Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft
File: 3dBY7vGdEboOq68EbnKibl5XJkM.mft (raw, json)
Hash identifier: g8sQreCn8AhPtEaVO8C6pIY9Je1vfhSZQfA3abxbhQc=
Subject key identifier: C2:0A:06:FE:31:34:68:AA:AA:B6:23:F1:AA:E4:B7:52:79:4C:23:A3
Authority key identifier: DD:D0:58:EE:F1:9D:11:BA:0E:AB:AF:04:6E:72:A2:6E:5E:57:26:43
Certificate issuer: /CN=ddd058eef19d11ba0eabaf046e72a26e5e572643
Certificate serial: 01A0E8C11BF14ADB751EEDB3212DFD7C6565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dBY7vGdEboOq68EbnKibl5XJkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft
Manifest number: 0290
Signing time: Mon 28 Sep 2026 16:02:44 +0000
Manifest this update: Mon 28 Sep 2026 16:02:44 +0000
Manifest next update: Tue 29 Sep 2026 16:02:44 +0000
Files and hashes: 1: 3dBY7vGdEboOq68EbnKibl5XJkM.crl (hash: VLVY+geJ3zrDy7YcThT0KTxbJbvF6BlqSPtOt3sb+7w=)
2: 6w_LmvhXnOF2ik3DDNvsrEWVCI8.roa (hash: 6W4Vav7RSMNSHDF7FWCiUK0cI2saEqhD9eRkDI4fbG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dBY7vGdEboOq68EbnKibl5XJkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:c1:1b:f1:4a:db:75:1e:ed:b3:21:2d:fd:7c:65:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd058eef19d11ba0eabaf046e72a26e5e572643
Validity
Not Before: Sep 28 16:02:44 2026 GMT
Not After : Sep 29 16:02:44 2026 GMT
Subject: CN=c20a06fe313468aaaab623f1aae4b752794c23a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a8:d2:72:1f:a3:c9:81:24:c2:05:29:d1:8a:
08:59:35:cc:9d:b1:88:0b:91:21:26:1e:60:1a:39:
3a:26:c3:bf:f3:2c:cc:cf:e0:b1:c2:7b:2c:df:0a:
fb:c2:28:a9:3d:58:43:05:ea:6c:a9:00:8a:df:02:
74:10:8c:b7:78:98:a3:68:dc:ce:20:87:20:6a:6f:
69:55:73:8c:94:0c:4f:69:7d:dd:ed:07:c3:4d:22:
2a:a3:14:63:f3:a4:29:61:48:5d:3b:c1:36:68:ee:
03:b2:37:b3:86:96:03:7e:35:01:f8:bf:91:2e:77:
6a:df:9b:b9:a6:3c:0e:01:c1:b3:4f:7b:df:77:d1:
26:ff:aa:ca:48:fb:1a:e9:c9:e7:2a:da:a2:bc:f7:
93:5e:a9:aa:a6:d6:c8:28:50:3b:11:11:0d:85:fb:
6a:76:80:c0:16:fa:72:5b:34:94:35:59:b1:7f:a4:
58:6b:b7:03:81:b2:4e:f1:7e:28:12:2b:09:16:63:
b5:53:8f:6f:06:c9:f1:c0:0a:81:fe:1b:48:cc:e4:
d6:51:2a:3f:df:be:55:2f:b9:67:b5:7b:81:5b:cb:
aa:08:f6:f7:54:29:e9:da:43:45:a9:fc:63:3e:d9:
f2:bf:1d:30:c6:f8:5d:51:f8:6b:78:23:e9:49:a3:
9e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0A:06:FE:31:34:68:AA:AA:B6:23:F1:AA:E4:B7:52:79:4C:23:A3
X509v3 Authority Key Identifier:
keyid:DD:D0:58:EE:F1:9D:11:BA:0E:AB:AF:04:6E:72:A2:6E:5E:57:26:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dBY7vGdEboOq68EbnKibl5XJkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e4834f-e5d0-4b64-92ce-f5499336c2b4/1/3dBY7vGdEboOq68EbnKibl5XJkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:43:81:b6:c1:c5:01:f0:78:96:23:3e:86:ce:6f:e8:a6:fb:
