
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
File: 3svvNSysca1brg6LHAIkbjtlAlA.mft (raw, json)
Hash identifier: SJ5SsdOVM9KjtJ/6CJ10GMY/KUBQmlI7dHVG8oMEXuw=
Subject key identifier: 3E:DF:65:74:AE:21:C8:A9:4B:4E:27:E0:D5:6B:C0:A4:C6:F8:45:05
Authority key identifier: DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50
Certificate issuer: /CN=decbef352cac71ad5bae0e8b1c02246e3b650250
Certificate serial: 01A0CBFE9C1C7AA9FF959CCE6D8E7AA45D5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
Manifest number: 0DE7
Signing time: Wed 23 Sep 2026 02:00:56 +0000
Manifest this update: Wed 23 Sep 2026 02:00:56 +0000
Manifest next update: Thu 24 Sep 2026 02:00:56 +0000
Files and hashes: 1: 3svvNSysca1brg6LHAIkbjtlAlA.crl (hash: pi4KiPxQgJVq1YlxElFFTQaaA9dxCQPS+HFgzX7y1K4=)
2: VuX4J2QukxsOIE5nfEx2tHa_6Dc.roa (hash: /6Cm3xSVnWhJDBO1jxzYWi2+tCHbHsChrmLHN+jeMKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:fe:9c:1c:7a:a9:ff:95:9c:ce:6d:8e:7a:a4:5d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=decbef352cac71ad5bae0e8b1c02246e3b650250
Validity
Not Before: Sep 23 02:00:56 2026 GMT
Not After : Sep 24 02:00:56 2026 GMT
Subject: CN=3edf6574ae21c8a94b4e27e0d56bc0a4c6f84505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2c:39:f6:54:8d:00:b1:b3:10:39:f9:5b:b0:
c7:dc:67:40:2c:59:05:0d:30:a1:cc:b2:84:13:db:
5e:63:ed:38:25:5e:8c:86:40:b8:11:51:88:11:61:
21:93:44:61:ac:1e:c9:66:a1:bd:aa:23:42:92:22:
2a:af:ab:2e:1a:25:15:9c:54:ff:d1:63:15:f4:3c:
10:73:05:cd:3d:ee:db:b2:1d:6a:45:c3:62:20:67:
d4:ae:d8:35:f2:d8:50:a2:f7:b0:29:48:56:6f:46:
e5:49:60:4c:e5:b4:ff:90:6c:05:b2:ba:e3:82:9b:
05:f9:cd:b3:44:90:08:c7:35:af:56:30:e3:68:22:
ba:f1:15:96:f1:48:ad:b0:7d:fe:23:eb:bf:8e:37:
0b:d2:06:e2:35:66:0b:7e:f4:08:04:7b:87:d2:01:
42:5d:98:ad:1a:27:8d:f0:6b:57:6e:aa:53:8a:8b:
e1:01:bc:25:59:fc:72:98:b5:ce:02:6d:89:31:f6:
f2:ce:85:b5:1c:8f:e0:9e:13:f6:42:ba:a3:49:06:
77:5e:b0:34:27:48:d6:ae:2d:ea:d9:e9:d1:46:49:
8e:d1:15:31:83:38:05:29:69:f3:a1:10:b9:e7:54:
a8:b4:85:81:04:be:a1:2b:5d:8c:ee:2e:13:80:aa:
6b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DF:65:74:AE:21:C8:A9:4B:4E:27:E0:D5:6B:C0:A4:C6:F8:45:05
X509v3 Authority Key Identifier:
keyid:DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ee:4e:ef:07:dd:09:21:42:a0:f1:9a:6a:47:55:2b:01:f7:
f0:e2:e9:78:ef:df:33:94:17:7a:8c:de:f5:87:fa:28:21:11:
97:87:ae:ad:e1:0c:e5:f8:28:30:26:7f:b0:d0:18:6e:1d:44:
93:77:6e:ed:56:25:bb:75:96:b2:e2:da:65:fb:26:e2:27:7d:
bc:62:85:ae:86:4b:0b:6e:ec:89:30:35:7d:7c:80:b3:30:1f:
8a:80:4d:94:4b:ec:13:83:9a:ec:d9:08:76:c9:65:8c:ee:90:
b6:2f:c3:bf:61:60:4f:c9:d3:d7:49:31:e4:1b:bc:7f:43:c3:
cd:38:5d:05:c3:15:ff:f6:93:ef:25:76:bd:33:43:18:ea:64:
6c:01:b4:20:ed:8d:7f:c6:91:b7:bc:47:70:19:71:4a:8f:ea:
e0:a5:c9:80:51:2a:30:1f:3d:35:91:6d:08:8e:e4:54:c6:99:
83:a8:29:94:da:b1:1c:ed:0c:68:57:a2:ee:40:a9:9a:9d:94:
64:c1:a1:44:ee:96:15:b8:e6:f9:84:62:ae:64:dc:ce:92:6e:
24:f2:8e:f0:ff:5e:9c:f8:9b:00:6d:81:99:8f:a2:36:74:66:
93:c8:50:dd:14:7b:8b:66:eb:79:13:ca:35:86:ca:0a:8d:d2:
60:d3:39:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDL/pwceqn/lZzObY56pF1fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlY2JlZjM1MmNhYzcxYWQ1YmFlMGU4YjFjMDIyNDZlM2I2
NTAyNTAwHhcNMjYwOTIzMDIwMDU2WhcNMjYwOTI0MDIwMDU2WjAzMTEwLwYDVQQD
EygzZWRmNjU3NGFlMjFjOGE5NGI0ZTI3ZTBkNTZiYzBhNGM2Zjg0NTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSw59lSNALGzEDn5W7DH3GdALFkF
DTChzLKEE9teY+04JV6MhkC4EVGIEWEhk0RhrB7JZqG9qiNCkiIqr6suGiUVnFT/
0WMV9DwQcwXNPe7bsh1qRcNiIGfUrtg18thQovewKUhWb0blSWBM5bT/kGwFsrrj
gpsF+c2zRJAIxzWvVjDjaCK68RWW8UitsH3+I+u/jjcL0gbiNWYLfvQIBHuH0gFC
XZitGieN8GtXbqpTiovhAbwlWfxymLXOAm2JMfbyzoW1HI/gnhP2QrqjSQZ3XrA0
J0jWri3q2enRRkmO0RUxgzgFKWnzoRC551SotIWBBL6hK12M7i4TgKpr7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7fZXSuIcipS04n4NVrwKTG+EUFMB8GA1UdIwQY
MBaAFN7L7zUsrHGtW64OixwCJG47ZQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3N2dk5TeXNjYTFicmc2TEhBSWtianRsQWxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82YmNmM2YtNWNhYy00NDcwLThhYWIt
NTQxZjlmY2JhNzQyLzEvM3N2dk5TeXNjYTFicmc2TEhBSWtianRsQWxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC82YmNmM2YtNWNhYy00NDcwLThhYWItNTQxZjlmY2JhNzQy
LzEvM3N2dk5TeXNjYTFicmc2TEhBSWtianRsQWxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAde5O7wfd
CSFCoPGaakdVKwH38OLpeO/fM5QXeoze9Yf6KCERl4eureEM5fgoMCZ/sNAYbh1E
k3du7VYlu3WWsuLaZfsm4id9vGKFroZLC27siTA1fXyAszAfioBNlEvsE4Oa7NkI
dslljO6Qti/Dv2FgT8nT10kx5Bu8f0PDzThdBcMV//aT7yV2vTNDGOpkbAG0IO2N
f8aRt7xHcBlxSo/q4KXJgFEqMB89NZFtCI7kVMaZg6gplNqxHO0MaFei7kCpmp2U
ZMGhRO6WFbjm+YRirmTczpJuJPKO8P9enPibAG2BmY+iNnRmk8hQ3RR7i2breRPK
NYbKCo3SYNM5yA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 05:54:20 2026 by rpki-client