Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
File: 3ciCMsB94s3Llur551FVC6pmxYg.mft (raw, json)
Hash identifier: kl2YGmPhcybY9hpkUtGQ1okJCX91jYrLraMRRdTjKGE=
Subject key identifier: 8D:ED:8C:6E:4F:3D:25:CE:90:54:BF:5E:59:45:E2:F6:8C:97:4E:F1
Authority key identifier: DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88
Certificate issuer: /CN=ddc88232c07de2cdcb96eaf9e751550baa66c588
Certificate serial: 01A1C21D21750F8182FF2FF54AE83CC450E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
Manifest number: 124B
Signing time: Mon 09 Nov 2026 21:00:51 +0000
Manifest this update: Mon 09 Nov 2026 21:00:51 +0000
Manifest next update: Tue 10 Nov 2026 21:00:51 +0000
Files and hashes: 1: 3ciCMsB94s3Llur551FVC6pmxYg.crl (hash: tyfNVnsFkc6PHf0kzMP7gA/axJuNARlVd+XvsE6Vq8I=)
2: Hfq2hHkukqsFqywTjHsioREmNS4.roa (hash: paBdvdH/DYPPTu1rMzb8b23iJRlSlCeY0XMWLizu13w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 21:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c2:1d:21:75:0f:81:82:ff:2f:f5:4a:e8:3c:c4:50:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddc88232c07de2cdcb96eaf9e751550baa66c588
Validity
Not Before: Nov 9 21:00:51 2026 GMT
Not After : Nov 10 21:00:51 2026 GMT
Subject: CN=8ded8c6e4f3d25ce9054bf5e5945e2f68c974ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:eb:81:fc:71:56:c8:aa:67:17:0d:d5:53:e6:
7a:9c:c0:b3:d3:36:a4:14:31:1e:0f:0f:7a:a6:80:
19:b7:aa:50:da:b6:cb:cd:5c:90:0f:15:5f:1b:50:
21:f4:09:bb:43:44:06:9a:c5:66:46:24:7f:21:f7:
09:59:09:c4:5a:2c:73:ae:cc:ef:cf:d3:0d:1a:de:
2b:a6:f8:c7:57:a2:84:d2:c1:e0:68:e8:b0:a3:57:
4f:0d:4a:52:9a:a3:55:0c:83:8b:4b:ba:1b:cd:f4:
56:8e:6f:a8:84:be:b5:e4:7a:43:36:85:53:32:49:
16:f5:f5:fe:90:2f:a3:e1:7c:71:17:00:4d:7e:ec:
a5:83:36:df:7a:55:ea:31:3b:7a:be:0c:01:af:75:
26:05:ba:34:7f:c8:93:bd:8d:4d:bd:82:57:e9:56:
fa:8f:ca:ea:a0:96:9e:41:72:8b:39:7a:87:ff:e7:
cf:1f:d4:a1:f6:95:2a:3e:11:da:e9:7a:23:e0:89:
c6:b7:7a:ab:a7:39:c1:54:96:22:64:f0:04:a9:2c:
66:5c:43:5d:a8:fe:a5:2d:13:88:a9:91:2b:dd:7e:
6c:c1:f7:56:4c:9a:a6:97:89:ff:35:5b:fb:bc:76:
89:c2:ce:c2:2e:bd:7c:7c:cc:7b:0a:22:e0:c5:31:
ea:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:ED:8C:6E:4F:3D:25:CE:90:54:BF:5E:59:45:E2:F6:8C:97:4E:F1
X509v3 Authority Key Identifier:
keyid:DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:2c:b2:d0:65:9d:bd:ab:c9:ba:8c:d0:50:d5:d5:f7:a7:f1:
