Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
File: 3KRrH82StH9PVfrQOMlYE0Cp03A.mft (raw, json)
Hash identifier: zZMwTjAlAx2dlY2NVfIB38sUkioCeC4nBufSwdco2Nk=
Subject key identifier: AC:1B:1E:AB:61:87:A4:78:83:18:A8:C6:E5:0D:6B:3A:C8:91:17:9A
Authority key identifier: DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
Certificate issuer: /CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Certificate serial: 01A0C33207F23B671654458E61CEB71E8915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
Manifest number: 1A73
Signing time: Mon 21 Sep 2026 09:00:30 +0000
Manifest this update: Mon 21 Sep 2026 09:00:30 +0000
Manifest next update: Tue 22 Sep 2026 09:00:30 +0000
Files and hashes: 1: 3KRrH82StH9PVfrQOMlYE0Cp03A.crl (hash: RE2MOe4J9CdFqSbWyS7cUmDSGx8s57FdSPyvpsGogMY=)
2: VfPqQIUYDVEcRMuY0y_1WkG7tNM.roa (hash: jXhdAhn6nzRP7djqjR0wEfaKlgEOeT24wYK6k5lvQMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:32:07:f2:3b:67:16:54:45:8e:61:ce:b7:1e:89:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Validity
Not Before: Sep 21 09:00:30 2026 GMT
Not After : Sep 22 09:00:30 2026 GMT
Subject: CN=ac1b1eab6187a4788318a8c6e50d6b3ac891179a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:73:3c:f4:f1:0d:eb:1d:c6:9c:c3:24:d2:88:
01:94:8a:b8:43:f6:f7:00:36:95:33:bc:9a:cf:55:
e7:44:04:83:38:99:36:89:9a:16:31:4a:db:00:d9:
59:74:7d:7d:3e:21:ee:d9:eb:51:bc:a1:d3:06:05:
1e:5c:27:0c:88:a6:76:02:0f:ad:28:04:c9:5f:b8:
e4:cb:13:1d:ca:fd:99:56:83:3b:00:53:88:6c:31:
57:6e:bc:db:74:a2:3b:15:fd:26:d6:90:de:59:e4:
3a:42:ae:00:73:4a:71:d3:e8:4d:ca:54:9f:55:75:
39:2c:bd:1e:f1:09:6a:28:a2:2c:4d:0c:c3:18:a5:
22:97:8c:85:a7:d2:81:ea:fa:b8:ff:5b:25:75:9c:
63:43:9f:f3:02:9a:af:0f:da:29:c6:8f:e4:c9:4e:
cd:ce:b5:a5:de:32:3f:e2:a7:78:ae:90:27:f6:c2:
18:d2:88:44:ec:e2:48:d7:54:a2:80:45:c5:d8:86:
37:06:c2:50:ee:b2:1f:3a:55:ac:61:4c:94:f8:c4:
0e:cc:45:2e:6f:31:a2:78:63:8d:f5:39:3b:4c:b6:
90:4f:45:35:54:48:00:6c:32:28:bc:43:65:56:4d:
6a:1f:46:24:8e:b3:4e:62:2a:ed:3c:15:2b:a5:f0:
c8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1B:1E:AB:61:87:A4:78:83:18:A8:C6:E5:0D:6B:3A:C8:91:17:9A
X509v3 Authority Key Identifier:
keyid:DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:51:58:81:4c:28:a3:c2:7f:ea:60:ac:c0:23:fb:a0:49:c4:
9d:9d:94:4a:1f:b5:cd:b6:df:1f:e4:96:e4:24:54:98:d2:bc:
