Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
File: 3H2O2YRD3mxojRdPHwBVvk3hgqE.mft (raw, json)
Hash identifier: vbzSYxwi7K1wUOE4y4+J6dvahjxMTSnVfvDxkYunhJk=
Subject key identifier: 30:F4:74:78:ED:46:AE:9C:12:F2:56:A2:86:BA:A4:89:8D:D6:4D:1E
Authority key identifier: DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1
Certificate issuer: /CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
Certificate serial: 01A1BF8ADB79BADAA3E5FD07FD14186B305A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
Manifest number: 169B
Signing time: Mon 09 Nov 2026 09:01:50 +0000
Manifest this update: Mon 09 Nov 2026 09:01:50 +0000
Manifest next update: Tue 10 Nov 2026 09:01:50 +0000
Files and hashes: 1: 3H2O2YRD3mxojRdPHwBVvk3hgqE.crl (hash: Kz/tFE+12I51wlD+y00nHN2IMSKP3wJXY2oTyyzeeXw=)
2: VcgWyeq648Gc4ahE2H4P_5An-Vk.roa (hash: lpEbA2Oc/IvvrSvQYZYfTGRO3+SQWqSCIH6JyIv+3/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 09:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bf:8a:db:79:ba:da:a3:e5:fd:07:fd:14:18:6b:30:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7d8ed98443de6c688d174f1f0055be4de182a1
Validity
Not Before: Nov 9 09:01:50 2026 GMT
Not After : Nov 10 09:01:50 2026 GMT
Subject: CN=30f47478ed46ae9c12f256a286baa4898dd64d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e5:79:bb:b8:9b:f3:12:2c:2e:09:48:47:ed:
62:2f:19:ea:48:4e:0b:46:79:31:f4:8a:ed:95:e6:
07:a9:6d:a8:ea:10:30:2b:49:95:15:6f:df:67:15:
01:74:ea:03:38:65:7c:fc:a1:2f:be:be:3c:39:fa:
9d:8c:f6:46:df:5a:4c:83:e3:93:94:0c:84:44:f3:
41:8d:e2:6f:59:0e:c3:1f:93:a3:5d:ed:94:e9:d7:
99:92:b4:f0:cb:36:de:61:e2:b9:73:db:37:ac:49:
27:0e:f2:5a:a8:18:6f:89:37:33:5a:ed:16:71:fd:
9a:d9:e7:69:53:2e:cc:bd:c6:33:20:d5:be:d2:4e:
6a:a0:5c:75:96:02:b7:8e:02:1c:7b:3f:f7:03:91:
96:33:16:d6:df:26:28:9e:d1:16:a0:e5:7f:41:72:
c2:46:88:74:8c:c7:d7:ea:02:c6:df:6d:c8:1a:b0:
87:30:e7:73:69:18:5d:0e:3f:da:b3:39:bc:b9:45:
a9:42:12:8f:88:ac:da:aa:99:59:59:f2:9a:bf:d0:
a2:e6:6b:21:e8:30:71:6a:e0:3d:65:3b:06:f1:3e:
15:8d:25:0f:27:9a:54:f2:f7:1b:d4:96:72:81:b8:
f2:ed:52:fd:57:df:62:51:98:1b:2a:9e:ff:fe:04:
7e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F4:74:78:ED:46:AE:9C:12:F2:56:A2:86:BA:A4:89:8D:D6:4D:1E
X509v3 Authority Key Identifier:
keyid:DC:7D:8E:D9:84:43:DE:6C:68:8D:17:4F:1F:00:55:BE:4D:E1:82:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3H2O2YRD3mxojRdPHwBVvk3hgqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/9a6d83-5c2f-42be-8d76-b802052832cf/1/3H2O2YRD3mxojRdPHwBVvk3hgqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:04:99:b4:ba:cb:e3:7d:f0:a7:25:11:cf:d8:4a:fa:b5:95:
8a:9a:e4:b1:41:20:66:c8:3a:9a:fd:34:07:e1:e8:6b:09:55:
7a:ca:bf:04:9a:7e:99:00:05:69:6b:9f:be:5c:76:18:4b:75:
80:3c:05:58:12:5b:ba:2d:dd:53:97:f0:32:bc:5c:96:4c:08:
f6:0d:95:4d:6e:4f:9c:bd:30:63:3e:88:c0:56:86:6f:25:c1:
96:8a:18:d3:13:8c:04:56:2d:9b:bf:53:6d:10:42:06:85:e0:
f2:55:dd:2f:76:20:37:de:2b:c1:04:50:32:32:42:05:b9:6f:
2d:66:0b:fc:73:2d:5b:e0:a3:04:7d:57:c8:4a:33:82:c0:78:
9f:50:c9:d5:c8:6d:c9:4c:8b:d6:cc:9d:97:d2:26:85:b9:62:
02:ab:84:e3:68:da:d6:bf:b3:fd:77:8f:87:48:d7:60:5d:12:
22:34:05:92:4e:17:86:fc:f6:c5:bd:62:b5:da:c5:2f:63:d6:
f9:28:3c:82:61:88:76:80:6a:20:c9:d4:fc:fa:8e:c6:0f:aa:
3f:5e:e4:92:12:16:f7:c9:24:01:95:71:f2:a0:fd:2c:c0:85:
f1:f4:2e:79:8e:05:c5:72:c7:db:3e:74:9b:0d:db:58:6f:1e:
f1:43:a7:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaG/itt5utqj5f0H/RQYazBaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjN2Q4ZWQ5ODQ0M2RlNmM2ODhkMTc0ZjFmMDA1NWJlNGRl
MTgyYTEwHhcNMjYxMTA5MDkwMTUwWhcNMjYxMTEwMDkwMTUwWjAzMTEwLwYDVQQD
EygzMGY0NzQ3OGVkNDZhZTljMTJmMjU2YTI4NmJhYTQ4OThkZDY0ZDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+V5u7ib8xIsLglIR+1iLxnqSE4L
Rnkx9IrtleYHqW2o6hAwK0mVFW/fZxUBdOoDOGV8/KEvvr48OfqdjPZG31pMg+OT
lAyERPNBjeJvWQ7DH5OjXe2U6deZkrTwyzbeYeK5c9s3rEknDvJaqBhviTczWu0W
cf2a2edpUy7MvcYzINW+0k5qoFx1lgK3jgIcez/3A5GWMxbW3yYontEWoOV/QXLC
Roh0jMfX6gLG323IGrCHMOdzaRhdDj/aszm8uUWpQhKPiKzaqplZWfKav9Ci5msh
6DBxauA9ZTsG8T4VjSUPJ5pU8vcb1JZygbjy7VL9V99iUZgbKp7//gR+kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDD0dHjtRq6cEvJWooa6pImN1k0eMB8GA1UdIwQY
MBaAFNx9jtmEQ95saI0XTx8AVb5N4YKhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0gyTzJZUkQzbXhvalJkUEh3QlZ2azNoZ3FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC85YTZkODMtNWMyZi00MmJlLThkNzYt
YjgwMjA1MjgzMmNmLzEvM0gyTzJZUkQzbXhvalJkUEh3QlZ2azNoZ3FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC85YTZkODMtNWMyZi00MmJlLThkNzYtYjgwMjA1MjgzMmNm
LzEvM0gyTzJZUkQzbXhvalJkUEh3QlZ2azNoZ3FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHwSZtLrL
433wpyURz9hK+rWViprksUEgZsg6mv00B+HoawlVesq/BJp+mQAFaWufvlx2GEt1
gDwFWBJbui3dU5fwMrxclkwI9g2VTW5PnL0wYz6IwFaGbyXBlooY0xOMBFYtm79T
bRBCBoXg8lXdL3YgN94rwQRQMjJCBblvLWYL/HMtW+CjBH1XyEozgsB4n1DJ1cht
yUyL1sydl9ImhbliAquE42ja1r+z/XePh0jXYF0SIjQFkk4Xhvz2xb1itdrFL2PW
+Sg8gmGIdoBqIMnU/PqOxg+qP17kkhIW98kkAZVx8qD9LMCF8fQueY4FxXLH2z50
mw3bWG8e8UOn9w==
-----END CERTIFICATE-----
Generated at Mon Nov 9 18:57:22 2026 by rpki-client