Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
File: 3H2O2YRD3mxojRdPHwBVvk3hgqE.mft (raw, json)
Hash identifier: NS4/b5+XjAO3rd5eoTw/uSuT9M1xLf06B6f29SNubYI=
Subject key identifier: 99:F9:13:D5:59:F4:92:04:00:AD:FA:AC:F7:7C:89:32:58:CA:0F:13
Authority key identifier: DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1
Certificate issuer: /CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
Certificate serial: 01A1CB20FD5835320360FC8F41EE5E0310AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
Manifest number: 16A1
Signing time: Wed 11 Nov 2026 15:01:39 +0000
Manifest this update: Wed 11 Nov 2026 15:01:39 +0000
Manifest next update: Thu 12 Nov 2026 15:01:39 +0000
Files and hashes: 1: 3H2O2YRD3mxojRdPHwBVvk3hgqE.crl (hash: Na6I975zacWHqsSMXRklMk4CvnPyiUPeWK8smz+1dmc=)
2: VcgWyeq648Gc4ahE2H4P_5An-Vk.roa (hash: lpEbA2Oc/IvvrSvQYZYfTGRO3+SQWqSCIH6JyIv+3/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 15:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cb:20:fd:58:35:32:03:60:fc:8f:41:ee:5e:03:10:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
Validity
Not Before: Nov 11 15:01:39 2026 GMT
Not After : Nov 12 15:01:39 2026 GMT
Subject: CN=99f913d559f4920400adfaacf77c893258ca0f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bb:89:9e:3d:fd:14:34:53:63:58:8e:80:58:
1d:b5:97:9e:04:c9:2f:98:f8:ca:a4:27:a0:91:3d:
73:43:79:e9:75:f9:4d:0f:71:d5:c9:3b:25:b6:bd:
c2:2d:c2:12:c6:bb:b4:bc:e9:f6:86:80:e2:89:1a:
36:a3:d2:7d:d8:e5:9f:b1:5e:e9:d1:c6:d8:c2:03:
f3:7c:c1:af:61:3e:41:d5:80:1e:31:32:21:27:f3:
0a:a2:57:56:79:90:7b:60:f8:a2:bf:80:56:6f:7e:
1c:a1:8f:91:9c:31:96:50:21:69:4d:77:3a:76:fe:
61:b5:5f:71:42:d1:88:21:cb:56:bd:e6:41:5d:ea:
05:d2:8d:bf:c4:81:19:fa:bc:b3:ac:ff:fe:39:54:
ec:01:9b:d6:dd:94:b1:a8:78:99:50:18:43:a1:05:
04:ab:59:ae:0c:db:5c:08:5d:5e:52:80:b4:6b:d8:
ae:5a:47:db:03:9c:2f:ca:1a:c0:5e:43:34:ae:3a:
8f:6a:8b:0b:66:98:15:0d:8d:1f:36:65:f4:63:86:
37:b7:3b:59:30:91:49:15:23:e7:06:9f:4d:3e:be:
b3:63:25:54:11:ca:eb:6a:30:da:26:93:58:d2:e5:
98:77:ee:87:1d:7d:3a:a3:8f:d7:7f:25:fc:04:33:
23:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F9:13:D5:59:F4:92:04:00:AD:FA:AC:F7:7C:89:32:58:CA:0F:13
X509v3 Authority Key Identifier:
keyid:DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:4b:4f:68:34:8c:7c:88:69:ee:71:64:d3:db:52:ea:ff:9a:
45:2c:11:16:7b:fc:5b:ff:1d:09:4b:6d:9e:ff:f7:a8:4b:23:
