Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
File: 3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft (raw, json)
Hash identifier: riunGouqY1MqqrgrkCtqo9fY+2Vn3TAGQxQciCdUIAA=
Subject key identifier: 95:50:AC:77:F1:45:5C:9D:5F:EC:E7:EF:23:A5:15:3C:02:AF:0F:66
Authority key identifier: DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89
Certificate issuer: /CN=ded55569177a889d337f03f2e698acabcccbb589
Certificate serial: 01A0C3D704020CB408027551A30111CF8B80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
Manifest number: 16EE
Signing time: Mon 21 Sep 2026 12:00:43 +0000
Manifest this update: Mon 21 Sep 2026 12:00:43 +0000
Manifest next update: Tue 22 Sep 2026 12:00:43 +0000
Files and hashes: 1: 3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl (hash: lRPwQ+/f2iXGkBQGFLu0+z4KMxZEaK1Yw8WEgOvbHaA=)
2: PjoIBGbk9FD7bZGLP8eN3ezf2Uo.roa (hash: gwcdk+V9+YDh37eh6agaRz1L3hMZa0x8O24FJTvNrKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d7:04:02:0c:b4:08:02:75:51:a3:01:11:cf:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded55569177a889d337f03f2e698acabcccbb589
Validity
Not Before: Sep 21 12:00:43 2026 GMT
Not After : Sep 22 12:00:43 2026 GMT
Subject: CN=9550ac77f1455c9d5fece7ef23a5153c02af0f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:78:49:2d:6f:44:26:de:80:ff:b0:d4:56:dd:
3b:99:43:62:40:de:ff:8f:06:70:5a:55:2c:db:9a:
21:1f:1c:54:26:54:d6:58:38:a2:9f:c4:b3:cc:71:
42:37:bf:07:15:23:0a:69:17:65:a3:a0:d8:2e:37:
6c:90:ed:f1:a1:fa:1f:0c:5b:f5:3f:99:c7:73:02:
a5:32:a9:8a:20:3c:79:36:cf:00:70:ad:89:97:e6:
c1:9e:1b:23:e3:35:3a:89:14:cc:31:74:44:9a:c1:
09:88:3e:61:a6:01:09:1b:03:fc:16:f0:0a:c9:b3:
f2:ef:86:38:d6:c4:ee:d6:f5:e5:b8:1f:a2:58:4e:
50:7f:bf:0f:07:3a:01:84:c5:89:25:ae:8b:a1:1a:
f0:08:03:ae:6c:76:1c:7c:bc:8e:d2:6c:14:2b:5e:
45:db:2d:66:6a:9f:fc:d1:66:2f:b2:5d:03:ea:b8:
2e:64:75:d6:9f:ec:23:33:ee:ec:78:0d:33:fc:89:
f6:67:bc:01:a6:39:78:46:c6:1e:66:bb:08:a9:6a:
5a:d5:30:03:d6:39:b8:4d:ae:b8:31:f0:d4:61:38:
67:11:b3:e5:ad:32:da:54:4e:e6:22:80:44:d6:15:
f7:a0:e6:54:85:e2:82:5f:55:cb:09:f9:f1:c5:1e:
2a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:50:AC:77:F1:45:5C:9D:5F:EC:E7:EF:23:A5:15:3C:02:AF:0F:66
X509v3 Authority Key Identifier:
keyid:DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ce:1d:3e:ac:2f:89:12:6d:5c:28:64:fc:b4:5b:c2:60:66:
7b:52:98:76:f0:f6:a2:3a:c9:d7:6a:0c:96:34:be:0d:bc:d6:
