Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
File: 3O8ZrfppRVibwtEAFU5aWMRJihQ.mft (raw, json)
Hash identifier: 1iZwhMd5vKuLBioLjn/IDBTCsMkx874Vw2TjQ2n9L3o=
Subject key identifier: 20:DB:9E:39:47:32:D9:2B:F2:FD:4E:69:54:FD:D0:95:A3:78:4C:A5
Authority key identifier: DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
Certificate issuer: /CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Certificate serial: 01A0CB2234C84A1528D71EA6FEA4677C6A43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
Manifest number: 1876
Signing time: Tue 22 Sep 2026 22:00:11 +0000
Manifest this update: Tue 22 Sep 2026 22:00:11 +0000
Manifest next update: Wed 23 Sep 2026 22:00:11 +0000
Files and hashes: 1: 3O8ZrfppRVibwtEAFU5aWMRJihQ.crl (hash: RSCOViISIH7Ag8cRltvwmT9I0Ml15ypx36hC+in2OIE=)
2: itoTic7G_-G7jco2XW4Z1NEcbCw.roa (hash: +uznw2maAhBkp9yoIBUiVjV+pSA2CpeiVnSVCi83O3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:34:c8:4a:15:28:d7:1e:a6:fe:a4:67:7c:6a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Validity
Not Before: Sep 22 22:00:11 2026 GMT
Not After : Sep 23 22:00:11 2026 GMT
Subject: CN=20db9e394732d92bf2fd4e6954fdd095a3784ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f5:ed:b4:ee:19:2c:e3:89:b3:6c:de:1e:81:
b4:aa:cf:74:3f:ab:17:9a:50:17:4e:41:9c:d3:da:
ba:89:36:0f:c2:ba:f7:ec:b7:60:03:9a:ca:6a:0d:
f9:a4:69:aa:1f:93:e1:b4:0c:6d:20:dc:09:75:47:
a9:4d:35:14:91:9c:a3:a2:54:3c:cb:dd:e2:37:80:
51:4e:2b:47:da:c1:a7:83:83:aa:07:f4:68:20:6e:
44:1d:59:59:8f:20:f0:72:c4:73:eb:2c:dc:1d:64:
25:9d:6f:f8:98:93:a3:d6:0b:c0:58:44:08:7f:04:
4a:21:05:03:dd:c9:ef:7c:82:a0:32:27:0c:17:df:
8a:d2:3a:ff:43:ee:e4:d5:97:19:64:1e:f0:b0:c9:
46:87:3e:f5:5f:d0:90:bd:b5:9e:8b:ad:9d:68:52:
7d:e3:97:07:49:d8:3f:ea:e5:a1:a3:cc:19:dd:f1:
51:bf:6a:7f:0e:1c:7d:9f:9a:cb:c2:5a:22:34:14:
9a:3f:cf:05:bc:10:36:f7:30:ce:c0:df:6c:1d:2a:
04:67:70:27:f3:f8:d3:89:a6:de:55:42:15:62:d6:
5e:68:7b:29:0a:70:93:07:f0:3a:3e:8b:28:b1:5e:
e0:b7:eb:71:dc:15:ed:b4:3d:b4:49:3c:ca:e1:72:
d9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DB:9E:39:47:32:D9:2B:F2:FD:4E:69:54:FD:D0:95:A3:78:4C:A5
X509v3 Authority Key Identifier:
keyid:DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:56:fc:05:54:45:67:3d:b4:ee:0e:a4:0f:c0:69:32:5d:8f:
1e:9b:c5:98:83:15:33:f3:00:d6:07:64:3a:4e:da:a1:5e:89:
7f:4b:5e:6e:66:60:db:18:23:b6:1b:06:ff:1a:42:c2:5b:d0:
28:ec:b8:07:81:9f:b0:7c:e8:70:09:10:ed:06:e0:72:82:4d:
10:9e:76:0e:e0:98:d7:8d:66:2e:23:21:53:95:90:8e:19:b2:
fd:b3:5a:06:8c:03:f8:2c:e8:33:3b:e0:94:0d:e9:bc:d1:e7:
7a:e7:63:8c:7b:51:8b:51:0b:bc:80:6a:62:42:e9:a6:01:7f:
e3:15:29:ee:e0:cc:d1:d4:23:c1:57:6a:de:42:2b:a7:28:ef:
45:eb:ab:3f:a5:f6:5c:92:07:2d:d1:1b:51:53:90:39:bf:b4:
65:7d:ea:a9:21:13:2f:37:77:cb:4f:d1:46:7e:22:4a:6f:54:
16:bc:42:d6:87:39:18:82:99:8c:1f:7c:26:6b:99:0f:15:c7:
21:f7:7d:78:e5:3d:f1:d7:df:4b:ba:3b:8d:81:46:6f:a6:f0:
b0:1d:02:f6:dd:89:08:14:e9:a1:b2:92:0b:3a:3f:65:25:ac:
9d:7a:0e:8b:a6:f0:ad:b2:d5:9b:3f:a7:25:fb:b8:6e:f1:ca:
d6:5a:87:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLIjTIShUo1x6m/qRnfGpDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZWYxOWFkZmE2OTQ1NTg5YmMyZDEwMDE1NGU1YTU4YzQ0
OThhMTQwHhcNMjYwOTIyMjIwMDExWhcNMjYwOTIzMjIwMDExWjAzMTEwLwYDVQQD
EygyMGRiOWUzOTQ3MzJkOTJiZjJmZDRlNjk1NGZkZDA5NWEzNzg0Y2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfXttO4ZLOOJs2zeHoG0qs90P6sX
mlAXTkGc09q6iTYPwrr37LdgA5rKag35pGmqH5PhtAxtINwJdUepTTUUkZyjolQ8
y93iN4BRTitH2sGng4OqB/RoIG5EHVlZjyDwcsRz6yzcHWQlnW/4mJOj1gvAWEQI
fwRKIQUD3cnvfIKgMicMF9+K0jr/Q+7k1ZcZZB7wsMlGhz71X9CQvbWei62daFJ9
45cHSdg/6uWho8wZ3fFRv2p/Dhx9n5rLwloiNBSaP88FvBA29zDOwN9sHSoEZ3An
8/jTiabeVUIVYtZeaHspCnCTB/A6PososV7gt+tx3BXttD20STzK4XLZowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCDbnjlHMtkr8v1OaVT90JWjeEylMB8GA1UdIwQY
MBaAFNzvGa36aUVYm8LRABVOWljESYoUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM084WnJmcHBSVmlid3RFQUZVNWFXTVJKaWhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82MDJjMzUtZDM2Ni00N2MwLWEzMzQt
MjFkZWFkMGM1ZTljLzEvM084WnJmcHBSVmlid3RFQUZVNWFXTVJKaWhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC82MDJjMzUtZDM2Ni00N2MwLWEzMzQtMjFkZWFkMGM1ZTlj
LzEvM084WnJmcHBSVmlid3RFQUZVNWFXTVJKaWhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo1b8BVRF
Zz207g6kD8BpMl2PHpvFmIMVM/MA1gdkOk7aoV6Jf0tebmZg2xgjthsG/xpCwlvQ
KOy4B4GfsHzocAkQ7QbgcoJNEJ52DuCY141mLiMhU5WQjhmy/bNaBowD+CzoMzvg
lA3pvNHneudjjHtRi1ELvIBqYkLppgF/4xUp7uDM0dQjwVdq3kIrpyjvReurP6X2
XJIHLdEbUVOQOb+0ZX3qqSETLzd3y0/RRn4iSm9UFrxC1oc5GIKZjB98JmuZDxXH
Ifd9eOU98dffS7o7jYFGb6bwsB0C9t2JCBTpobKSCzo/ZSWsnXoOi6bwrbLVmz+n
Jfu4bvHK1lqH3A==
-----END CERTIFICATE-----
Generated at Wed Sep 23 03:10:52 2026 by rpki-client