60:d5:e9:71:e4:19:6a:58:b5:2a:ea:eb:a9:92:d2:ef:43:75:
6e:7c:5b:7d:9f:1e:ca:ca:49:79:4f:96:40:f0:a6:aa:77:78:
e0:e7:3c:79:57:72:cf:8d:46:a5:13:eb:5b:11:6f:08:8f:12:
b0:9d:aa:b6:f2:30:17:dd:cd:d5:d2:c6:3d:a6:e5:27:83:50:
9a:7f:80:ac:b2:ed:c1:f8:9c:77:d2:6d:c6:4e:b5:c3:02:4d:
b0:af:4f:77:1b:36:b9:c9:80:38:1e:ab:f2:d9:0a:95:90:42:
d1:34:c2:6a:d7:a7:d3:da:b5:5c:30:66:86:ef:5e:5a:ae:ca:
e9:5a:6c:1c:55:55:2c:b8:d4:aa:58:34:9c:5d:d8:17:fe:07:
29:e8:a4:61:72:9b:d7:1d:a9:ce:bb:3a:ff:1d:cc:39:e6:3b:
36:62:1f:6f:e0:24:31:15:03:00:c8:d6:73:3b:d3:e1:ba:38:
d5:19:3a:61:3a:ce:03:6d:52:a9:80:b0:dc:f1:5c:d2:92:d1:
42:f3:5a:e2:ff:f6:37:18:17:0b:4d:4a:97:d3:d9:c5:e2:03:
99:51:de:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHLIP1YNTIDYPyPQe5eAxCtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjN2Q4ZWQ5ODQ0M2RlNmM2ODhkMTc0ZjFmMDA1NWJlNGRl
MTgyYTEwHhcNMjYxMTExMTUwMTM5WhcNMjYxMTEyMTUwMTM5WjAzMTEwLwYDVQQD
Eyg5OWY5MTNkNTU5ZjQ5MjA0MDBhZGZhYWNmNzdjODkzMjU4Y2EwZjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobuJnj39FDRTY1iOgFgdtZeeBMkv
mPjKpCegkT1zQ3npdflND3HVyTsltr3CLcISxru0vOn2hoDiiRo2o9J92OWfsV7p
0cbYwgPzfMGvYT5B1YAeMTIhJ/MKoldWeZB7YPiiv4BWb34coY+RnDGWUCFpTXc6
dv5htV9xQtGIIctWveZBXeoF0o2/xIEZ+ryzrP/+OVTsAZvW3ZSxqHiZUBhDoQUE
q1muDNtcCF1eUoC0a9iuWkfbA5wvyhrAXkM0rjqPaosLZpgVDY0fNmX0Y4Y3tztZ
MJFJFSPnBp9NPr6zYyVUEcrrajDaJpNY0uWYd+6HHX06o4/XfyX8BDMjawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJn5E9VZ9JIEAK36rPd8iTJYyg8TMB8GA1UdIwQY
MBaAFNx9jtmEQ95saI0XTx8AVb5N4YKhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0gyTzJZUkQzbXhvalJkUEh3QlZ2azNoZ3FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC85YTZkODMtNWMyZi00MmJlLThkNzYt
YjgwMjA1MjgzMmNmLzEvM0gyTzJZUkQzbXhvalJkUEh3QlZ2azNoZ3FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC85YTZkODMtNWMyZi00MmJlLThkNzYtYjgwMjA1MjgzMmNm
LzEvM0gyTzJZUkQzbXhvalJkUEh3QlZ2azNoZ3FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB0tPaDSM
fIhp7nFk09tS6v+aRSwRFnv8W/8dCUttnv/3qEsjYNXpceQZali1KurrqZLS70N1
bnxbfZ8eyspJeU+WQPCmqnd44Oc8eVdyz41GpRPrWxFvCI8SsJ2qtvIwF93N1dLG
PablJ4NQmn+ArLLtwficd9Jtxk61wwJNsK9Pdxs2ucmAOB6r8tkKlZBC0TTCaten
09q1XDBmhu9eWq7K6VpsHFVVLLjUqlg0nF3YF/4HKeikYXKb1x2pzrs6/x3MOeY7
NmIfb+AkMRUDAMjWczvT4bo41Rk6YTrOA21SqYCw3PFc0pLRQvNa4v/2NxgXC01K
l9PZxeIDmVHeNw==
-----END CERTIFICATE-----
Generated at Thu Nov 12 01:25:55 2026 by rpki-client