Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/01b58b-4554-43d9-b981-404a7f16377f/1/3AQGUtdpiw4Fnv7AoF08-21EUIU.mft
File: 3AQGUtdpiw4Fnv7AoF08-21EUIU.mft (raw, json)
Hash identifier: zMxgP/1XbczosPAD9Uf6uWdI34eapFdaRQFA+M1/9K4=
Subject key identifier: E0:0D:62:E5:58:BE:46:70:89:E2:C4:7A:B5:31:52:8D:5B:2C:7A:C6
Authority key identifier: DC:04:06:52:D7:69:8B:0E:05:9E:FE:C0:A0:5D:3C:FB:6D:44:50:85
Certificate issuer: /CN=dc040652d7698b0e059efec0a05d3cfb6d445085
Certificate serial: 01A0CFDB32A3DBDFE7B113B77C4FD57A67D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AQGUtdpiw4Fnv7AoF08-21EUIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/01b58b-4554-43d9-b981-404a7f16377f/1/3AQGUtdpiw4Fnv7AoF08-21EUIU.mft
Manifest number: 47
Signing time: Wed 23 Sep 2026 20:00:44 +0000
Manifest this update: Wed 23 Sep 2026 20:00:44 +0000
Manifest next update: Thu 24 Sep 2026 20:00:44 +0000
Files and hashes: 1: 3AQGUtdpiw4Fnv7AoF08-21EUIU.crl (hash: U9GRMAfkT2s4X8ELnbTtbhept+drvFxA1RTQt8h9hBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/01b58b-4554-43d9-b981-404a7f16377f/1/3AQGUtdpiw4Fnv7AoF08-21EUIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/01b58b-4554-43d9-b981-404a7f16377f/1/3AQGUtdpiw4Fnv7AoF08-21EUIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AQGUtdpiw4Fnv7AoF08-21EUIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:db:32:a3:db:df:e7:b1:13:b7:7c:4f:d5:7a:67:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc040652d7698b0e059efec0a05d3cfb6d445085
Validity
Not Before: Sep 23 20:00:44 2026 GMT
Not After : Sep 24 20:00:44 2026 GMT
Subject: CN=e00d62e558be467089e2c47ab531528d5b2c7ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:74:fe:52:d9:47:90:dd:31:01:b8:2c:ca:3f:
ac:b8:f0:bf:1b:9e:4e:5b:33:4c:29:85:3a:a9:a0:
6d:b9:09:d2:cf:62:9f:ea:66:4d:f6:45:58:49:95:
26:db:85:3d:b1:d3:ba:4c:6a:eb:69:2d:db:e7:9a:
21:03:4e:59:9f:4b:da:83:bb:83:98:96:30:71:a6:
7e:18:07:04:e2:c3:10:31:3b:36:ed:46:1c:21:25:
e6:79:70:a4:a3:95:a9:73:fe:dc:cb:ba:53:f3:49:
58:18:8d:a6:d2:47:63:88:80:5f:0c:36:2c:16:67:
2c:41:b0:8a:1b:7e:b9:c5:d3:69:39:13:2d:cc:63:
c2:48:10:99:79:7e:d3:39:25:62:b1:7c:bf:cc:11:
3f:18:e5:5f:ec:cf:4d:ba:d8:11:e6:20:a2:9c:8a:
d7:b1:60:f4:99:4c:7c:75:28:50:0f:85:0f:3a:a3:
a9:32:2e:58:3d:6d:a3:57:c0:b8:0e:8d:5e:ef:19:
96:6c:ab:cb:fd:d3:ba:85:1b:83:c0:48:ff:1a:a5:
82:4c:2e:e4:e4:1a:90:a2:95:ac:e8:61:58:7a:8c:
8b:94:39:47:19:6e:e5:d5:b1:3a:8b:6e:f9:a4:c7:
1d:22:73:5e:c9:e2:0e:d7:52:fd:93:11:2d:48:5c:
1b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0D:62:E5:58:BE:46:70:89:E2:C4:7A:B5:31:52:8D:5B:2C:7A:C6
X509v3 Authority Key Identifier:
keyid:DC:04:06:52:D7:69:8B:0E:05:9E:FE:C0:A0:5D:3C:FB:6D:44:50:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AQGUtdpiw4Fnv7AoF08-21EUIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/01b58b-4554-43d9-b981-404a7f16377f/1/3AQGUtdpiw4Fnv7AoF08-21EUIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/01b58b-4554-43d9-b981-404a7f16377f/1/3AQGUtdpiw4Fnv7AoF08-21EUIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:0d:5c:c1:09:3f:07:47:aa:3d:9e:1e:09:58:f4:c8:96:dd:
7a:70:7d:02:fd:a7:df:f9:b9:8a:29:b4:a4:22:d1:8a:eb:2c:
ff:13:76:72:01:31:de:6c:33:08:63:68:e5:fc:db:8a:66:93:
59:fc:6b:28:16:ac:37:45:26:db:19:81:7b:d7:06:00:45:d7:
19:b5:12:cc:1c:4a:ac:f0:e2:18:5d:c0:d6:8c:93:49:ce:bb:
3a:18:84:03:f5:29:1d:78:d9:fe:6d:11:73:5a:17:5c:72:a7:
b9:6f:a0:0f:9e:51:dd:bf:4b:9c:4c:3a:3c:cf:bb:b7:e5:fb:
40:44:a7:be:33:1a:23:8f:2b:68:c2:f7:c8:e7:67:09:be:b9:
8c:63:ee:67:dd:43:ed:89:bc:cf:57:39:ce:53:25:6d:81:ad:
08:7f:08:6f:5c:9e:9f:2b:d6:99:2e:4d:fb:6f:5d:5c:7d:cf:
4f:77:2f:0f:96:e7:e7:3e:e6:20:15:ad:a0:29:4f:ff:ca:b9:
37:6b:09:40:15:02:b6:36:59:06:a6:9b:82:22:f2:32:e5:a5:
10:43:62:d2:f5:92:34:f7:a5:e9:60:b3:5b:d9:1a:cf:79:8b:
c7:4f:09:15:6d:8b:f0:18:7c:82:2d:73:ab:1f:46:77:c4:5e:
98:e8:74:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDP2zKj29/nsRO3fE/VemfRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMDQwNjUyZDc2OThiMGUwNTllZmVjMGEwNWQzY2ZiNmQ0
NDUwODUwHhcNMjYwOTIzMjAwMDQ0WhcNMjYwOTI0MjAwMDQ0WjAzMTEwLwYDVQQD
EyhlMDBkNjJlNTU4YmU0NjcwODllMmM0N2FiNTMxNTI4ZDViMmM3YWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnT+UtlHkN0xAbgsyj+suPC/G55O
WzNMKYU6qaBtuQnSz2Kf6mZN9kVYSZUm24U9sdO6TGrraS3b55ohA05Zn0vag7uD
mJYwcaZ+GAcE4sMQMTs27UYcISXmeXCko5Wpc/7cy7pT80lYGI2m0kdjiIBfDDYs
FmcsQbCKG365xdNpORMtzGPCSBCZeX7TOSVisXy/zBE/GOVf7M9NutgR5iCinIrX
sWD0mUx8dShQD4UPOqOpMi5YPW2jV8C4Do1e7xmWbKvL/dO6hRuDwEj/GqWCTC7k
5BqQopWs6GFYeoyLlDlHGW7l1bE6i275pMcdInNeyeIO11L9kxEtSFwbYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOANYuVYvkZwieLEerUxUo1bLHrGMB8GA1UdIwQY
MBaAFNwEBlLXaYsOBZ7+wKBdPPttRFCFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0FRR1V0ZHBpdzRGbnY3QW9GMDgtMjFFVUlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wMWI1OGItNDU1NC00M2Q5LWI5ODEt
NDA0YTdmMTYzNzdmLzEvM0FRR1V0ZHBpdzRGbnY3QW9GMDgtMjFFVUlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8wMWI1OGItNDU1NC00M2Q5LWI5ODEtNDA0YTdmMTYzNzdm
LzEvM0FRR1V0ZHBpdzRGbnY3QW9GMDgtMjFFVUlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHg1cwQk/
B0eqPZ4eCVj0yJbdenB9Av2n3/m5iim0pCLRiuss/xN2cgEx3mwzCGNo5fzbimaT
WfxrKBasN0Um2xmBe9cGAEXXGbUSzBxKrPDiGF3A1oyTSc67OhiEA/UpHXjZ/m0R
c1oXXHKnuW+gD55R3b9LnEw6PM+7t+X7QESnvjMaI48raML3yOdnCb65jGPuZ91D
7Ym8z1c5zlMlbYGtCH8Ib1yenyvWmS5N+29dXH3PT3cvD5bn5z7mIBWtoClP/8q5
N2sJQBUCtjZZBqabgiLyMuWlEENi0vWSNPel6WCzW9kaz3mLx08JFW2L8Bh8gi1z
qx9Gd8RemOh0RA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:46:26 2026 by rpki-client