Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
File: 3itcv5Z6A0nYiXBLtNYfpSajHW8.mft (raw, json)
Hash identifier: uwKY28sk3Y8yr/qDxo4NgOmALXn1kXtTKspOYtNnNUo=
Subject key identifier: 71:15:AA:91:46:99:D8:CC:A8:EC:CB:5C:09:E1:A1:3D:B6:F5:59:1F
Authority key identifier: DE:2B:5C:BF:96:7A:03:49:D8:89:70:4B:B4:D6:1F:A5:26:A3:1D:6F
Certificate issuer: /CN=de2b5cbf967a0349d889704bb4d61fa526a31d6f
Certificate serial: 01A0CA47785606EBBD01F74006C7D0B938BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
Manifest number: 19A8
Signing time: Tue 22 Sep 2026 18:01:16 +0000
Manifest this update: Tue 22 Sep 2026 18:01:16 +0000
Manifest next update: Wed 23 Sep 2026 18:01:16 +0000
Files and hashes: 1: 3itcv5Z6A0nYiXBLtNYfpSajHW8.crl (hash: R3g2UTRQRSYilFA2XN8FEguD2bltA63XbTBsgS3dD0c=)
2: xU2EDS3A1kqxHB5fmWawALQua5w.roa (hash: gy/kCjpuCiDHyb5854bh+q6WsJ4/S+45FLFM/o6soug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:78:56:06:eb:bd:01:f7:40:06:c7:d0:b9:38:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2b5cbf967a0349d889704bb4d61fa526a31d6f
Validity
Not Before: Sep 22 18:01:16 2026 GMT
Not After : Sep 23 18:01:16 2026 GMT
Subject: CN=7115aa914699d8cca8eccb5c09e1a13db6f5591f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:fb:16:f8:4e:7d:74:e7:12:ac:f6:f8:33:08:
b3:fb:57:0e:3a:1a:a9:9d:56:8d:45:86:cc:27:cb:
c4:c4:11:13:76:02:63:89:d2:09:10:1c:0e:66:e3:
d5:df:e8:76:39:89:76:4a:04:bd:13:dd:7a:95:17:
4f:54:55:6c:c9:f2:b1:03:a9:68:3a:61:40:8b:a8:
82:eb:ff:38:01:25:54:b9:49:e4:43:8b:ee:0e:34:
7c:77:c3:cf:c7:77:00:f9:1d:f6:66:c9:0c:ca:f0:
49:10:5d:49:f9:96:a0:f2:5b:55:f4:d5:8a:6d:1a:
57:c5:ce:a9:cd:5f:4e:2f:09:cc:53:f0:65:11:80:
62:90:e9:49:5d:b0:e8:40:a4:f6:28:16:b8:2f:f9:
96:a1:d1:e0:8a:96:47:fe:d9:94:dc:c1:4a:59:f0:
85:f8:71:e1:ac:1f:6d:4e:58:31:a2:f3:2d:ad:8d:
fd:79:35:d3:a9:bb:72:62:73:fe:2e:16:d5:c7:15:
cb:2e:dd:ca:8d:14:02:ab:35:53:3a:dc:95:42:cd:
d3:92:77:1b:b1:81:d9:da:31:f3:2f:9b:b5:bf:2c:
39:28:9c:ae:42:2a:fd:96:8d:4e:d3:52:1d:e7:0e:
cc:58:0c:00:d5:89:a9:9a:01:fb:b4:68:1a:3a:71:
03:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:15:AA:91:46:99:D8:CC:A8:EC:CB:5C:09:E1:A1:3D:B6:F5:59:1F
X509v3 Authority Key Identifier:
keyid:DE:2B:5C:BF:96:7A:03:49:D8:89:70:4B:B4:D6:1F:A5:26:A3:1D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e8:2e:1a:b8:ea:93:a5:7c:ff:a9:3a:30:c8:7c:0c:24:c8:
