Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/_3VDG3ytn66j5BlWlh4IR1X4LTM.mft
File: _3VDG3ytn66j5BlWlh4IR1X4LTM.mft (raw, json)
Hash identifier: 2SRhemRAzKrM+Iw+rdwCIEIDuHi6Pvc+q/Rxl91SBpA=
Subject key identifier: 19:BA:21:93:E5:D6:54:80:F5:99:28:6C:30:B3:60:6E:8C:9A:B4:41
Authority key identifier: FF:75:43:1B:7C:AD:9F:AE:A3:E4:19:56:96:1E:08:47:55:F8:2D:33
Certificate issuer: /CN=ff75431b7cad9faea3e41956961e084755f82d33
Certificate serial: 01A11974857B0B0A831497DB48DF2D27FEA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_3VDG3ytn66j5BlWlh4IR1X4LTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/_3VDG3ytn66j5BlWlh4IR1X4LTM.mft
Manifest number: 010B
Signing time: Thu 08 Oct 2026 03:00:28 +0000
Manifest this update: Thu 08 Oct 2026 03:00:28 +0000
Manifest next update: Fri 09 Oct 2026 03:00:28 +0000
Files and hashes: 1: TjAvlv1RE5zaPC2dyAwi4crfm6o.roa (hash: j19p19mIszd20BEiCpsiRkK3ohgiQ0R61lURvBqp/zQ=)
2: _3VDG3ytn66j5BlWlh4IR1X4LTM.crl (hash: FJQsU/e1bxWKUGvFFSH52uv3lrr1qvAYzowOkFju418=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/_3VDG3ytn66j5BlWlh4IR1X4LTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/_3VDG3ytn66j5BlWlh4IR1X4LTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_3VDG3ytn66j5BlWlh4IR1X4LTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:74:85:7b:0b:0a:83:14:97:db:48:df:2d:27:fe:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff75431b7cad9faea3e41956961e084755f82d33
Validity
Not Before: Oct 8 03:00:28 2026 GMT
Not After : Oct 9 03:00:28 2026 GMT
Subject: CN=19ba2193e5d65480f599286c30b3606e8c9ab441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:72:76:dd:fe:55:fd:bc:43:33:e0:1b:4e:38:
a6:c6:c7:dc:a9:a3:67:bd:c0:f6:95:6c:28:1a:1f:
eb:b7:61:22:86:ec:d7:b2:7e:63:ab:e5:f9:70:0c:
59:3e:3d:bb:17:17:57:c0:20:c2:48:42:9f:b6:7e:
2e:37:cc:89:d2:bd:87:a1:4c:8f:13:e2:5d:0f:bb:
87:4d:09:d9:0e:19:e1:42:5b:7d:ac:d3:76:9a:4b:
78:6c:14:3e:00:fa:f9:e2:e8:55:8d:87:05:99:8c:
6d:d0:66:9b:38:62:80:f9:59:00:ac:5f:ef:6b:6a:
6d:8f:f6:76:82:80:6c:79:69:68:17:4e:d4:f0:65:
33:fc:02:ec:e6:c9:51:65:a2:68:79:b8:b4:38:8f:
22:24:fa:e2:56:cf:68:25:86:c9:51:fe:70:ad:e6:
39:97:1b:d7:a5:d4:80:9e:e3:1d:e3:be:90:c3:47:
ae:90:09:44:36:99:ed:cb:76:39:b9:fe:7c:11:09:
04:a5:bb:6b:fb:85:04:8f:4e:d4:cf:8b:02:6e:21:
99:7f:ba:7e:74:7f:03:d0:dc:93:b8:ae:bf:87:18:
58:72:2d:69:37:de:7c:a0:09:11:af:b2:4a:67:85:
a7:d9:f7:39:f9:ef:a1:86:db:2f:09:fd:c5:f1:fe:
54:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BA:21:93:E5:D6:54:80:F5:99:28:6C:30:B3:60:6E:8C:9A:B4:41
X509v3 Authority Key Identifier:
