Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.mft
File: 3bGCpdvRvuhx3lGQAtYBj-4hNnA.mft (raw, json)
Hash identifier: aBrO5dQvhYOEoi76P+gBi8zB1TfpCWUYn5joak20MsU=
Subject key identifier: 06:38:B6:2A:62:B1:58:62:1E:35:48:7D:EC:5F:34:2D:64:DC:3E:44
Authority key identifier: DD:B1:82:A5:DB:D1:BE:E8:71:DE:51:90:02:D6:01:8F:EE:21:36:70
Certificate issuer: /CN=ddb182a5dbd1bee871de519002d6018fee213670
Certificate serial: 01A1024985DC91417D20A69806617F4553C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bGCpdvRvuhx3lGQAtYBj-4hNnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.mft
Manifest number: FF
Signing time: Sat 03 Oct 2026 15:02:15 +0000
Manifest this update: Sat 03 Oct 2026 15:02:15 +0000
Manifest next update: Sun 04 Oct 2026 15:02:15 +0000
Files and hashes: 1: 3bGCpdvRvuhx3lGQAtYBj-4hNnA.crl (hash: GIgej7hTSbD/k4NxiEDri/4YKgOgBoqU14KmjLpD1aM=)
2: 63JgYqrtG6KoZuuOrK4W3du1Duo.roa (hash: bCSh6KZ5NQdZdMyFJ085Wh626DTWHoPFQnxoetlXdVU=)
3: tmXRQcCYhINr2gZL0cRubH_ch2k.roa (hash: j7OzX8w8hg3VPQ17U1GWH4ZU5mHgI9S7cGktHlSkmlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3bGCpdvRvuhx3lGQAtYBj-4hNnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 15:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:49:85:dc:91:41:7d:20:a6:98:06:61:7f:45:53:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb182a5dbd1bee871de519002d6018fee213670
Validity
Not Before: Oct 3 15:02:15 2026 GMT
Not After : Oct 4 15:02:15 2026 GMT
Subject: CN=0638b62a62b158621e35487dec5f342d64dc3e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:64:fa:0c:3c:9f:ad:02:c0:0c:e9:2b:70:a7:
27:68:9e:05:b2:58:a0:23:fd:af:4d:3d:92:10:87:
07:43:c9:db:29:9b:8a:8f:b5:85:b8:b4:b4:ea:cb:
99:18:ad:2f:5f:f7:ff:8c:87:02:b7:1b:32:20:8e:
2b:e2:42:23:3e:7a:cf:f2:8b:0c:da:bf:12:9d:f3:
af:44:67:77:7a:49:f1:64:23:2f:9b:07:3d:78:0b:
a9:ab:2f:8a:77:45:3f:55:d8:3b:19:02:7d:f5:61:
41:76:fb:b9:ac:2d:69:cd:20:d1:9d:15:0c:e7:71:
61:80:34:c8:0d:3c:ee:3f:f4:33:dc:36:55:1f:db:
2c:29:8e:11:0b:2b:09:41:12:29:9c:62:34:28:83:
ee:e7:89:b4:dd:09:5a:45:c8:f9:ba:70:53:2c:4b:
d7:46:df:59:a8:35:98:7c:1c:5a:00:25:cf:e7:d5:
61:76:0a:df:30:0b:97:24:49:1a:4f:3c:27:00:b5:
bd:a3:51:3a:16:1b:dc:88:43:77:e2:24:60:3b:bf:
fa:e1:4e:d2:44:4c:16:67:56:ac:e1:dc:01:65:b7:
a3:d5:20:6a:07:34:81:41:96:78:77:10:16:d7:26:
b8:34:db:0f:7c:03:72:49:84:e8:9b:5b:f4:36:b8:
8e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:38:B6:2A:62:B1:58:62:1E:35:48:7D:EC:5F:34:2D:64:DC:3E:44
X509v3 Authority Key Identifier:
keyid:DD:B1:82:A5:DB:D1:BE:E8:71:DE:51:90:02:D6:01:8F:EE:21:36:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bGCpdvRvuhx3lGQAtYBj-4hNnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:78:55:fd:19:5c:37:97:a0:e3:19:64:90:45:1c:a4:2b:98:
f3:e6:3b:8c:8a:74:06:ba:ef:6b:21:db:92:67:ea:55:74:a0:
06:70:18:22:f3:25:68:a8:ba:86:ef:a6:3d:28:e4:72:97:c5:
30:da:f5:7d:6e:46:8d:33:16:e1:b2:bb:4d:32:db:a4:b7:16:
95:63:cc:52:80:e1:31:4c:38:11:10:9c:9e:e3:6a:93:44:9e:
af:ba:76:d8:9e:5f:fb:c1:01:78:1d:bf:b3:47:b2:e2:6b:e9:
92:ec:6e:03:64:db:80:6c:f1:01:4e:bd:ff:6c:62:a4:04:de:
15:a2:03:68:5e:5d:9f:0c:a6:81:9e:28:e2:3f:59:a8:b5:a2:
67:70:ed:55:82:c2:16:29:16:1e:02:61:bf:23:c0:b9:16:bc:
a7:b5:b5:2a:27:f1:4f:11:41:34:b2:e9:da:d8:cf:48:a3:6a:
34:78:65:bb:3f:1a:4d:00:b3:bb:95:c0:41:61:8b:2a:8d:44:
12:69:71:ad:4f:c0:1e:85:3c:b7:dd:a4:1a:1d:08:02:be:6b:
8e:f9:cd:30:02:24:b1:50:40:83:ee:85:0c:eb:9a:43:f4:12:
dd:6d:d0:2f:71:ac:5d:6c:d5:ec:f5:0b:79:eb:85:57:09:32:
9e:87:fd:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaECSYXckUF9IKaYBmF/RVPJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkYjE4MmE1ZGJkMWJlZTg3MWRlNTE5MDAyZDYwMThmZWUy
MTM2NzAwHhcNMjYxMDAzMTUwMjE1WhcNMjYxMDA0MTUwMjE1WjAzMTEwLwYDVQQD
EygwNjM4YjYyYTYyYjE1ODYyMWUzNTQ4N2RlYzVmMzQyZDY0ZGMzZTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmT6DDyfrQLADOkrcKcnaJ4Fslig
I/2vTT2SEIcHQ8nbKZuKj7WFuLS06suZGK0vX/f/jIcCtxsyII4r4kIjPnrP8osM
2r8SnfOvRGd3eknxZCMvmwc9eAupqy+Kd0U/Vdg7GQJ99WFBdvu5rC1pzSDRnRUM
53FhgDTIDTzuP/Qz3DZVH9ssKY4RCysJQRIpnGI0KIPu54m03QlaRcj5unBTLEvX
Rt9ZqDWYfBxaACXP59VhdgrfMAuXJEkaTzwnALW9o1E6FhvciEN34iRgO7/64U7S
REwWZ1as4dwBZbej1SBqBzSBQZZ4dxAW1ya4NNsPfANySYTom1v0NriOxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAY4tipisVhiHjVIfexfNC1k3D5EMB8GA1UdIwQY
MBaAFN2xgqXb0b7ocd5RkALWAY/uITZwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2JHQ3BkdlJ2dWh4M2xHUUF0WUJqLTRoTm5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS82OTJiMWUtYzlmZS00M2UwLWI3MjIt
NTNhNjA0ODA3NjFkLzEvM2JHQ3BkdlJ2dWh4M2xHUUF0WUJqLTRoTm5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS82OTJiMWUtYzlmZS00M2UwLWI3MjItNTNhNjA0ODA3NjFk
LzEvM2JHQ3BkdlJ2dWh4M2xHUUF0WUJqLTRoTm5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADHhV/Rlc
N5eg4xlkkEUcpCuY8+Y7jIp0BrrvayHbkmfqVXSgBnAYIvMlaKi6hu+mPSjkcpfF
MNr1fW5GjTMW4bK7TTLbpLcWlWPMUoDhMUw4ERCcnuNqk0Ser7p22J5f+8EBeB2/
s0ey4mvpkuxuA2TbgGzxAU69/2xipATeFaIDaF5dnwymgZ4o4j9ZqLWiZ3DtVYLC
FikWHgJhvyPAuRa8p7W1KifxTxFBNLLp2tjPSKNqNHhluz8aTQCzu5XAQWGLKo1E
EmlxrU/AHoU8t92kGh0IAr5rjvnNMAIksVBAg+6FDOuaQ/QS3W3QL3GsXWzV7PUL
eeuFVwkynof97w==
-----END CERTIFICATE-----
Generated at Sat Oct 3 23:07:55 2026 by rpki-client