94:d6:a6:f7:0d:5a:0d:76:5f:b8:2c:4b:bd:67:f8:70:8c:5c:
b0:dc:93:ac:29:07:c9:c6:5a:7e:1f:93:8b:da:83:9a:1d:a9:
b3:eb:2d:21:4d:4f:4e:26:f8:c8:b9:6c:61:f8:a8:3f:09:98:
e3:59:17:f1:42:8f:7e:42:d0:d9:55:8a:f5:3e:18:4c:1b:05:
a6:be:d6:57:4f:2e:f1:a8:ab:26:2f:e6:85:4b:9d:31:09:12:
7c:2b:bb:bc:8b:43:15:c5:6b:c1:70:b1:c0:51:a5:4c:7d:fd:
b3:7c:46:35:25:27:92:b2:4e:c9:03:4f:c8:3f:dc:d0:e1:c2:
92:16:1c:54:57:25:81:fb:66:92:af:0f:c7:32:01:f0:e7:06:
8b:59:2e:ce:c6:8e:b6:97:0d:89:a1:9f:e6:ed:83:c8:00:f1:
5a:cc:cf:e8:36:49:8f:10:5f:3f:b6:c7:b7:29:50:dd:5c:c0:
b0:55:e5:a1:cb:45:a8:93:0b:3f:b1:a4:1f:06:6c:4b:49:5a:
ff:81:24:07:9e:af:5d:2d:ca:03:d4:0e:4a:43:4d:f1:1f:8a:
a6:a2:f6:ff:7c:e8:be:86:71:a3:b6:d6:92:e0:bc:8a:07:c0:
55:15:39:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKR3hWBuu9AfdABsfQuTi7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMmI1Y2JmOTY3YTAzNDlkODg5NzA0YmI0ZDYxZmE1MjZh
MzFkNmYwHhcNMjYwOTIyMTgwMTE2WhcNMjYwOTIzMTgwMTE2WjAzMTEwLwYDVQQD
Eyg3MTE1YWE5MTQ2OTlkOGNjYThlY2NiNWMwOWUxYTEzZGI2ZjU1OTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PsW+E59dOcSrPb4Mwiz+1cOOhqp
nVaNRYbMJ8vExBETdgJjidIJEBwOZuPV3+h2OYl2SgS9E916lRdPVFVsyfKxA6lo
OmFAi6iC6/84ASVUuUnkQ4vuDjR8d8PPx3cA+R32ZskMyvBJEF1J+Zag8ltV9NWK
bRpXxc6pzV9OLwnMU/BlEYBikOlJXbDoQKT2KBa4L/mWodHgipZH/tmU3MFKWfCF
+HHhrB9tTlgxovMtrY39eTXTqbtyYnP+LhbVxxXLLt3KjRQCqzVTOtyVQs3Tkncb
sYHZ2jHzL5u1vyw5KJyuQir9lo1O01Id5w7MWAwA1YmpmgH7tGgaOnEDhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHEVqpFGmdjMqOzLXAnhoT229VkfMB8GA1UdIwQY
MBaAFN4rXL+WegNJ2IlwS7TWH6Umox1vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2l0Y3Y1WjZBMG5ZaVhCTHROWWZwU2FqSFc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi82NDZlN2QtNGY0Ni00MDdjLWJkZDAt
ZmQ3MmQ5NjJkZjI3LzEvM2l0Y3Y1WjZBMG5ZaVhCTHROWWZwU2FqSFc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi82NDZlN2QtNGY0Ni00MDdjLWJkZDAtZmQ3MmQ5NjJkZjI3
LzEvM2l0Y3Y1WjZBMG5ZaVhCTHROWWZwU2FqSFc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJeguGrjq
k6V8/6k6MMh8DCTIlNam9w1aDXZfuCxLvWf4cIxcsNyTrCkHycZafh+Ti9qDmh2p
s+stIU1PTib4yLlsYfioPwmY41kX8UKPfkLQ2VWK9T4YTBsFpr7WV08u8airJi/m
hUudMQkSfCu7vItDFcVrwXCxwFGlTH39s3xGNSUnkrJOyQNPyD/c0OHCkhYcVFcl
gftmkq8PxzIB8OcGi1kuzsaOtpcNiaGf5u2DyADxWszP6DZJjxBfP7bHtylQ3VzA
sFXloctFqJMLP7GkHwZsS0la/4EkB56vXS3KA9QOSkNN8R+KpqL2/3zovoZxo7bW
kuC8igfAVRU5zg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 21:22:51 2026 by rpki-client