Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
File: 3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft (raw, json)
Hash identifier: WkOUWx9jpIcw9NgBpzGWi4vuynmhVcEq/XT7XtzaxjQ=
Subject key identifier: 16:C6:67:19:0D:96:5A:84:E9:E2:35:CD:D3:25:12:64:98:D5:50:AF
Authority key identifier: DC:73:BE:38:7A:F5:52:97:0C:F6:2F:69:51:7E:3F:3C:9C:12:D2:F6
Certificate issuer: /CN=dc73be387af552970cf62f69517e3f3c9c12d2f6
Certificate serial: 01A0C4E96FA4A178006C111AF04FCD40C6BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
Manifest number: 1367
Signing time: Mon 21 Sep 2026 17:00:27 +0000
Manifest this update: Mon 21 Sep 2026 17:00:27 +0000
Manifest next update: Tue 22 Sep 2026 17:00:27 +0000
Files and hashes: 1: 3HO-OHr1UpcM9i9pUX4_PJwS0vY.crl (hash: aTsXst2EzbGbGoovYB4voFu3/0sNG8nXyb5RJmYqE18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:6f:a4:a1:78:00:6c:11:1a:f0:4f:cd:40:c6:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc73be387af552970cf62f69517e3f3c9c12d2f6
Validity
Not Before: Sep 21 17:00:27 2026 GMT
Not After : Sep 22 17:00:27 2026 GMT
Subject: CN=16c667190d965a84e9e235cdd325126498d550af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:15:a4:02:60:ec:7f:c7:8f:a6:46:2a:68:31:
6d:41:be:0c:ab:08:a4:e9:c7:fe:62:fd:ea:75:6a:
70:c2:43:fd:8b:03:cb:16:32:89:82:47:d4:16:bc:
8e:55:d3:6f:a4:0f:c6:39:06:40:0e:55:69:74:72:
0c:38:40:b2:72:ec:67:11:64:81:72:32:72:0e:76:
5e:ce:50:e8:f1:10:fe:44:5f:06:53:74:2d:ff:25:
c0:e7:88:4a:43:11:c7:8c:4c:a0:ab:d2:de:a0:c8:
5a:ce:67:11:ac:9c:0c:7b:a7:6b:07:a3:94:24:e9:
2e:3e:4e:8e:ea:dd:7a:b4:4a:a6:92:d6:5c:86:e1:
7f:34:59:2f:1e:34:1e:96:5f:16:1b:89:04:e6:1c:
6d:d6:9e:14:02:67:76:13:93:a9:84:61:37:2d:e7:
bc:2a:f9:a0:39:64:af:ec:6b:4f:81:ea:ee:d0:2b:
8c:c2:a5:a2:da:e2:8d:ba:cf:70:6c:c3:59:63:c2:
9d:c0:86:07:1f:be:aa:a4:3a:4d:5b:86:64:ac:0d:
1b:79:62:04:e5:34:d6:80:82:ba:a7:9f:ce:05:da:
1b:8b:14:71:1c:55:b1:39:10:0d:97:5e:23:f3:b8:
31:ba:2a:05:8b:7d:66:43:29:5a:d0:2b:2e:8a:4e:
ce:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C6:67:19:0D:96:5A:84:E9:E2:35:CD:D3:25:12:64:98:D5:50:AF
X509v3 Authority Key Identifier:
keyid:DC:73:BE:38:7A:F5:52:97:0C:F6:2F:69:51:7E:3F:3C:9C:12:D2:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:62:0b:a9:59:a3:8b:38:d0:82:af:3f:94:3f:aa:f1:24:37:
56:79:f5:bc:ec:dd:d7:c2:7c:51:44:37:ea:49:7f:d9:be:6e:
