Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
File: 3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft (raw, json)
Hash identifier: MbDSQ1k0ByZdo5mS3nHoIk7mDHEmNobHi5MIHajxA74=
Subject key identifier: 73:18:B7:76:7F:E9:68:B5:05:79:F1:B9:62:63:73:FF:DB:D0:0A:A6
Authority key identifier: DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16
Certificate issuer: /CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16
Certificate serial: 01A12F21404C58C72F73900DBB2F82A23FEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
Manifest number: 15E0
Signing time: Mon 12 Oct 2026 08:01:10 +0000
Manifest this update: Mon 12 Oct 2026 08:01:10 +0000
Manifest next update: Tue 13 Oct 2026 08:01:10 +0000
Files and hashes: 1: 3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl (hash: ebe0pbwWHiUYSh66ua5+fLY3x/uswqrXtD+gwEJq3HY=)
2: 6TUuFWgBkm98OJlIkhqINWWAoI0.roa (hash: GA9PdoKCJE0Uq5wLiSfj1Mw/gZ339oU3m0s7B3MQNRA=)
3: _qA7-iuYEvTbfVREYl9q7tay4Bk.roa (hash: Z/glgCy5dfzogAACVBlWtKvnqFreHrzxfTJl0PSlZgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:21:40:4c:58:c7:2f:73:90:0d:bb:2f:82:a2:3f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd725c4d0953e7ecf46f37e14fca14fd09a12d16
Validity
Not Before: Oct 12 08:01:10 2026 GMT
Not After : Oct 13 08:01:10 2026 GMT
Subject: CN=7318b7767fe968b50579f1b9626373ffdbd00aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ff:39:04:a4:e1:22:08:a0:9e:8b:d6:df:77:
bc:8a:35:59:ec:db:c1:df:96:b9:37:d5:b9:9a:1b:
da:36:a6:fb:8d:0d:01:c2:ee:a9:d5:91:74:b2:d5:
e3:e8:17:d9:ae:e3:2e:9d:f4:ad:93:c5:a9:7f:9e:
cd:f1:d0:78:5a:4b:b9:85:bd:9c:73:98:95:56:1f:
ed:b1:e3:64:1b:dc:b0:03:e3:87:f9:c7:43:a2:ae:
eb:31:b8:43:66:bf:4d:15:d7:a4:5d:6f:71:24:cf:
84:2f:6c:fa:74:3d:a3:92:6d:6e:a8:0b:05:5f:65:
6b:ca:d9:f1:9e:ea:fd:4b:95:6a:a6:66:8d:cf:04:
91:de:fc:86:0d:73:ef:e4:cc:fa:bd:dc:dc:ca:f2:
06:d2:72:e3:69:88:e8:cf:9e:a6:00:4a:27:16:a6:
4b:0c:a8:95:5d:79:79:b0:ee:81:01:9b:d7:a9:12:
72:b2:e8:85:79:9a:0c:27:41:0c:a0:b7:f8:22:4e:
26:d3:a6:ea:ce:99:30:08:ee:04:6e:e3:d8:ae:cc:
c8:d8:e9:b0:7d:9a:7b:49:21:bd:f4:3b:c0:9c:9f:
9d:c6:50:48:2c:81:c8:5b:7c:97:62:1f:17:68:93:
65:be:89:a9:b1:c6:6d:3a:a0:32:4f:2e:08:12:41:
94:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:18:B7:76:7F:E9:68:B5:05:79:F1:B9:62:63:73:FF:DB:D0:0A:A6
X509v3 Authority Key Identifier:
keyid:DD:72:5C:4D:09:53:E7:EC:F4:6F:37:E1:4F:CA:14:FD:09:A1:2D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XJcTQlT5-z0bzfhT8oU_QmhLRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/aaa6e3-f054-48e7-8246-8f20cb734488/1/3XJcTQlT5-z0bzfhT8oU_QmhLRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:21:e3:bb:b9:4b:af:59:0d:c9:b0:cc:55:62:db:99:2a:e4:
0d:d5:2a:66:4f:2c:ee:66:23:cb:7e:a7:37:7a:4f:ee:54:8d:
a2:e5:a4:a5:83:e0:c0:7e:55:63:dd:6c:66:bf:ea:77:c2:ae:
c2:12:50:83:20:27:aa:5e:a0:0a:65:35:5d:42:6b:59:2c:ff:
1f:95:de:f5:aa:50:90:f2:2a:5e:a9:6c:0b:9f:1c:00:b1:3a:
39:94:e5:15:5b:05:3b:a8:8c:a4:45:1f:0a:6a:29:6e:38:09:
47:9a:c3:72:4c:7a:c5:91:08:f3:c3:50:c1:bb:ff:95:a0:9f:
98:a8:e2:e7:db:fd:a2:30:a7:86:7d:65:7c:83:58:6a:2d:bc:
9f:97:4c:f2:68:d1:18:d6:36:8e:6e:ae:cc:00:0d:14:68:22:
64:bb:2b:db:b6:58:79:ab:ac:8b:40:fc:5d:ed:9d:61:bf:e4:
31:c9:a8:60:7c:ad:f3:46:bc:e4:e0:ae:ae:50:3d:fa:5c:e6:
eb:42:0f:d9:59:f8:9a:02:72:a5:98:14:41:99:3d:37:bd:8e:
88:f8:8a:a9:e1:5b:55:53:d9:ff:2c:1e:aa:b0:0c:97:8b:a7:
0f:0b:10:42:ef:7d:f4:34:79:22:99:b0:e6:73:78:ac:a2:d8:
34:cd:a8:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEvIUBMWMcvc5ANuy+Coj/sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNzI1YzRkMDk1M2U3ZWNmNDZmMzdlMTRmY2ExNGZkMDlh
MTJkMTYwHhcNMjYxMDEyMDgwMTEwWhcNMjYxMDEzMDgwMTEwWjAzMTEwLwYDVQQD
Eyg3MzE4Yjc3NjdmZTk2OGI1MDU3OWYxYjk2MjYzNzNmZmRiZDAwYWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/85BKThIgignovW33e8ijVZ7NvB
35a5N9W5mhvaNqb7jQ0Bwu6p1ZF0stXj6BfZruMunfStk8Wpf57N8dB4Wku5hb2c
c5iVVh/tseNkG9ywA+OH+cdDoq7rMbhDZr9NFdekXW9xJM+EL2z6dD2jkm1uqAsF
X2Vrytnxnur9S5VqpmaNzwSR3vyGDXPv5Mz6vdzcyvIG0nLjaYjoz56mAEonFqZL
DKiVXXl5sO6BAZvXqRJysuiFeZoMJ0EMoLf4Ik4m06bqzpkwCO4EbuPYrszI2Omw
fZp7SSG99DvAnJ+dxlBILIHIW3yXYh8XaJNlvompscZtOqAyTy4IEkGU1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHMYt3Z/6Wi1BXnxuWJjc//b0AqmMB8GA1UdIwQY
MBaAFN1yXE0JU+fs9G834U/KFP0JoS0WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1hKY1RRbFQ1LXowYnpmaFQ4b1VfUW1oTFJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9hYWE2ZTMtZjA1NC00OGU3LTgyNDYt
OGYyMGNiNzM0NDg4LzEvM1hKY1RRbFQ1LXowYnpmaFQ4b1VfUW1oTFJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9hYWE2ZTMtZjA1NC00OGU3LTgyNDYtOGYyMGNiNzM0NDg4
LzEvM1hKY1RRbFQ1LXowYnpmaFQ4b1VfUW1oTFJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMiHju7lL
r1kNybDMVWLbmSrkDdUqZk8s7mYjy36nN3pP7lSNouWkpYPgwH5VY91sZr/qd8Ku
whJQgyAnql6gCmU1XUJrWSz/H5Xe9apQkPIqXqlsC58cALE6OZTlFVsFO6iMpEUf
CmopbjgJR5rDckx6xZEI88NQwbv/laCfmKji59v9ojCnhn1lfINYai28n5dM8mjR
GNY2jm6uzAANFGgiZLsr27ZYeausi0D8Xe2dYb/kMcmoYHyt80a85OCurlA9+lzm
60IP2Vn4mgJypZgUQZk9N72OiPiKqeFbVVPZ/yweqrAMl4unDwsQQu999DR5Ipmw
5nN4rKLYNM2ovg==
-----END CERTIFICATE-----
Generated at Mon Oct 12 19:54:43 2026 by rpki-client