af:7b:0b:ec:a8:d6:f5:05:37:22:58:6c:b7:73:14:87:88:c0:
04:6d:b7:c1:e6:cc:7a:a3:f5:ad:0c:5f:6f:b4:53:af:97:75:
4a:f8:e2:bc:60:93:bf:39:76:e0:cf:26:ba:63:0a:58:89:cd:
a0:85:db:84:b3:99:06:4f:55:42:d8:46:06:d0:e0:20:e2:e1:
71:3a:ec:e0:0d:5c:bb:bf:1d:b3:2e:d5:82:07:47:1e:6b:b3:
ed:aa:d1:60:c1:58:04:a2:bf:e1:e9:d1:1d:30:4c:9f:e3:51:
61:cb:a3:5f:d8:0c:3b:49:69:83:64:5c:4c:a0:de:1c:8b:17:
cb:46:d1:2d:38:72:ea:19:a2:60:3b:59:f5:9d:b1:46:22:eb:
a3:a2:cd:9e:c9:5d:61:ea:18:2a:5d:73:32:c3:0a:20:bc:c2:
4d:4c:32:26:61:3b:0b:47:22:77:bd:65:be:1e:31:f9:e1:5c:
65:98:a1:0a:00:80:5f:f0:eb:8e:b2:6a:e1:1a:af:a7:d2:70:
80:2b:d3:98:18:6f:7b:71:ad:3a:3e:9e:29:fd:a1:cd:6c:1d:
ed:b0:58:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDMgfyO2cWVEWOYc63HokVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYTQ2YjFmY2Q5MmI0N2Y0ZjU1ZmFkMDM4Yzk1ODEzNDBh
OWQzNzAwHhcNMjYwOTIxMDkwMDMwWhcNMjYwOTIyMDkwMDMwWjAzMTEwLwYDVQQD
EyhhYzFiMWVhYjYxODdhNDc4ODMxOGE4YzZlNTBkNmIzYWM4OTExNzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHM89PEN6x3GnMMk0ogBlIq4Q/b3
ADaVM7yaz1XnRASDOJk2iZoWMUrbANlZdH19PiHu2etRvKHTBgUeXCcMiKZ2Ag+t
KATJX7jkyxMdyv2ZVoM7AFOIbDFXbrzbdKI7Ff0m1pDeWeQ6Qq4Ac0px0+hNylSf
VXU5LL0e8QlqKKIsTQzDGKUil4yFp9KB6vq4/1sldZxjQ5/zApqvD9opxo/kyU7N
zrWl3jI/4qd4rpAn9sIY0ohE7OJI11SigEXF2IY3BsJQ7rIfOlWsYUyU+MQOzEUu
bzGieGON9Tk7TLaQT0U1VEgAbDIovENlVk1qH0YkjrNOYirtPBUrpfDI7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKwbHqthh6R4gxioxuUNazrIkReaMB8GA1UdIwQY
MBaAFNykax/NkrR/T1X60DjJWBNAqdNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0tSckg4MlN0SDlQVmZyUU9NbFlFMENwMDNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS85MGFiOGUtZTU3My00MWM0LWExYmIt
YzZkMmI4ZDFmNTY2LzEvM0tSckg4MlN0SDlQVmZyUU9NbFlFMENwMDNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS85MGFiOGUtZTU3My00MWM0LWExYmItYzZkMmI4ZDFmNTY2
LzEvM0tSckg4MlN0SDlQVmZyUU9NbFlFMENwMDNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAelFYgUwo
o8J/6mCswCP7oEnEnZ2USh+1zbbfH+SW5CRUmNK8r3sL7KjW9QU3Ilhst3MUh4jA
BG23webMeqP1rQxfb7RTr5d1SvjivGCTvzl24M8mumMKWInNoIXbhLOZBk9VQthG
BtDgIOLhcTrs4A1cu78dsy7VggdHHmuz7arRYMFYBKK/4enRHTBMn+NRYcujX9gM
O0lpg2RcTKDeHIsXy0bRLThy6hmiYDtZ9Z2xRiLro6LNnsldYeoYKl1zMsMKILzC
TUwyJmE7C0cid71lvh4x+eFcZZihCgCAX/DrjrJq4Rqvp9JwgCvTmBhve3GtOj6e
Kf2hzWwd7bBYkA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 15:43:00 2026 by rpki-client