c6:2f:07:62:72:c9:68:44:c6:7d:c2:a6:18:74:e9:5a:dc:f3:
92:73:44:47:4a:13:0e:32:3a:4e:d6:a5:1a:80:5f:7c:ae:0d:
27:96:ca:0b:0f:45:6b:99:08:9b:c2:7b:63:aa:49:0e:3f:32:
c6:a2:86:97:53:78:ac:63:f6:74:10:51:b8:44:c3:b1:fd:da:
05:49:f2:c4:4d:c0:3d:96:39:11:25:53:15:99:ff:ac:4f:8c:
b1:3a:24:79:89:5d:0f:7f:c2:59:8a:a5:4b:fe:ff:a3:30:8a:
66:ae:6b:c7:1f:1d:32:a4:e9:ec:f2:d8:47:3e:e6:c1:ee:94:
eb:8b:ca:56:ca:4b:d8:95:33:03:06:0c:7b:3c:00:7c:83:40:
c7:64:61:b0:71:af:24:cc:63:2b:3a:f0:39:b3:a3:a6:d6:a0:
d2:de:c8:cd:25:31:5e:ab:50:b4:63:74:52:58:07:3c:00:6d:
95:00:f9:66:35:d9:d6:94:b9:98:e8:c8:ff:b2:98:c9:8f:23:
95:ec:9c:45:fd:50:60:24:9d:67:eb:2e:a4:9e:75:84:a2:5b:
52:96:8f:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDE6W+koXgAbBEa8E/NQMa+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNzNiZTM4N2FmNTUyOTcwY2Y2MmY2OTUxN2UzZjNjOWMx
MmQyZjYwHhcNMjYwOTIxMTcwMDI3WhcNMjYwOTIyMTcwMDI3WjAzMTEwLwYDVQQD
EygxNmM2NjcxOTBkOTY1YTg0ZTllMjM1Y2RkMzI1MTI2NDk4ZDU1MGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshWkAmDsf8ePpkYqaDFtQb4Mqwik
6cf+Yv3qdWpwwkP9iwPLFjKJgkfUFryOVdNvpA/GOQZADlVpdHIMOECycuxnEWSB
cjJyDnZezlDo8RD+RF8GU3Qt/yXA54hKQxHHjEygq9LeoMhazmcRrJwMe6drB6OU
JOkuPk6O6t16tEqmktZchuF/NFkvHjQell8WG4kE5hxt1p4UAmd2E5OphGE3Lee8
KvmgOWSv7GtPgeru0CuMwqWi2uKNus9wbMNZY8KdwIYHH76qpDpNW4ZkrA0beWIE
5TTWgIK6p5/OBdobixRxHFWxORANl14j87gxuioFi31mQyla0Csuik7OIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbGZxkNllqE6eI1zdMlEmSY1VCvMB8GA1UdIwQY
MBaAFNxzvjh69VKXDPYvaVF+PzycEtL2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0hPLU9IcjFVcGNNOWk5cFVYNF9QSndTMHZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC81YmJkMzItYTU0MC00NzA4LTk5MjUt
YzcxZjE3YWZjNzQ5LzEvM0hPLU9IcjFVcGNNOWk5cFVYNF9QSndTMHZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC81YmJkMzItYTU0MC00NzA4LTk5MjUtYzcxZjE3YWZjNzQ5
LzEvM0hPLU9IcjFVcGNNOWk5cFVYNF9QSndTMHZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOGILqVmj
izjQgq8/lD+q8SQ3Vnn1vOzd18J8UUQ36kl/2b5uxi8HYnLJaETGfcKmGHTpWtzz
knNER0oTDjI6TtalGoBffK4NJ5bKCw9Fa5kIm8J7Y6pJDj8yxqKGl1N4rGP2dBBR
uETDsf3aBUnyxE3APZY5ESVTFZn/rE+MsTokeYldD3/CWYqlS/7/ozCKZq5rxx8d
MqTp7PLYRz7mwe6U64vKVspL2JUzAwYMezwAfINAx2RhsHGvJMxjKzrwObOjptag
0t7IzSUxXqtQtGN0UlgHPABtlQD5ZjXZ1pS5mOjI/7KYyY8jleycRf1QYCSdZ+su
pJ51hKJbUpaPVQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 01:32:51 2026 by rpki-client