keyid:FF:75:43:1B:7C:AD:9F:AE:A3:E4:19:56:96:1E:08:47:55:F8:2D:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3VDG3ytn66j5BlWlh4IR1X4LTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/_3VDG3ytn66j5BlWlh4IR1X4LTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/_3VDG3ytn66j5BlWlh4IR1X4LTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:9b:c2:c1:df:06:24:b4:7d:d6:8f:27:36:03:94:65:33:f6:
22:76:2a:d6:b1:1d:20:4d:30:8f:1e:40:da:f9:d5:f8:54:65:
a1:f5:df:e4:c7:90:09:3a:9a:d1:97:c6:39:7f:84:91:8f:79:
ff:02:5d:db:10:dd:71:83:32:4a:37:0a:3f:09:d6:55:92:2e:
6b:6c:ae:67:c1:bd:22:31:a4:29:57:df:1d:c4:96:f2:2e:7b:
41:92:dc:dc:0c:50:71:6d:8f:b7:10:17:80:c8:e3:30:b9:90:
4b:a3:89:08:87:be:f1:80:07:ce:db:6c:6d:da:a3:8f:d8:2d:
ae:ab:6c:e0:41:56:c4:2d:2f:65:45:cf:64:7d:7e:cc:9d:ab:
4a:0e:72:9a:8d:b4:df:dd:6f:10:1b:78:39:6f:fb:49:fb:37:
aa:03:19:a3:c8:ea:06:aa:cd:a7:29:70:6f:5d:19:c4:f8:24:
79:a2:80:7c:10:8f:1e:b8:19:f9:c5:1b:9f:7d:ae:57:74:d3:
d8:a0:86:a4:9e:ca:12:04:c3:fc:72:7e:c6:64:b5:e9:ae:60:
57:c0:40:6e:62:76:20:20:8c:23:47:88:8e:a4:5d:45:c2:b1:
5e:80:bc:df:ff:1c:89:38:1f:89:31:69:e4:71:a9:87:d7:7d:
70:3a:16:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEZdIV7CwqDFJfbSN8tJ/6nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNzU0MzFiN2NhZDlmYWVhM2U0MTk1Njk2MWUwODQ3NTVm
ODJkMzMwHhcNMjYxMDA4MDMwMDI4WhcNMjYxMDA5MDMwMDI4WjAzMTEwLwYDVQQD
EygxOWJhMjE5M2U1ZDY1NDgwZjU5OTI4NmMzMGIzNjA2ZThjOWFiNDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXJ23f5V/bxDM+AbTjimxsfcqaNn
vcD2lWwoGh/rt2EihuzXsn5jq+X5cAxZPj27FxdXwCDCSEKftn4uN8yJ0r2HoUyP
E+JdD7uHTQnZDhnhQlt9rNN2mkt4bBQ+APr54uhVjYcFmYxt0GabOGKA+VkArF/v
a2ptj/Z2goBseWloF07U8GUz/ALs5slRZaJoebi0OI8iJPriVs9oJYbJUf5wreY5
lxvXpdSAnuMd476Qw0eukAlENpnty3Y5uf58EQkEpbtr+4UEj07Uz4sCbiGZf7p+
dH8D0NyTuK6/hxhYci1pN958oAkRr7JKZ4Wn2fc5+e+hhtsvCf3F8f5UKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBm6IZPl1lSA9ZkobDCzYG6MmrRBMB8GA1UdIwQY
MBaAFP91Qxt8rZ+uo+QZVpYeCEdV+C0zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzNWREczeXRuNjZqNUJsV2xoNElSMVg0TFRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81YTNiZGEtYzY4OC00YTQyLTk0NmYt
OTYzOTkzY2U1MTgxLzEvXzNWREczeXRuNjZqNUJsV2xoNElSMVg0TFRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC81YTNiZGEtYzY4OC00YTQyLTk0NmYtOTYzOTkzY2U1MTgx
LzEvXzNWREczeXRuNjZqNUJsV2xoNElSMVg0TFRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgZvCwd8G
JLR91o8nNgOUZTP2InYq1rEdIE0wjx5A2vnV+FRlofXf5MeQCTqa0ZfGOX+EkY95
/wJd2xDdcYMySjcKPwnWVZIua2yuZ8G9IjGkKVffHcSW8i57QZLc3AxQcW2PtxAX
gMjjMLmQS6OJCIe+8YAHzttsbdqjj9gtrqts4EFWxC0vZUXPZH1+zJ2rSg5ymo20
391vEBt4OW/7Sfs3qgMZo8jqBqrNpylwb10ZxPgkeaKAfBCPHrgZ+cUbn32uV3TT
2KCGpJ7KEgTD/HJ+xmS16a5gV8BAbmJ2ICCMI0eIjqRdRcKxXoC83/8ciTgfiTFp
5HGph9d9cDoWLQ==
-----END CERTIFICATE-----
Generated at Thu Oct 8 05:50:48 2026 by rpki-client