Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/3cHKqpDJHGKtslTJSjfVxfecXxw.mft
File: 3cHKqpDJHGKtslTJSjfVxfecXxw.mft (raw, json)
Hash identifier: h2utqHzqFG7EtveVNodumGwvA6qZfxFpAIps95ZIJD4=
Subject key identifier: 59:01:91:32:56:AD:CE:EC:FC:E1:B7:79:8B:BB:77:B0:51:8E:3A:DA
Authority key identifier: DD:C1:CA:AA:90:C9:1C:62:AD:B2:54:C9:4A:37:D5:C5:F7:9C:5F:1C
Certificate issuer: /CN=ddc1caaa90c91c62adb254c94a37d5c5f79c5f1c
Certificate serial: 01A12EB2FEE699C6C2F2BBED5B29A85BBF67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3cHKqpDJHGKtslTJSjfVxfecXxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/3cHKqpDJHGKtslTJSjfVxfecXxw.mft
Manifest number: 0116
Signing time: Mon 12 Oct 2026 06:00:44 +0000
Manifest this update: Mon 12 Oct 2026 06:00:44 +0000
Manifest next update: Tue 13 Oct 2026 06:00:44 +0000
Files and hashes: 1: 3cHKqpDJHGKtslTJSjfVxfecXxw.crl (hash: Ojkn0+sg3hcFumSj/uZ9G4/O8BHBaf6zMrFKx6RoHcM=)
2: YN9Cw4qcHXYpLVHYm4VWqw0i0Is.roa (hash: hKz3CdgByzclOsSKFERuifJCiSNf9f2KayzZQ7/xtmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/3cHKqpDJHGKtslTJSjfVxfecXxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/3cHKqpDJHGKtslTJSjfVxfecXxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3cHKqpDJHGKtslTJSjfVxfecXxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:b2:fe:e6:99:c6:c2:f2:bb:ed:5b:29:a8:5b:bf:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc1caaa90c91c62adb254c94a37d5c5f79c5f1c
Validity
Not Before: Oct 12 06:00:44 2026 GMT
Not After : Oct 13 06:00:44 2026 GMT
Subject: CN=5901913256adceecfce1b7798bbb77b0518e3ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ae:7b:ac:92:d7:63:92:a4:42:c2:d3:ef:ff:
48:62:9f:f9:15:56:b8:68:1b:b3:d9:4e:97:b5:78:
0b:be:5d:87:88:3d:70:eb:ce:65:64:15:0c:97:13:
f6:77:8c:44:4e:c5:69:86:bd:b8:7a:b7:1e:3a:53:
44:d6:b8:39:d3:31:72:47:17:3b:b4:e1:f3:d3:e8:
84:ee:eb:52:c3:dd:8d:9f:c4:27:f0:84:4f:6b:f7:
4b:6b:89:7c:28:ec:57:5a:3d:67:d9:69:63:3f:43:
0f:14:5c:26:fe:a6:31:0d:14:0a:16:1e:66:68:47:
1a:bf:2a:ad:d8:a3:98:89:82:1c:1e:f7:c9:f6:4a:
55:41:ad:89:4b:09:d9:09:28:b5:cb:df:8f:b2:ef:
17:a9:c6:1b:4b:96:78:0f:ff:6d:90:15:af:e1:da:
d6:8e:03:63:7f:17:8d:a4:a5:e2:e1:fa:cf:d4:4b:
5e:05:91:a6:f8:e4:a0:0b:b5:24:1b:22:8e:e7:fe:
b0:f0:58:bb:db:b6:a9:16:7e:b4:36:d4:cc:90:70:
91:ca:00:ae:c5:51:0b:c0:a3:53:94:1f:21:ab:96:
95:5d:6e:0b:29:81:c6:57:2d:69:c9:46:72:5d:d6:
b4:ee:fc:07:93:68:71:85:4b:45:0e:6f:2c:c3:3f:
2f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:01:91:32:56:AD:CE:EC:FC:E1:B7:79:8B:BB:77:B0:51:8E:3A:DA
X509v3 Authority Key Identifier:
