Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
File: a3GzSTijGjS_WGag8914w4qsYRk.mft (raw, json)
Hash identifier: dKA5Zy3x6y50NgpXgpXUMnyukDRhCxDld+jHA8Iwt74=
Subject key identifier: F3:9A:9E:22:EA:E0:20:C7:6C:8C:D2:52:DE:50:1F:AC:2C:9C:BB:EE
Authority key identifier: 6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
Certificate issuer: /CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Certificate serial: 01A0DFF3CDD6380853039D386FF91FCD034E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
Manifest number: 0EB7
Signing time: Sat 26 Sep 2026 23:01:32 +0000
Manifest this update: Sat 26 Sep 2026 23:01:32 +0000
Manifest next update: Sun 27 Sep 2026 23:01:32 +0000
Files and hashes: 1: DcrRJgqRNpvoCWRPJq-gfZ9cTSc.roa (hash: yUfzqdMRmL7jGSUFq4lCB6EMNimufWLo4OnIOxNcjvs=)
2: RMhbqoJGcate0VVn940rqvh6JQo.roa (hash: tV3B6fI/7FtYuPDuoEQuH+0EeXQe9vPcgT9Mi8Zibns=)
3: a3GzSTijGjS_WGag8914w4qsYRk.crl (hash: /Ca+OanBEIntSHdXHQyx0VZQMRZkbaDZ5ksoeiIQ1XA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 23:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:f3:cd:d6:38:08:53:03:9d:38:6f:f9:1f:cd:03:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Validity
Not Before: Sep 26 23:01:32 2026 GMT
Not After : Sep 27 23:01:32 2026 GMT
Subject: CN=f39a9e22eae020c76c8cd252de501fac2c9cbbee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:37:e2:9d:1b:57:59:a4:9b:a9:e6:3d:f6:c6:
b6:19:15:d6:96:e4:70:b4:d5:21:7b:21:04:e2:ab:
dc:b7:72:bb:d5:6d:cb:82:07:3c:fa:e5:26:8a:07:
63:8f:99:0d:69:83:fa:a0:f2:38:c0:f6:79:43:90:
c2:b8:ca:91:f2:26:90:b8:6c:8c:3c:12:86:d2:93:
fa:b7:3e:c2:ca:ea:f7:12:10:72:a9:ec:a0:db:5c:
74:b7:1b:75:12:0b:6e:07:ac:1d:4b:22:80:dc:c9:
10:fb:3a:2d:80:65:67:08:25:d1:95:15:bb:20:ad:
4e:8b:b0:3b:2a:1d:7f:4d:df:d9:46:24:b1:45:e7:
0d:ec:2b:ec:d6:80:c1:5e:35:c0:14:20:d0:e8:68:
24:c0:5f:e5:52:ad:9f:36:6a:7b:db:62:13:0c:a3:
f5:36:1f:ed:0e:83:f8:81:47:06:53:4d:28:4a:c1:
3a:44:41:10:10:ec:a7:6d:17:a9:35:ef:37:1d:78:
71:53:0b:b7:3b:de:37:7f:d6:47:55:08:7f:a9:3e:
f9:14:55:4f:3a:23:79:4c:ef:0b:0a:61:67:db:fc:
26:7d:f2:94:a9:1c:99:59:e6:69:c2:9a:e8:3b:b5:
c3:9e:df:2d:59:c2:5f:ec:af:2c:ce:e0:d3:90:3a:
ce:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9A:9E:22:EA:E0:20:C7:6C:8C:D2:52:DE:50:1F:AC:2C:9C:BB:EE
X509v3 Authority Key Identifier:
keyid:6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c6:fa:52:c9:e6:a5:ac:52:21:fd:47:f5:f6:28:b1:8f:9d:
2a:e7:84:82:fd:c3:7b:91:9e:e8:76:54:c6:d3:88:94:fa:a5:
83:a9:23:0c:18:27:d5:72:1c:24:64:5e:0b:0c:d9:6b:85:86:
8e:d9:58:39:63:1f:93:d6:ec:fb:2b:fc:f7:34:d2:13:e5:46:
7e:2e:ab:0c:c6:21:c2:48:ff:4e:9f:f0:7a:e5:96:56:60:30:
d9:2b:26:55:97:aa:cc:42:e4:2b:cb:12:22:f5:6e:5b:55:54:
db:70:03:27:15:4a:c7:8a:ec:51:d0:8e:dc:25:38:c2:76:ee:
ea:b4:1a:b2:41:36:a6:9f:62:bd:5b:fe:b9:4c:9e:bd:eb:25:
cc:49:00:3d:df:2a:f8:d2:f9:63:2a:87:6b:76:e3:b9:dd:ec:
27:8f:cf:21:4b:e6:c9:2b:9a:8d:fc:e6:1f:28:01:aa:c9:4a:
ce:a6:f9:88:d5:bb:f8:41:f3:de:66:5f:aa:92:59:94:98:ca:
eb:ae:c3:1d:10:b1:f1:f3:93:9a:77:40:58:4b:0f:ba:62:2c:
5b:8f:8b:93:50:fb:33:a4:dd:24:c5:b5:51:6b:fd:fd:26:09:
1e:54:9e:e8:b1:15:1a:aa:ba:8c:1d:64:ed:a5:be:f5:ef:d3:
41:b0:ba:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDf883WOAhTA504b/kfzQNOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNzFiMzQ5MzhhMzFhMzRiZjU4NjZhMGYzZGQ3OGMzOGFh
YzYxMTkwHhcNMjYwOTI2MjMwMTMyWhcNMjYwOTI3MjMwMTMyWjAzMTEwLwYDVQQD
EyhmMzlhOWUyMmVhZTAyMGM3NmM4Y2QyNTJkZTUwMWZhYzJjOWNiYmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTfinRtXWaSbqeY99sa2GRXWluRw
tNUheyEE4qvct3K71W3Lggc8+uUmigdjj5kNaYP6oPI4wPZ5Q5DCuMqR8iaQuGyM
PBKG0pP6tz7Cyur3EhByqeyg21x0txt1EgtuB6wdSyKA3MkQ+zotgGVnCCXRlRW7
IK1Oi7A7Kh1/Td/ZRiSxRecN7Cvs1oDBXjXAFCDQ6GgkwF/lUq2fNmp722ITDKP1
Nh/tDoP4gUcGU00oSsE6REEQEOynbRepNe83HXhxUwu3O943f9ZHVQh/qT75FFVP
OiN5TO8LCmFn2/wmffKUqRyZWeZpwproO7XDnt8tWcJf7K8szuDTkDrOkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOaniLq4CDHbIzSUt5QH6wsnLvuMB8GA1UdIwQY
MBaAFGtxs0k4oxo0v1hmoPPdeMOKrGEZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTNHelNUaWpHalNfV0dhZzg5MTR3NHFzWVJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83MzEwMzQtNWZkNS00OTJiLTlkYWYt
NmY1NmUxZmEwMjMwLzEvYTNHelNUaWpHalNfV0dhZzg5MTR3NHFzWVJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS83MzEwMzQtNWZkNS00OTJiLTlkYWYtNmY1NmUxZmEwMjMw
LzEvYTNHelNUaWpHalNfV0dhZzg5MTR3NHFzWVJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbcb6Usnm
paxSIf1H9fYosY+dKueEgv3De5Ge6HZUxtOIlPqlg6kjDBgn1XIcJGReCwzZa4WG
jtlYOWMfk9bs+yv89zTSE+VGfi6rDMYhwkj/Tp/weuWWVmAw2SsmVZeqzELkK8sS
IvVuW1VU23ADJxVKx4rsUdCO3CU4wnbu6rQaskE2pp9ivVv+uUyeveslzEkAPd8q
+NL5YyqHa3bjud3sJ4/PIUvmySuajfzmHygBqslKzqb5iNW7+EHz3mZfqpJZlJjK
667DHRCx8fOTmndAWEsPumIsW4+Lk1D7M6TdJMW1UWv9/SYJHlSe6LEVGqq6jB1k
7aW+9e/TQbC6zw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 09:54:45 2026 by rpki-client