14:a1:92:b6:ce:49:5e:a0:b6:6d:15:54:d0:51:bc:bd:27:91:
6d:9d:16:82:db:ff:df:b5:77:ba:ca:26:50:36:61:7f:a8:39:
02:92:bc:fa:0f:43:a8:6d:b1:51:bc:93:a2:42:6a:4e:90:5d:
ea:3b:b6:91:c6:72:67:ad:c4:7e:23:9f:37:c4:58:07:b1:bb:
c8:96:c9:d0:a4:a2:6f:58:7c:83:c5:82:5e:95:af:de:1b:e7:
01:73:64:46:77:73:f3:39:32:a5:78:17:35:75:d0:36:d7:d5:
b9:2a:4e:b1:c7:03:0d:31:40:1f:15:ab:2b:7c:d0:6e:50:64:
16:73:b6:78:fb:b1:2c:d5:ef:b2:89:24:67:25:55:ba:a2:c0:
dd:2d:36:0d:5e:42:39:28:1d:28:93:d7:92:23:e4:bb:99:65:
d2:fb:a2:84:15:fb:59:65:7d:8d:f8:27:cc:04:57:04:4d:e5:
a4:9b:1e:66:a8:67:92:66:c5:db:3f:68:db:b9:fd:3b:fb:86:
82:01:2d:eb:f2:ff:f0:19:02:67:d9:69:86:b0:0d:82:ca:8e:
ac:8c:e8:e7:62:1c:4a:41:be:dd:8b:97:99:5b:8a:6d:41:7a:
eb:17:f9:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHCHSF1D4GC/y/1Sug8xFDiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkYzg4MjMyYzA3ZGUyY2RjYjk2ZWFmOWU3NTE1NTBiYWE2
NmM1ODgwHhcNMjYxMTA5MjEwMDUxWhcNMjYxMTEwMjEwMDUxWjAzMTEwLwYDVQQD
Eyg4ZGVkOGM2ZTRmM2QyNWNlOTA1NGJmNWU1OTQ1ZTJmNjhjOTc0ZWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOuB/HFWyKpnFw3VU+Z6nMCz0zak
FDEeDw96poAZt6pQ2rbLzVyQDxVfG1Ah9Am7Q0QGmsVmRiR/IfcJWQnEWixzrszv
z9MNGt4rpvjHV6KE0sHgaOiwo1dPDUpSmqNVDIOLS7obzfRWjm+ohL615HpDNoVT
MkkW9fX+kC+j4XxxFwBNfuylgzbfelXqMTt6vgwBr3UmBbo0f8iTvY1NvYJX6Vb6
j8rqoJaeQXKLOXqH/+fPH9Sh9pUqPhHa6Xoj4InGt3qrpznBVJYiZPAEqSxmXENd
qP6lLROIqZEr3X5swfdWTJqml4n/NVv7vHaJws7CLr18fMx7CiLgxTHqJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3tjG5PPSXOkFS/XllF4vaMl07xMB8GA1UdIwQY
MBaAFN3IgjLAfeLNy5bq+edRVQuqZsWIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2NpQ01zQjk0czNMbHVyNTUxRlZDNnBteFlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8wYzk2ZDQtYzc2MC00YWE2LTg1ZGIt
NDJjNzliMDNiNGRmLzEvM2NpQ01zQjk0czNMbHVyNTUxRlZDNnBteFlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8wYzk2ZDQtYzc2MC00YWE2LTg1ZGItNDJjNzliMDNiNGRm
LzEvM2NpQ01zQjk0czNMbHVyNTUxRlZDNnBteFlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPCyy0GWd
vavJuozQUNXV96fxFKGSts5JXqC2bRVU0FG8vSeRbZ0Wgtv/37V3usomUDZhf6g5
ApK8+g9DqG2xUbyTokJqTpBd6ju2kcZyZ63EfiOfN8RYB7G7yJbJ0KSib1h8g8WC
XpWv3hvnAXNkRndz8zkypXgXNXXQNtfVuSpOsccDDTFAHxWrK3zQblBkFnO2ePux
LNXvsokkZyVVuqLA3S02DV5COSgdKJPXkiPku5ll0vuihBX7WWV9jfgnzARXBE3l
pJseZqhnkmbF2z9o27n9O/uGggEt6/L/8BkCZ9lphrANgsqOrIzo52IcSkG+3YuX
mVuKbUF66xf5cw==
-----END CERTIFICATE-----
Generated at Tue Nov 10 03:56:49 2026 by rpki-client