Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
File: 3OVHLr4StLVw-CcUOHkX7LTE3lM.mft (raw, json)
Hash identifier: 3MYjkNZauDcqkSS4s+RtbVMnzi28CCaV5PTiBqyB1lE=
Subject key identifier: FA:D1:BC:91:39:13:74:CC:EA:BF:22:C7:E0:25:99:6A:2B:9B:6B:E1
Authority key identifier: DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53
Certificate issuer: /CN=dce5472ebe12b4b570f82714387917ecb4c4de53
Certificate serial: 01A102B6D1EE6150BCFBDA010F57467237A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
Manifest number: 15B9
Signing time: Sat 03 Oct 2026 17:01:37 +0000
Manifest this update: Sat 03 Oct 2026 17:01:37 +0000
Manifest next update: Sun 04 Oct 2026 17:01:37 +0000
Files and hashes: 1: 3OVHLr4StLVw-CcUOHkX7LTE3lM.crl (hash: duulLwuKHttzIUvak472mi2vbOHGyeZ8fCxbx1VPR1Q=)
2: S_e75AZV3-MMHLgXTcVLGq4T6uc.roa (hash: AVmxa5KmaRL9M9i0sdO8A9BbJeQGosTTukip4Q42nu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:b6:d1:ee:61:50:bc:fb:da:01:0f:57:46:72:37:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce5472ebe12b4b570f82714387917ecb4c4de53
Validity
Not Before: Oct 3 17:01:37 2026 GMT
Not After : Oct 4 17:01:37 2026 GMT
Subject: CN=fad1bc91391374cceabf22c7e025996a2b9b6be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:68:05:a6:eb:7b:de:03:fd:51:c7:ea:b2:fd:
22:06:1b:a1:3e:ee:5e:73:74:3e:93:67:5e:2d:59:
5d:83:d2:20:f1:a4:82:98:1e:cf:cc:78:95:92:3b:
c6:6c:6c:93:e8:f0:ec:1d:ae:fd:03:27:0c:59:74:
2c:83:d3:1c:f1:b8:f4:11:13:9e:2d:ee:fb:4b:a8:
bd:ca:bb:6c:e1:b1:a5:8a:45:68:85:c1:3b:ca:09:
54:fd:08:e9:99:af:83:e1:c5:87:4a:64:d1:05:47:
0d:bb:89:a1:a2:00:5d:eb:88:3f:41:d3:b8:e1:88:
33:d7:a5:0f:49:66:b3:77:8f:60:f0:78:68:96:3c:
37:e1:3e:e0:be:68:0a:8b:59:0b:1d:1e:2f:67:07:
96:d5:a6:57:75:2b:bc:80:43:5f:c5:61:34:1d:7e:
5b:a3:74:06:68:bf:43:a6:a0:63:b0:5b:d6:c7:62:
3f:a6:e7:46:31:db:95:2f:d6:55:12:b4:1f:d9:06:
6e:ca:cc:34:18:04:e5:b1:67:45:17:f3:6c:7a:67:
8e:1b:be:ee:19:1a:8e:6f:16:59:7f:c8:f4:ae:8c:
f7:c9:a8:10:1c:65:71:05:76:de:e0:3a:95:12:83:
5e:16:8a:9d:d2:76:72:60:ff:7b:4b:05:17:75:97:
3e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D1:BC:91:39:13:74:CC:EA:BF:22:C7:E0:25:99:6A:2B:9B:6B:E1
X509v3 Authority Key Identifier:
keyid:DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:cd:c3:c4:ec:1e:53:20:2d:50:49:45:58:ef:f8:2f:d5:fa:
fe:13:4e:c5:17:ef:fd:f5:4b:40:8c:ca:45:a8:d9:0b:50:7d:
3e:ad:fd:b6:28:db:3a:4a:8b:37:0b:4c:28:37:a3:fa:d7:ed:
d1:18:2c:42:2a:52:4a:cc:57:bd:ee:65:32:aa:5c:54:15:a1:
5b:71:a9:f9:f6:86:c5:27:14:db:f2:a5:3a:32:a2:94:22:41:
18:18:12:fa:20:2d:23:da:2d:e7:b0:25:30:64:a8:6e:85:e1:
32:1c:3a:fc:df:63:9b:ee:ec:f1:60:19:28:7f:2a:64:fa:f2:
9e:10:88:1e:ab:5d:10:e9:d0:37:ae:a6:eb:1b:76:73:2c:21:
20:9b:0b:c7:b1:84:b0:98:4d:c3:d8:cc:7a:bf:3e:7b:1f:d8:
72:b9:78:83:02:96:ac:56:23:5c:3c:2e:27:ac:61:ff:c8:49:
3b:23:d7:6b:46:e4:2b:6e:00:22:d0:ed:45:53:62:bc:41:54:
a2:20:1f:c4:4d:7c:03:c2:12:fd:51:44:3c:f6:44:95:66:57:
34:6d:08:82:fe:ff:fb:8a:3f:80:3b:f7:eb:5c:9f:36:2e:06:
de:25:62:3c:76:7e:e8:6b:5d:4e:6c:41:dc:d5:17:db:a3:17:
a8:56:32:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaECttHuYVC8+9oBD1dGcjenMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZTU0NzJlYmUxMmI0YjU3MGY4MjcxNDM4NzkxN2VjYjRj
NGRlNTMwHhcNMjYxMDAzMTcwMTM3WhcNMjYxMDA0MTcwMTM3WjAzMTEwLwYDVQQD
EyhmYWQxYmM5MTM5MTM3NGNjZWFiZjIyYzdlMDI1OTk2YTJiOWI2YmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mgFput73gP9Ucfqsv0iBhuhPu5e
c3Q+k2deLVldg9Ig8aSCmB7PzHiVkjvGbGyT6PDsHa79AycMWXQsg9Mc8bj0EROe
Le77S6i9yrts4bGlikVohcE7yglU/Qjpma+D4cWHSmTRBUcNu4mhogBd64g/QdO4
4Ygz16UPSWazd49g8Hholjw34T7gvmgKi1kLHR4vZweW1aZXdSu8gENfxWE0HX5b
o3QGaL9DpqBjsFvWx2I/pudGMduVL9ZVErQf2QZuysw0GATlsWdFF/NsemeOG77u
GRqObxZZf8j0roz3yagQHGVxBXbe4DqVEoNeFoqd0nZyYP97SwUXdZc+SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPrRvJE5E3TM6r8ix+AlmWorm2vhMB8GA1UdIwQY
MBaAFNzlRy6+ErS1cPgnFDh5F+y0xN5TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM09WSExyNFN0TFZ3LUNjVU9Ia1g3TFRFM2xNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81YWYxZDYtNTU5Ny00ZGNiLThjMjkt
OWYwNWYxMzVkY2Y5LzEvM09WSExyNFN0TFZ3LUNjVU9Ia1g3TFRFM2xNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81YWYxZDYtNTU5Ny00ZGNiLThjMjktOWYwNWYxMzVkY2Y5
LzEvM09WSExyNFN0TFZ3LUNjVU9Ia1g3TFRFM2xNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWM3DxOwe
UyAtUElFWO/4L9X6/hNOxRfv/fVLQIzKRajZC1B9Pq39tijbOkqLNwtMKDej+tft
0RgsQipSSsxXve5lMqpcVBWhW3Gp+faGxScU2/KlOjKilCJBGBgS+iAtI9ot57Al
MGSoboXhMhw6/N9jm+7s8WAZKH8qZPrynhCIHqtdEOnQN66m6xt2cywhIJsLx7GE
sJhNw9jMer8+ex/Ycrl4gwKWrFYjXDwuJ6xh/8hJOyPXa0bkK24AItDtRVNivEFU
oiAfxE18A8IS/VFEPPZElWZXNG0Igv7/+4o/gDv361yfNi4G3iViPHZ+6GtdTmxB
3NUX26MXqFYynw==
-----END CERTIFICATE-----
Generated at Sat Oct 3 19:36:08 2026 by rpki-client