Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/3UbviV9ioiHeWcCl4MubNGn-UgE.mft
File: 3UbviV9ioiHeWcCl4MubNGn-UgE.mft (raw, json)
Hash identifier: 8oGESq3zp5r4GdDP/7+ikVvnkr+4IeeWO9x14xz21Ks=
Subject key identifier: D1:B5:E4:D4:17:84:8A:C8:3E:82:5F:AF:41:9E:63:C5:45:DB:05:EA
Authority key identifier: DD:46:EF:89:5F:62:A2:21:DE:59:C0:A5:E0:CB:9B:34:69:FE:52:01
Certificate issuer: /CN=dd46ef895f62a221de59c0a5e0cb9b3469fe5201
Certificate serial: 01A151762645B2DA5EFF26B22DCFFF7D44FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UbviV9ioiHeWcCl4MubNGn-UgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/3UbviV9ioiHeWcCl4MubNGn-UgE.mft
Manifest number: 0128
Signing time: Mon 19 Oct 2026 00:00:59 +0000
Manifest this update: Mon 19 Oct 2026 00:00:59 +0000
Manifest next update: Tue 20 Oct 2026 00:00:59 +0000
Files and hashes: 1: 3UbviV9ioiHeWcCl4MubNGn-UgE.crl (hash: aCgKtDhiIrX06ZExO30rxa8gBwlNxt2cdOegN4k8X6U=)
2: Sdcf2dHZqQivboyuko2C7HiYjjk.roa (hash: TB/q3GnkSetf9euk52uPTmgDhdeYTD4KIv37dJknSdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/3UbviV9ioiHeWcCl4MubNGn-UgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/3UbviV9ioiHeWcCl4MubNGn-UgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UbviV9ioiHeWcCl4MubNGn-UgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 19:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:76:26:45:b2:da:5e:ff:26:b2:2d:cf:ff:7d:44:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd46ef895f62a221de59c0a5e0cb9b3469fe5201
Validity
Not Before: Oct 19 00:00:59 2026 GMT
Not After : Oct 20 00:00:59 2026 GMT
Subject: CN=d1b5e4d417848ac83e825faf419e63c545db05ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a8:6a:63:f5:94:18:79:2e:bd:64:f9:79:9d:
00:1e:a7:6b:ce:1a:e1:1a:3c:5a:c4:eb:ce:33:e7:
7e:b6:a6:89:4d:29:e6:85:7b:dc:1d:b5:77:d1:21:
00:71:96:52:dc:1f:69:48:cb:88:4e:7e:af:c7:aa:
12:f9:50:4c:6d:c3:b9:30:c9:f1:7e:28:26:4e:4b:
c8:4b:51:69:3f:c5:f6:fc:3a:84:22:b4:97:1b:81:
a1:db:83:a1:36:50:87:c8:9b:47:0d:41:42:e5:33:
8a:a2:5a:77:3c:eb:28:85:e5:f5:e0:ae:c0:d1:ff:
9d:49:93:a2:c9:6e:14:e4:28:63:4e:17:57:bb:3e:
9d:2b:8e:55:7b:b3:7c:da:52:cc:8b:4b:4d:fb:60:
c4:c9:f6:6c:9e:4a:1e:6a:4e:d1:cb:1d:ac:53:a8:
44:99:ab:65:ad:85:c8:69:39:b5:67:e4:48:14:94:
07:51:4a:ff:2d:11:54:b4:8a:c8:f9:42:d8:79:8f:
75:86:e0:2d:08:e7:98:b8:f2:48:b9:3d:39:3e:2e:
9d:57:05:02:d8:cc:c1:20:9f:cf:7c:d4:63:06:cb:
67:41:69:38:f9:83:de:13:88:9a:ca:e7:1c:a6:0e:
60:0e:c4:27:45:d1:2e:57:b7:6c:e5:89:8d:fa:12:
7f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B5:E4:D4:17:84:8A:C8:3E:82:5F:AF:41:9E:63:C5:45:DB:05:EA
X509v3 Authority Key Identifier:
keyid:DD:46:EF:89:5F:62:A2:21:DE:59:C0:A5:E0:CB:9B:34:69:FE:52:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UbviV9ioiHeWcCl4MubNGn-UgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/3UbviV9ioiHeWcCl4MubNGn-UgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/323add-1d87-416a-bd05-1e9848cb1745/1/3UbviV9ioiHeWcCl4MubNGn-UgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:fe:d8:66:cc:73:5e:df:26:a9:70:09:7f:70:f6:8e:ca:86:
db:67:a7:7f:bc:49:bc:66:fe:e0:f8:cc:db:40:ff:ee:6d:86:
fc:01:c9:4a:0d:9f:b0:e6:af:e7:c5:7c:d4:88:32:28:7c:51:
99:87:1a:d6:1a:78:93:9b:7e:ef:88:36:38:9b:8a:73:f4:0b:
af:69:b0:33:80:43:18:11:5a:70:8e:c8:82:93:69:56:47:36:
5d:13:ba:b8:99:e0:b2:3c:c7:76:ff:69:24:c1:f9:7b:5c:47:
bb:90:a5:74:ff:43:69:d2:c3:41:55:83:5c:bc:61:ee:0f:34:
a9:71:b4:28:c2:a3:36:ef:fd:84:92:4c:cb:50:20:b7:f3:a2:
d6:c5:e7:c8:aa:9e:65:f6:16:4e:11:fb:df:2c:65:c9:51:35:
4a:30:81:8f:bd:61:9a:db:ed:aa:4d:27:63:97:0c:e7:e4:b7:
50:9d:91:6c:95:21:98:78:51:d0:a6:7b:bd:31:c8:75:e2:3b:
f3:1f:7f:15:ed:c9:48:fb:04:42:32:55:18:fa:ed:81:d9:3c:
a3:2d:32:b9:ca:c2:0d:8c:0d:4f:a4:cb:56:c7:8b:e1:4b:42:
87:1f:95:88:79:b0:2c:b5:d1:a1:3b:e5:3a:71:7e:1c:51:47:
69:d3:19:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFRdiZFstpe/yayLc//fUT8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNDZlZjg5NWY2MmEyMjFkZTU5YzBhNWUwY2I5YjM0Njlm
ZTUyMDEwHhcNMjYxMDE5MDAwMDU5WhcNMjYxMDIwMDAwMDU5WjAzMTEwLwYDVQQD
EyhkMWI1ZTRkNDE3ODQ4YWM4M2U4MjVmYWY0MTllNjNjNTQ1ZGIwNWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqhqY/WUGHkuvWT5eZ0AHqdrzhrh
GjxaxOvOM+d+tqaJTSnmhXvcHbV30SEAcZZS3B9pSMuITn6vx6oS+VBMbcO5MMnx
figmTkvIS1FpP8X2/DqEIrSXG4Gh24OhNlCHyJtHDUFC5TOKolp3POsoheX14K7A
0f+dSZOiyW4U5ChjThdXuz6dK45Ve7N82lLMi0tN+2DEyfZsnkoeak7Ryx2sU6hE
matlrYXIaTm1Z+RIFJQHUUr/LRFUtIrI+ULYeY91huAtCOeYuPJIuT05Pi6dVwUC
2MzBIJ/PfNRjBstnQWk4+YPeE4iayuccpg5gDsQnRdEuV7ds5YmN+hJ/1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNG15NQXhIrIPoJfr0GeY8VF2wXqMB8GA1UdIwQY
MBaAFN1G74lfYqIh3lnApeDLmzRp/lIBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1VidmlWOWlvaUhlV2NDbDRNdWJOR24tVWdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8zMjNhZGQtMWQ4Ny00MTZhLWJkMDUt
MWU5ODQ4Y2IxNzQ1LzEvM1VidmlWOWlvaUhlV2NDbDRNdWJOR24tVWdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8zMjNhZGQtMWQ4Ny00MTZhLWJkMDUtMWU5ODQ4Y2IxNzQ1
LzEvM1VidmlWOWlvaUhlV2NDbDRNdWJOR24tVWdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASv7YZsxz
Xt8mqXAJf3D2jsqG22enf7xJvGb+4PjM20D/7m2G/AHJSg2fsOav58V81IgyKHxR
mYca1hp4k5t+74g2OJuKc/QLr2mwM4BDGBFacI7IgpNpVkc2XRO6uJngsjzHdv9p
JMH5e1xHu5CldP9DadLDQVWDXLxh7g80qXG0KMKjNu/9hJJMy1Agt/Oi1sXnyKqe
ZfYWThH73yxlyVE1SjCBj71hmtvtqk0nY5cM5+S3UJ2RbJUhmHhR0KZ7vTHIdeI7
8x9/Fe3JSPsEQjJVGPrtgdk8oy0yucrCDYwNT6TLVseL4UtChx+ViHmwLLXRoTvl
OnF+HFFHadMZcA==
-----END CERTIFICATE-----
Generated at Mon Oct 19 07:06:53 2026 by rpki-client