Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/cdbe93-363a-4173-8c8a-80729c9aa9ba/1/1-3xUaqRcrIS8hzVgd8kDU7xFBeo.mft
File: 1-3xUaqRcrIS8hzVgd8kDU7xFBeo.mft (raw, json)
Hash identifier: HuYFIDpo/TvqeUvGiPndyKuOf9sLg/mkvTzxpf93ykg=
Subject key identifier: 11:AF:7E:2C:41:79:D4:56:E2:1A:70:BC:FC:CB:44:A4:B3:E4:D4:C7
Authority key identifier: FB:7C:54:6A:A4:5C:AC:84:BC:87:35:60:77:C9:03:53:BC:45:05:EA
Certificate issuer: /CN=fb7c546aa45cac84bc87356077c90353bc4505ea
Certificate serial: 01A0CA7E1C05916D4EBD622AE16EA0C0AFE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3xUaqRcrIS8hzVgd8kDU7xFBeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/cdbe93-363a-4173-8c8a-80729c9aa9ba/1/1-3xUaqRcrIS8hzVgd8kDU7xFBeo.mft
Manifest number: 03
Signing time: Tue 22 Sep 2026 19:00:57 +0000
Manifest this update: Tue 22 Sep 2026 19:00:57 +0000
Manifest next update: Wed 23 Sep 2026 19:00:57 +0000
Files and hashes: 1: 1-3xUaqRcrIS8hzVgd8kDU7xFBeo.crl (hash: i/baw0AGvPf/0u6E0Al9RQQ68Fbn8Yv2IxH/nFGnAUA=)
2: 8vgTugo7ihb7UgfqZWda25-i0Pc.roa (hash: PmVCQhXXRDOgOfx/jGgYMdCqgeZPuz3gWfYho//C+Dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/cdbe93-363a-4173-8c8a-80729c9aa9ba/1/1-3xUaqRcrIS8hzVgd8kDU7xFBeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/cdbe93-363a-4173-8c8a-80729c9aa9ba/1/1-3xUaqRcrIS8hzVgd8kDU7xFBeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3xUaqRcrIS8hzVgd8kDU7xFBeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7e:1c:05:91:6d:4e:bd:62:2a:e1:6e:a0:c0:af:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb7c546aa45cac84bc87356077c90353bc4505ea
Validity
Not Before: Sep 22 19:00:57 2026 GMT
Not After : Sep 23 19:00:57 2026 GMT
Subject: CN=11af7e2c4179d456e21a70bcfccb44a4b3e4d4c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b6:82:58:6f:9b:bb:14:c4:45:b7:56:10:1f:
cf:b6:0e:20:9c:9c:69:b0:eb:3c:6f:64:52:ea:a3:
9b:b5:61:af:bb:f1:4f:c4:05:11:2f:97:ff:bf:df:
f6:b7:f0:4d:a6:7c:71:f1:a0:7f:31:15:e5:07:02:
fe:08:3b:a7:c3:6a:b0:1a:8f:e3:a5:87:9a:0d:bb:
8b:94:f2:7e:a0:56:49:e9:cd:f4:f1:5a:c6:8f:72:
aa:83:30:a7:6e:9c:7c:ba:38:18:46:c9:19:be:19:
7f:05:97:c4:50:00:47:03:cd:7e:2a:fe:40:7b:1f:
3d:74:a0:92:fd:0c:b7:02:a6:a7:6f:ae:1b:db:ef:
e0:aa:2e:16:a2:c5:4c:f3:47:2d:42:d9:c7:4d:8b:
b9:a1:9f:e7:41:f9:54:fe:49:0f:22:fc:ad:07:29:
37:18:f5:25:7e:15:fb:76:24:64:5c:99:88:ff:3e:
65:b3:ce:70:86:2d:5e:ed:04:90:40:58:8c:c8:9c:
77:49:ba:a3:e4:2b:7e:fb:cf:b0:8e:a3:52:77:52:
ae:65:78:39:23:e5:c1:d2:f8:7f:06:59:fe:14:25:
5b:04:ab:e4:0d:71:fd:89:eb:d9:30:d9:af:8b:15:
0f:4a:0e:84:3f:b3:41:64:d2:21:7b:ed:4a:a9:a5:
2f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AF:7E:2C:41:79:D4:56:E2:1A:70:BC:FC:CB:44:A4:B3:E4:D4:C7
X509v3 Authority Key Identifier:
keyid:FB:7C:54:6A:A4:5C:AC:84:BC:87:35:60:77:C9:03:53:BC:45:05:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3xUaqRcrIS8hzVgd8kDU7xFBeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cdbe93-363a-4173-8c8a-80729c9aa9ba/1/1-3xUaqRcrIS8hzVgd8kDU7xFBeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cdbe93-363a-4173-8c8a-80729c9aa9ba/1/1-3xUaqRcrIS8hzVgd8kDU7xFBeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:cc:17:8d:c9:f8:67:34:31:c4:30:be:9a:6b:37:5d:56:3e:
70:5f:0d:b4:6f:e1:2e:e9:f9:fe:a9:97:c9:c9:f9:97:41:ca:
b6:6a:47:e0:3e:42:f1:27:62:65:b4:a0:f9:5e:29:64:9e:16:
dd:0c:24:fe:40:fc:30:6a:d8:75:dc:ad:7f:ee:3b:ae:83:d9:
82:0d:1d:95:4a:a0:cf:2c:d6:29:18:4d:e9:3f:81:05:86:a6:
b5:9d:d6:5e:89:7f:29:3d:4a:f6:bb:9c:f6:68:8f:49:5f:6d:
2d:9a:13:c3:d5:3a:d8:9d:af:82:6a:d6:c0:27:d7:81:51:39:
81:d3:3c:f7:5d:ad:ce:09:f5:75:f9:ae:ed:ad:8d:87:28:74:
c1:a6:fd:63:5c:45:e9:17:f4:1a:64:65:51:fa:90:75:07:90:
82:c4:d4:69:6e:a8:07:54:f5:4c:ce:0a:88:a0:92:4d:e8:ac:
17:eb:81:cf:11:db:c2:87:37:6a:44:f7:ce:43:d8:21:86:80:
30:01:31:e4:62:8e:32:a7:70:7a:b0:74:55:44:b8:75:19:3c:
5f:3b:de:40:dd:62:f2:50:85:e0:24:cf:ab:89:81:cc:cb:b2:
0a:90:7e:5f:27:bb:fe:e6:d3:9a:53:b7:ce:44:06:ce:81:fc:
db:08:38:bd
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDKfhwFkW1OvWIq4W6gwK/kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiN2M1NDZhYTQ1Y2FjODRiYzg3MzU2MDc3YzkwMzUzYmM0
NTA1ZWEwHhcNMjYwOTIyMTkwMDU3WhcNMjYwOTIzMTkwMDU3WjAzMTEwLwYDVQQD
EygxMWFmN2UyYzQxNzlkNDU2ZTIxYTcwYmNmY2NiNDRhNGIzZTRkNGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LaCWG+buxTERbdWEB/Ptg4gnJxp
sOs8b2RS6qObtWGvu/FPxAURL5f/v9/2t/BNpnxx8aB/MRXlBwL+CDunw2qwGo/j
pYeaDbuLlPJ+oFZJ6c308VrGj3KqgzCnbpx8ujgYRskZvhl/BZfEUABHA81+Kv5A
ex89dKCS/Qy3Aqanb64b2+/gqi4WosVM80ctQtnHTYu5oZ/nQflU/kkPIvytByk3
GPUlfhX7diRkXJmI/z5ls85whi1e7QSQQFiMyJx3Sbqj5Ct++8+wjqNSd1KuZXg5
I+XB0vh/Bln+FCVbBKvkDXH9ievZMNmvixUPSg6EP7NBZNIhe+1KqaUvaQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBGvfixBedRW4hpwvPzLRKSz5NTHMB8GA1UdIwQY
MBaAFPt8VGqkXKyEvIc1YHfJA1O8RQXqMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0zeFVhcVJjcklTOGh6VmdkOGtEVTd4RkJlby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvY2RiZTkzLTM2M2EtNDE3My04Yzhh
LTgwNzI5YzlhYTliYS8xLzEtM3hVYXFSY3JJUzhoelZnZDhrRFU3eEZCZW8ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzI4L2NkYmU5My0zNjNhLTQxNzMtOGM4YS04MDcyOWM5YWE5
YmEvMS8xLTN4VWFxUmNySVM4aHpWZ2Q4a0RVN3hGQmVvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgcwX
jcn4ZzQxxDC+mms3XVY+cF8NtG/hLun5/qmXycn5l0HKtmpH4D5C8SdiZbSg+V4p
ZJ4W3Qwk/kD8MGrYddytf+47roPZgg0dlUqgzyzWKRhN6T+BBYamtZ3WXol/KT1K
9ruc9miPSV9tLZoTw9U62J2vgmrWwCfXgVE5gdM8912tzgn1dfmu7a2Nhyh0wab9
Y1xF6Rf0GmRlUfqQdQeQgsTUaW6oB1T1TM4KiKCSTeisF+uBzxHbwoc3akT3zkPY
IYaAMAEx5GKOMqdwerB0VUS4dRk8XzveQN1i8lCF4CTPq4mBzMuyCpB+Xye7/ubT
mlO3zkQGzoH82wg4vQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:45:45 2026 by rpki-client