:8e:f4:7c:f8:9e:a9:12:de:c0:f5:14:7f:
eb:31:fc:60:88:ca:d9:1c:55:e8:1d:ee:31:47:ee:
48:16:1c:a0:ed:3d:cf:40:f1:19:21:ee:46:03:f2:
d7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3D:EE:92:C4:7E:CE:E0:18:1F:DE:12:FF:C7:DD:65:CF:4F:05:68
X509v3 Authority Key Identifier:
keyid:DC:F4:D4:BA:85:B7:55:EF:92:9C:9B:99:5E:AF:74:6D:0E:0B:6E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PTUuoW3Ve-SnJuZXq90bQ4LblE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/965236-c05e-4180-b590-41470a9459a1/1/3PTUuoW3Ve-SnJuZXq90bQ4LblE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:02:79:dc:12:b3:fa:98:ce:29:bf:12:aa:a2:e8:6f:33:89:
45:a7:d4:31:b6:0d:68:15:ee:c1:e5:cb:0c:6d:1b:52:92:4e:
03:ce:81:8d:04:89:10:72:5a:f1:0e:52:84:80:72:45:30:3c:
2e:af:b8:01:35:fc:1e:c8:44:8d:ab:4d:1f:c8:a6:e6:82:a1:
96:98:5d:22:99:08:76:eb:56:fa:a4:4a:62:99:72:f4:dc:5a:
e2:a5:b6:26:d7:6e:c8:b9:7a:65:68:0d:5c:c2:96:60:61:53:
c9:1a:e4:00:0a:d1:26:ed:29:88:93:2b:ba:45:fc:d0:0f:67:
0b:49:0f:9a:b8:61:8c:08:76:91:f9:0b:23:68:8e:cd:64:c3:
49:9e:7a:de:1b:ad:7a:0b:35:c7:48:b7:b4:b2:ee:63:cd:63:
a2:e1:23:c7:b1:55:ae:9c:a8:e5:6c:27:b2:34:e5:9c:39:39:
52:66:7e:ea:b7:f2:e6:4a:df:6e:8a:1d:01:9f:b1:1d:5a:04:
91:a3:ae:9c:46:0c:08:10:63:f4:f7:d9:c5:2d:2b:3d:5c:ee:
71:60:68:5e:20:41:a6:36:2c:a2:8c:b8:03:17:7f:6b:36:46:
4e:2f:85:7c:88:1a:4b:1c:77:de:42:c5:d8:7a:31:6b:5a:0e:
fc:3f:94:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRknjgzSVy9c4MDsNv/6WfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZjRkNGJhODViNzU1ZWY5MjljOWI5OTVlYWY3NDZkMGUw
YjZlNTEwHhcNMjYwOTI0MDQwMDMyWhcNMjYwOTI1MDQwMDMyWjAzMTEwLwYDVQQD
EyhiMzNkZWU5MmM0N2VjZWUwMTgxZmRlMTJmZmM3ZGQ2NWNmNGYwNTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNtrj7isZIRSDKRipdGpF/543FCf
C98cRf+kP/iGvHf+hzclGo25dIUCa5B/NbYSX2H7vBmiTZ/P0o7FOWQxUcYlMeb6
BMAJqyjJxc7+aVFLWdVd7vUNF1STQHMPW9wME5f893uMP5YGUPbZgKgv42QE/iNM
HTG/a7+dFmEr4TpaORkNK1+H9tO+lrJIMG/F5uP+UoUpt0dVLWWmcGa6RNrAFTDY
azDDdu52fF2EBzqosS9J6Qp0ImRzbqXaRTR4KNp/81E5Mn4HawV9AqDvkp1kdnSO
9Hz4nqkS3sD1FH/rMfxgiMrZHFXoHe4xR+5IFhyg7T3PQPEZIe5GA/LX1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLM97pLEfs7gGB/eEv/H3WXPTwVoMB8GA1UdIwQY
MBaAFNz01LqFt1XvkpybmV6vdG0OC25RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1BUVXVvVzNWZS1Tbkp1WlhxOTBiUTRMYmxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85NjUyMzYtYzA1ZS00MTgwLWI1OTAt
NDE0NzBhOTQ1OWExLzEvM1BUVXVvVzNWZS1Tbkp1WlhxOTBiUTRMYmxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi85NjUyMzYtYzA1ZS00MTgwLWI1OTAtNDE0NzBhOTQ1OWEx
LzEvM1BUVXVvVzNWZS1Tbkp1WlhxOTBiUTRMYmxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADAJ53BKz
+pjOKb8SqqLobzOJRafUMbYNaBXuweXLDG0bUpJOA86BjQSJEHJa8Q5ShIByRTA8
Lq+4ATX8HshEjatNH8im5oKhlphdIpkIdutW+qRKYply9Nxa4qW2JtduyLl6ZWgN
XMKWYGFTyRrkAArRJu0piJMrukX80A9nC0kPmrhhjAh2kfkLI2iOzWTDSZ563hut
egs1x0i3tLLuY81jouEjx7FVrpyo5WwnsjTlnDk5UmZ+6rfy5krfboodAZ+xHVoE
kaOunEYMCBBj9PfZxS0rPVzucWBoXiBBpjYsooy4Axd/azZGTi+FfIgaSxx33kLF
2Hoxa1oO/D+Uxw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 11:48:27 2026 by rpki-client