af:a3:1c:31:47:3a:8c:86:a5:2f:66:bf:17:c6:de:bb:0d:09:
63:a3:f5:c4:a7:6f:18:e7:27:3c:08:e4:2f:50:02:c3:68:e5:
47:08:05:52:c5:36:53:a4:b1:47:f8:6f:40:2d:14:af:4c:01:
0c:99:b6:aa:77:7f:c8:be:ce:79:b6:3f:fe:0a:7f:8c:e7:0f:
2f:24:dd:71:b5:db:02:64:31:9b:58:24:df:86:b1:75:c0:fc:
b2:c9:82:41:cc:50:01:f2:48:a3:a2:e5:cc:e3:c3:4f:2e:59:
f5:f1:27:c2:e8:13:d3:ce:98:23:5e:97:25:4a:7e:f1:90:fd:
1c:91:00:1e:17:31:61:c6:33:45:78:8b:d1:46:f8:42:0d:eb:
e1:30:11:ad:ef:e0:a4:33:29:ea:b4:37:a3:71:a8:97:0f:c6:
a7:98:ed:f0:0b:c3:d0:4a:89:e6:24:8e:6e:1c:db:f0:20:9d:
5b:2a:f4:1e:b5:7e:ad:f5:bd:fd:77:b6:82:b3:f5:a5:67:8b:
ba:f6:fb:92:15:cc:37:f4:51:a6:b1:ba:f1:10:03:d5:0c:e5:
ff:f8:c8:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDD1wQCDLQIAnVRowERz4uAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZDU1NTY5MTc3YTg4OWQzMzdmMDNmMmU2OThhY2FiY2Nj
YmI1ODkwHhcNMjYwOTIxMTIwMDQzWhcNMjYwOTIyMTIwMDQzWjAzMTEwLwYDVQQD
Eyg5NTUwYWM3N2YxNDU1YzlkNWZlY2U3ZWYyM2E1MTUzYzAyYWYwZjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3hJLW9EJt6A/7DUVt07mUNiQN7/
jwZwWlUs25ohHxxUJlTWWDiin8SzzHFCN78HFSMKaRdlo6DYLjdskO3xofofDFv1
P5nHcwKlMqmKIDx5Ns8AcK2Jl+bBnhsj4zU6iRTMMXREmsEJiD5hpgEJGwP8FvAK
ybPy74Y41sTu1vXluB+iWE5Qf78PBzoBhMWJJa6LoRrwCAOubHYcfLyO0mwUK15F
2y1map/80WYvsl0D6rguZHXWn+wjM+7seA0z/In2Z7wBpjl4RsYeZrsIqWpa1TAD
1jm4Ta64MfDUYThnEbPlrTLaVE7mIoBE1hX3oOZUheKCX1XLCfnxxR4qEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVQrHfxRVydX+zn7yOlFTwCrw9mMB8GA1UdIwQY
MBaAFN7VVWkXeoidM38D8uaYrKvMy7WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3RWVmFSZDZpSjB6ZndQeTVwaXNxOHpMdFlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9iNmFjMmMtYmE2Yy00ZTU1LWIxN2Mt
ODRhMWZlOWQ0Yjc4LzEvM3RWVmFSZDZpSjB6ZndQeTVwaXNxOHpMdFlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9iNmFjMmMtYmE2Yy00ZTU1LWIxN2MtODRhMWZlOWQ0Yjc4
LzEvM3RWVmFSZDZpSjB6ZndQeTVwaXNxOHpMdFlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfM4dPqwv
iRJtXChk/LRbwmBme1KYdvD2ojrJ12oMljS+DbzWr6McMUc6jIalL2a/F8beuw0J
Y6P1xKdvGOcnPAjkL1ACw2jlRwgFUsU2U6SxR/hvQC0Ur0wBDJm2qnd/yL7OebY/
/gp/jOcPLyTdcbXbAmQxm1gk34axdcD8ssmCQcxQAfJIo6LlzOPDTy5Z9fEnwugT
086YI16XJUp+8ZD9HJEAHhcxYcYzRXiL0Ub4Qg3r4TARre/gpDMp6rQ3o3Golw/G
p5jt8AvD0EqJ5iSObhzb8CCdWyr0HrV+rfW9/Xe2grP1pWeLuvb7khXMN/RRprG6
8RAD1Qzl//jIYg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 15:58:31 2026 by rpki-client