Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
File: 3ihtA6NzvWie8EYQocithHPr3a0.mft (raw, json)
Hash identifier: swCpEKZfC1oECJ7nuZLe0YgAL4XSce+7Pbh3ICLjkfs=
Subject key identifier: 8B:1E:B1:7B:76:FA:E0:DE:F0:4A:FE:4C:95:9C:7E:2D:2E:35:AD:94
Authority key identifier: DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
Certificate issuer: /CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Certificate serial: 01A0CB22A67C70C1DC9760AB7EF95DE0B0D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
Manifest number: 15AE
Signing time: Tue 22 Sep 2026 22:00:40 +0000
Manifest this update: Tue 22 Sep 2026 22:00:40 +0000
Manifest next update: Wed 23 Sep 2026 22:00:40 +0000
Files and hashes: 1: 3ihtA6NzvWie8EYQocithHPr3a0.crl (hash: 991GpjF7GQD7v1qZEqKTlmYANjfcrCy1LuV+lctyTZI=)
2: 6LpMhHmk89Py7vWuBJ8eEXpWnn4.asa (hash: eq0WQCdDBBCmtQF0jQMbbLOLGcIojkIy5NWC9heTYts=)
3: vlBe3oYmjLCyAb6mMX2mR3pkXOU.roa (hash: zOmjl7/VF1REeDK9Kz85f9AKUhU+m9qTE9b+EWBSHrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:a6:7c:70:c1:dc:97:60:ab:7e:f9:5d:e0:b0:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Validity
Not Before: Sep 22 22:00:40 2026 GMT
Not After : Sep 23 22:00:40 2026 GMT
Subject: CN=8b1eb17b76fae0def04afe4c959c7e2d2e35ad94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e2:54:41:db:bb:e6:ef:b8:ed:d1:3a:43:a7:
f5:69:5b:6d:90:28:97:67:62:00:3e:0a:f9:93:9d:
a8:39:49:81:1b:e2:e2:a1:92:c2:e1:63:c7:a1:d6:
58:1b:d4:b3:d3:5b:b4:66:e7:d0:16:bc:b0:6b:af:
57:5d:3b:7c:f1:e0:bb:d2:11:a7:2c:98:f4:f5:5a:
10:68:04:e0:6c:84:6c:03:c4:23:eb:a0:0d:95:ea:
68:33:fc:7f:54:9c:dc:3a:e0:e8:5f:4c:3e:d7:32:
d1:ba:45:27:67:bd:08:10:22:0c:3a:ea:7a:ae:09:
07:9b:3b:d5:5b:a1:7e:e6:bc:95:2d:e1:1c:3a:cd:
61:ea:a0:79:55:27:38:9a:9e:2b:0c:25:2c:e2:25:
4b:3b:0d:98:da:a7:27:42:f2:94:98:ef:71:be:b9:
b9:01:14:20:83:d0:b0:6a:46:14:e3:a3:65:1a:f0:
03:07:5e:63:64:1b:b8:85:6c:f1:f8:3f:09:dc:e8:
bd:cd:2b:b1:05:f3:c7:8b:29:54:0d:4c:93:53:c7:
1e:71:60:27:f2:e8:14:a6:68:73:2a:fb:c1:f3:20:
5b:46:d1:e0:ff:f0:fe:2f:09:16:8f:d1:91:58:57:
a4:c1:35:2e:ea:8e:a4:86:98:e5:83:3b:e3:0f:69:
7c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1E:B1:7B:76:FA:E0:DE:F0:4A:FE:4C:95:9C:7E:2D:2E:35:AD:94
X509v3 Authority Key Identifier:
keyid:DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:ef:11:82:b7:26:5f:80:5a:76:75:a1:7c:53:19:e8:7c:2f:
06:98:cc:dd:a3:b3:5c:0b:84:8c:9d:4e:93:76:2c:51:ef:69:
fd:84:97:81:35:d1:b4:e7:1a:96:f9:96:eb:85:c8:ca:62:7b:
6b:f3:44:44:9a:8f:48:ba:b3:2c:f7:8a:8a:3f:04:81:e3:f5:
59:5a:fd:61:fb:32:97:88:41:73:e0:50:2e:2f:d5:17:b8:62:
3b:b8:19:85:47:1f:a8:79:ee:7e:21:f0:02:7d:f8:06:eb:52:
be:ae:fb:01:c9:c9:5c:6e:ad:6d:df:d0:e4:9b:21:95:7c:f6:
69:48:48:24:8b:40:1f:ea:b3:03:e7:04:d4:87:c0:cd:85:4f:
dd:ce:a5:03:64:79:39:20:dd:74:80:ee:3b:65:8e:0e:f4:fc:
dc:b7:cd:cc:d3:89:60:56:03:2e:70:03:e6:e0:ca:45:9c:d0:
b3:f7:7e:67:82:c2:52:9f:24:ea:29:5e:6f:65:fb:3f:7c:4e:
a8:32:b4:a8:8c:32:29:22:6d:8b:84:78:4e:cb:d6:7d:fd:f2:
44:9f:03:fa:69:62:c9:fd:b5:95:c1:51:60:6f:41:92:72:52:
bf:ba:72:e6:9b:28:8f:62:f7:87:b2:ce:92:55:b4:53:aa:20:
c1:56:78:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLIqZ8cMHcl2Crfvld4LDUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMjg2ZDAzYTM3M2JkNjg5ZWYwNDYxMGExYzhhZDg0NzNl
YmRkYWQwHhcNMjYwOTIyMjIwMDQwWhcNMjYwOTIzMjIwMDQwWjAzMTEwLwYDVQQD
Eyg4YjFlYjE3Yjc2ZmFlMGRlZjA0YWZlNGM5NTljN2UyZDJlMzVhZDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+JUQdu75u+47dE6Q6f1aVttkCiX
Z2IAPgr5k52oOUmBG+LioZLC4WPHodZYG9Sz01u0ZufQFrywa69XXTt88eC70hGn
LJj09VoQaATgbIRsA8Qj66ANlepoM/x/VJzcOuDoX0w+1zLRukUnZ70IECIMOup6
rgkHmzvVW6F+5ryVLeEcOs1h6qB5VSc4mp4rDCUs4iVLOw2Y2qcnQvKUmO9xvrm5
ARQgg9CwakYU46NlGvADB15jZBu4hWzx+D8J3Oi9zSuxBfPHiylUDUyTU8cecWAn
8ugUpmhzKvvB8yBbRtHg//D+LwkWj9GRWFekwTUu6o6khpjlgzvjD2l83wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIsesXt2+uDe8Er+TJWcfi0uNa2UMB8GA1UdIwQY
MBaAFN4obQOjc71onvBGEKHIrYRz692tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2lodEE2Tnp2V2llOEVZUW9jaXRoSFByM2EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9kYmVmMTctOWJiOC00NmJjLTkzNDMt
Y2FkZjBjYTFkZDBkLzEvM2lodEE2Tnp2V2llOEVZUW9jaXRoSFByM2EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9kYmVmMTctOWJiOC00NmJjLTkzNDMtY2FkZjBjYTFkZDBk
LzEvM2lodEE2Tnp2V2llOEVZUW9jaXRoSFByM2EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAve8Rgrcm
X4BadnWhfFMZ6HwvBpjM3aOzXAuEjJ1Ok3YsUe9p/YSXgTXRtOcalvmW64XIymJ7
a/NERJqPSLqzLPeKij8EgeP1WVr9Yfsyl4hBc+BQLi/VF7hiO7gZhUcfqHnufiHw
An34ButSvq77AcnJXG6tbd/Q5JshlXz2aUhIJItAH+qzA+cE1IfAzYVP3c6lA2R5
OSDddIDuO2WODvT83LfNzNOJYFYDLnAD5uDKRZzQs/d+Z4LCUp8k6ileb2X7P3xO
qDK0qIwyKSJti4R4TsvWff3yRJ8D+mliyf21lcFRYG9BknJSv7py5psoj2L3h7LO
klW0U6ogwVZ43A==
-----END CERTIFICATE-----
Generated at Wed Sep 23 02:07:13 2026 by rpki-client