Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft
File: 3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft (raw, json)
Hash identifier: CYSp01fIAwSMNWpG42sF5RMdy8x8IEUDWYkcO8Ll+yU=
Subject key identifier: E8:C5:4C:32:BA:5B:EB:BB:99:2D:13:77:DD:CB:03:F6:25:E4:32:5D
Authority key identifier: DC:07:C9:51:40:F0:BF:0A:6D:91:4F:28:87:8F:87:3C:A7:3E:CA:F4
Certificate issuer: /CN=dc07c95140f0bf0a6d914f28878f873ca73ecaf4
Certificate serial: 01A0D383804C3DAFDA92A9E9137EA0166DBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AfJUUDwvwptkU8oh4-HPKc-yvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft
Manifest number: 0255
Signing time: Thu 24 Sep 2026 13:03:25 +0000
Manifest this update: Thu 24 Sep 2026 13:03:25 +0000
Manifest next update: Fri 25 Sep 2026 13:03:25 +0000
Files and hashes: 1: 3AfJUUDwvwptkU8oh4-HPKc-yvQ.crl (hash: 8dZrIQu0n4LkLvpo0XgZ1OsXnT4Vcn4YrLLPl6M6a9Q=)
2: FiJY_f6GKm6veDvPVDNX9LWOSRU.roa (hash: SMTBlb+NpQPNeXGuJJJYcwSp8wfNIzukvM7Bw3VT8hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AfJUUDwvwptkU8oh4-HPKc-yvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:03:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:83:80:4c:3d:af:da:92:a9:e9:13:7e:a0:16:6d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc07c95140f0bf0a6d914f28878f873ca73ecaf4
Validity
Not Before: Sep 24 13:03:25 2026 GMT
Not After : Sep 25 13:03:25 2026 GMT
Subject: CN=e8c54c32ba5bebbb992d1377ddcb03f625e4325d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:89:7e:56:c1:93:64:6a:f1:85:33:4a:10:dd:
da:45:8a:d0:8b:cf:39:d2:e1:ef:29:97:97:28:c4:
9c:ec:16:71:64:7c:d6:b2:17:57:2f:33:eb:e6:1e:
bd:57:9d:33:c1:bd:8e:7a:69:dc:16:3b:28:7d:2e:
a7:c9:f0:b9:32:5e:f9:48:5a:cc:97:48:b3:32:17:
0f:44:2c:8e:20:27:7b:fa:fe:d3:14:55:c4:7c:ec:
10:74:fc:9f:21:2d:ef:a0:e0:20:8f:55:e4:86:5c:
ac:b6:56:2c:62:df:df:3a:83:a4:dd:56:9a:86:c2:
8d:76:11:09:6d:32:69:85:1b:4b:00:b0:b6:da:74:
7d:66:4d:91:83:b1:0e:42:ef:23:42:06:63:5a:8e:
d3:15:5c:b4:ec:fb:9e:60:b4:77:1a:f4:76:ce:28:
f8:18:b2:4a:9b:ae:17:fb:83:a6:15:f1:4b:ec:81:
e8:05:48:b2:16:f5:0c:df:dd:70:8a:ca:20:af:d7:
88:27:ec:d0:70:fd:c9:df:f8:b7:20:27:05:31:33:
d4:98:61:c3:d8:7d:2d:5f:70:38:41:13:1c:59:15:
6e:25:a2:10:fc:3a:5b:d4:64:c5:38:22:c3:c3:25:
56:a7:3c:c6:47:a0:2b:8b:be:57:e1:19:67:db:4a:
78:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C5:4C:32:BA:5B:EB:BB:99:2D:13:77:DD:CB:03:F6:25:E4:32:5D
X509v3 Authority Key Identifier:
keyid:DC:07:C9:51:40:F0:BF:0A:6D:91:4F:28:87:8F:87:3C:A7:3E:CA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AfJUUDwvwptkU8oh4-HPKc-yvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:cd:c4:75:32:32:f3:25:bb:f4:2e:fa:25:74:5c:f4:e9:00:
a1:13:16:23:aa:d4:d3:c8:9f:fa:65:82:a5:e7:74:33:ce:fa:
8d:77:44:38:ad:6d:a8:1f:6c:f7:d2:da:0e:68:20:09:dc:16:
1f:e5:5f:eb:86:48:d0:7a:ac:d1:67:43:82:d9:05:bc:64:ef:
4b:73:91:ee:8a:db:43:53:eb:8f:53:11:af:15:4b:89:4b:4b:
15:31:0b:93:1e:95:7b:c1:8e:fe:09:14:0a:4e:c6:bf:46:67:
5f:01:58:bd:63:ef:a4:e6:fe:59:62:ba:42:1e:88:3f:20:79:
ff:a5:5e:d0:a0:a2:d7:7e:91:f7:59:33:b4:b6:ee:6d:25:0b:
34:44:99:24:16:2b:77:ea:c7:ab:ff:fe:58:18:3c:56:20:11:
0a:ce:02:56:d6:bd:37:55:61:52:07:34:5f:52:c6:09:5e:07:
2b:19:ec:b1:cc:45:73:25:3a:aa:e1:0c:e8:14:1c:90:1b:de:
95:ca:36:85:63:57:1e:e9:7f:94:27:fa:2c:d5:98:28:28:e5:
d2:95:12:73:9c:6f:5d:cf:a3:68:05:dd:03:a4:ef:a2:80:92:
5f:16:f1:f9:d3:b8:ea:b3:af:9f:fc:95:51:bc:c1:44:c5:43:
67:25:82:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTg4BMPa/akqnpE36gFm2+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMDdjOTUxNDBmMGJmMGE2ZDkxNGYyODg3OGY4NzNjYTcz
ZWNhZjQwHhcNMjYwOTI0MTMwMzI1WhcNMjYwOTI1MTMwMzI1WjAzMTEwLwYDVQQD
EyhlOGM1NGMzMmJhNWJlYmJiOTkyZDEzNzdkZGNiMDNmNjI1ZTQzMjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIl+VsGTZGrxhTNKEN3aRYrQi885
0uHvKZeXKMSc7BZxZHzWshdXLzPr5h69V50zwb2OemncFjsofS6nyfC5Ml75SFrM
l0izMhcPRCyOICd7+v7TFFXEfOwQdPyfIS3voOAgj1XkhlystlYsYt/fOoOk3Vaa
hsKNdhEJbTJphRtLALC22nR9Zk2Rg7EOQu8jQgZjWo7TFVy07PueYLR3GvR2zij4
GLJKm64X+4OmFfFL7IHoBUiyFvUM391wisogr9eIJ+zQcP3J3/i3ICcFMTPUmGHD
2H0tX3A4QRMcWRVuJaIQ/Dpb1GTFOCLDwyVWpzzGR6Ari75X4Rln20p4FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjFTDK6W+u7mS0Td93LA/Yl5DJdMB8GA1UdIwQY
MBaAFNwHyVFA8L8KbZFPKIePhzynPsr0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0FmSlVVRHd2d3B0a1U4b2g0LUhQS2MteXZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi81NTJiODMtNWI2My00OTIzLWI1NjYt
ZTZkY2RmMDJhZWQxLzEvM0FmSlVVRHd2d3B0a1U4b2g0LUhQS2MteXZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi81NTJiODMtNWI2My00OTIzLWI1NjYtZTZkY2RmMDJhZWQx
LzEvM0FmSlVVRHd2d3B0a1U4b2g0LUhQS2MteXZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANs3EdTIy
8yW79C76JXRc9OkAoRMWI6rU08if+mWCped0M876jXdEOK1tqB9s99LaDmggCdwW
H+Vf64ZI0Hqs0WdDgtkFvGTvS3OR7orbQ1Prj1MRrxVLiUtLFTELkx6Ve8GO/gkU
Ck7Gv0ZnXwFYvWPvpOb+WWK6Qh6IPyB5/6Ve0KCi136R91kztLbubSULNESZJBYr
d+rHq//+WBg8ViARCs4CVta9N1VhUgc0X1LGCV4HKxnsscxFcyU6quEM6BQckBve
lco2hWNXHul/lCf6LNWYKCjl0pUSc5xvXc+jaAXdA6TvooCSXxbx+dO46rOvn/yV
UbzBRMVDZyWClg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 18:40:40 2026 by rpki-client