keyid:DD:C1:CA:AA:90:C9:1C:62:AD:B2:54:C9:4A:37:D5:C5:F7:9C:5F:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cHKqpDJHGKtslTJSjfVxfecXxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/3cHKqpDJHGKtslTJSjfVxfecXxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/3cHKqpDJHGKtslTJSjfVxfecXxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:6e:e6:26:b9:eb:db:02:28:9b:29:05:b8:bd:67:68:db:95:
ca:af:37:09:85:cf:31:4a:14:19:f7:bd:1c:d7:4d:ea:d6:7e:
6c:c9:40:f8:85:2d:fd:96:c1:62:f6:32:dc:31:df:87:b1:ae:
b6:82:a2:d8:96:04:86:d6:97:9d:d0:bd:1f:a1:00:bd:e6:2b:
e3:82:2f:67:30:c1:33:ab:34:c9:b9:6d:aa:88:97:4a:62:ff:
9c:5d:2f:cd:f3:60:63:43:0a:ab:17:ea:22:50:11:d7:54:a0:
a2:d4:b0:7c:28:19:bd:a3:d7:95:86:c9:21:23:b6:a5:8d:11:
92:de:56:cc:d6:c9:67:3a:4c:c8:3f:92:f0:aa:2c:83:24:97:
a9:ce:f2:49:a9:84:14:d5:f1:07:39:f4:ad:08:7c:5a:e3:0a:
24:2b:a6:41:3c:9a:f3:56:4f:e0:07:9c:0d:d0:98:98:71:bb:
2f:0e:2a:3d:3b:86:e3:af:dd:ab:fd:11:87:c4:70:59:21:d7:
10:d2:c8:68:50:db:24:0d:19:86:ba:1d:f2:d5:11:e3:18:c9:
ac:ca:4d:ab:b6:f3:4f:0c:8b:45:82:b9:a5:cc:2e:a3:41:11:
6a:50:90:20:86:23:44:79:58:c1:71:ef:6c:cc:fe:9b:fb:1d:
1c:71:ad:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEusv7mmcbC8rvtWymoW79nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkYzFjYWFhOTBjOTFjNjJhZGIyNTRjOTRhMzdkNWM1Zjc5
YzVmMWMwHhcNMjYxMDEyMDYwMDQ0WhcNMjYxMDEzMDYwMDQ0WjAzMTEwLwYDVQQD
Eyg1OTAxOTEzMjU2YWRjZWVjZmNlMWI3Nzk4YmJiNzdiMDUxOGUzYWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqK57rJLXY5KkQsLT7/9IYp/5FVa4
aBuz2U6XtXgLvl2HiD1w685lZBUMlxP2d4xETsVphr24erceOlNE1rg50zFyRxc7
tOHz0+iE7utSw92Nn8Qn8IRPa/dLa4l8KOxXWj1n2WljP0MPFFwm/qYxDRQKFh5m
aEcavyqt2KOYiYIcHvfJ9kpVQa2JSwnZCSi1y9+Psu8XqcYbS5Z4D/9tkBWv4drW
jgNjfxeNpKXi4frP1EteBZGm+OSgC7UkGyKO5/6w8Fi727apFn60NtTMkHCRygCu
xVELwKNTlB8hq5aVXW4LKYHGVy1pyUZyXda07vwHk2hxhUtFDm8swz8vrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkBkTJWrc7s/OG3eYu7d7BRjjraMB8GA1UdIwQY
MBaAFN3ByqqQyRxirbJUyUo31cX3nF8cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2NIS3FwREpIR0t0c2xUSlNqZlZ4ZmVjWHh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9hYTAzN2MtMzJjZS00NDA2LWIwYmMt
ODk5NDlmY2M3YWZiLzEvM2NIS3FwREpIR0t0c2xUSlNqZlZ4ZmVjWHh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9hYTAzN2MtMzJjZS00NDA2LWIwYmMtODk5NDlmY2M3YWZi
LzEvM2NIS3FwREpIR0t0c2xUSlNqZlZ4ZmVjWHh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa27mJrnr
2wIomykFuL1naNuVyq83CYXPMUoUGfe9HNdN6tZ+bMlA+IUt/ZbBYvYy3DHfh7Gu
toKi2JYEhtaXndC9H6EAveYr44IvZzDBM6s0ybltqoiXSmL/nF0vzfNgY0MKqxfq
IlAR11SgotSwfCgZvaPXlYbJISO2pY0Rkt5WzNbJZzpMyD+S8KosgySXqc7ySamE
FNXxBzn0rQh8WuMKJCumQTya81ZP4AecDdCYmHG7Lw4qPTuG46/dq/0Rh8RwWSHX
ENLIaFDbJA0Zhrod8tUR4xjJrMpNq7bzTwyLRYK5pcwuo0ERalCQIIYjRHlYwXHv
bMz+m/sdHHGtIw==
-----END CERTIFICATE-----
Generated at Mon Oct 12 12:36:23 2026 by rpki-client