fc:a7:c7:78:e2:b6:ff:d9:9d:4f:07:74:81:a9:76:55:7a:2b:
bb:71:75:2c:35:83:ff:08:7f:43:df:2c:dd:ce:b9:10:9d:16:
8b:11:cf:c2:ab:d5:32:c0:1f:26:26:19:09:27:f1:e0:5e:5c:
6f:c1:b9:8c:21:c0:67:f9:35:29:4f:47:9b:38:e9:83:2f:ea:
f5:8c:65:d6:dc:52:30:21:f4:18:8d:36:c8:df:b0:94:e8:2a:
b3:27:1a:4e:a3:7a:e0:ff:1f:83:f3:6d:8a:be:d1:36:2f:8f:
7c:1e:b6:43:d2:8b:22:77:a8:78:90:a9:00:89:69:20:c0:8f:
20:97:38:bd:40:e7:e5:fe:25:20:43:5b:d6:25:9a:e4:40:d1:
14:4e:7a:d6:c1:aa:3c:10:e6:3b:1d:22:0e:28:6c:14:d1:01:
aa:4d:02:3a:8e:0a:f4:bd:aa:34:9c:7a:ee:02:5f:02:fc:79:
8c:c7:f5:a7:5f:4f:7c:ba:db:4e:d2:87:6e:df:1d:b6:81:fb:
2c:12:ba:70:a7:32:86:cf:21:2c:48:24:fb:84:74:28:33:fa:
2a:a9:18:92:a5:9c:30:23:dd:03:be:a7:b2:4a:20:e3:b6:28:
12:ea:47:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDowRvxStt1Hu2zIS39fGVlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZDA1OGVlZjE5ZDExYmEwZWFiYWYwNDZlNzJhMjZlNWU1
NzI2NDMwHhcNMjYwOTI4MTYwMjQ0WhcNMjYwOTI5MTYwMjQ0WjAzMTEwLwYDVQQD
EyhjMjBhMDZmZTMxMzQ2OGFhYWFiNjIzZjFhYWU0Yjc1Mjc5NGMyM2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqjSch+jyYEkwgUp0YoIWTXMnbGI
C5EhJh5gGjk6JsO/8yzMz+Cxwnss3wr7wiipPVhDBepsqQCK3wJ0EIy3eJijaNzO
IIcgam9pVXOMlAxPaX3d7QfDTSIqoxRj86QpYUhdO8E2aO4DsjezhpYDfjUB+L+R
Lndq35u5pjwOAcGzT3vfd9Em/6rKSPsa6cnnKtqivPeTXqmqptbIKFA7ERENhftq
doDAFvpyWzSUNVmxf6RYa7cDgbJO8X4oEisJFmO1U49vBsnxwAqB/htIzOTWUSo/
375VL7lntXuBW8uqCPb3VCnp2kNFqfxjPtnyvx0wxvhdUfhreCPpSaOeDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIKBv4xNGiqqrYj8arkt1J5TCOjMB8GA1UdIwQY
MBaAFN3QWO7xnRG6DquvBG5yom5eVyZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2RCWTd2R2RFYm9PcTY4RWJuS2libDVYSmtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9lNDgzNGYtZTVkMC00YjY0LTkyY2Ut
ZjU0OTkzMzZjMmI0LzEvM2RCWTd2R2RFYm9PcTY4RWJuS2libDVYSmtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9lNDgzNGYtZTVkMC00YjY0LTkyY2UtZjU0OTkzMzZjMmI0
LzEvM2RCWTd2R2RFYm9PcTY4RWJuS2libDVYSmtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATEOBtsHF
AfB4liM+hs5v6Kb7/KfHeOK2/9mdTwd0gal2VXoru3F1LDWD/wh/Q98s3c65EJ0W
ixHPwqvVMsAfJiYZCSfx4F5cb8G5jCHAZ/k1KU9Hmzjpgy/q9Yxl1txSMCH0GI02
yN+wlOgqsycaTqN64P8fg/Ntir7RNi+PfB62Q9KLIneoeJCpAIlpIMCPIJc4vUDn
5f4lIENb1iWa5EDRFE561sGqPBDmOx0iDihsFNEBqk0COo4K9L2qNJx67gJfAvx5
jMf1p19PfLrbTtKHbt8dtoH7LBK6cKcyhs8hLEgk+4R0KDP6KqkYkqWcMCPdA76n
skog47YoEupHig==
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:13:13 2026 by rpki-client