Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
File: 3-KkwH5N3j8ePKw5ujshNTGsy7k.mft (raw, json)
Hash identifier: TmcK39wMhqXb7OhhciJU9zayf9xAytOm6/mQ+kuyjcg=
Subject key identifier: 90:89:86:84:2C:62:0F:F8:20:DB:E1:85:E2:BB:F9:78:90:5A:12:E4
Authority key identifier: DF:E2:A4:C0:7E:4D:DE:3F:1E:3C:AC:39:BA:3B:21:35:31:AC:CB:B9
Certificate issuer: /CN=dfe2a4c07e4dde3f1e3cac39ba3b213531accbb9
Certificate serial: 01A0DE734EA8A64C811567CD96A494DECCA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-KkwH5N3j8ePKw5ujshNTGsy7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
Manifest number: 0222
Signing time: Sat 26 Sep 2026 16:01:33 +0000
Manifest this update: Sat 26 Sep 2026 16:01:33 +0000
Manifest next update: Sun 27 Sep 2026 16:01:33 +0000
Files and hashes: 1: 3-KkwH5N3j8ePKw5ujshNTGsy7k.crl (hash: vHpyINQMi4VcU2hOjPubhJYLj6L+LUU6gMWk/pRE8XY=)
2: Bq6stHEFxMFxnWEoWkNnr2q_nfU.roa (hash: FRvotk1GU1c0bgTGRLjQpv9XYU8csQF9vIzVahVu7Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-KkwH5N3j8ePKw5ujshNTGsy7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:73:4e:a8:a6:4c:81:15:67:cd:96:a4:94:de:cc:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe2a4c07e4dde3f1e3cac39ba3b213531accbb9
Validity
Not Before: Sep 26 16:01:33 2026 GMT
Not After : Sep 27 16:01:33 2026 GMT
Subject: CN=908986842c620ff820dbe185e2bbf978905a12e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:88:0a:b8:61:a7:97:2d:7c:19:c1:ed:08:ae:
cf:80:9b:a2:0f:8f:d0:93:8b:92:35:b1:6e:42:30:
e7:ee:e1:8b:0a:b5:a1:83:28:27:5b:14:9e:2d:aa:
e3:ff:23:87:c5:bf:72:36:4c:a1:a5:b0:1d:be:4a:
41:f9:e4:b5:20:f5:fd:43:df:b8:02:54:ce:d5:e8:
e2:e4:08:d1:76:7f:6e:64:d0:ee:ca:b1:f5:cc:c5:
8a:a9:82:21:ea:8d:cf:80:f2:3f:6b:97:df:5d:59:
60:d9:64:d6:95:5f:f6:05:64:48:97:9d:f7:59:54:
00:9e:f9:d0:e6:2a:f7:fa:69:cd:55:de:43:e7:ec:
1a:b1:21:b5:06:88:ad:e4:03:8c:b5:ef:cb:2f:68:
99:3d:7c:f9:de:11:a0:ff:e1:cf:43:fd:92:fd:0d:
7c:3f:df:43:43:c8:83:d9:93:a1:dc:64:4b:a4:37:
6b:55:db:98:42:ef:60:be:b8:f6:dd:ff:80:34:ac:
f8:e1:fc:68:3b:2b:81:1f:64:a3:23:19:c1:6a:f9:
91:fe:bd:c8:01:73:52:63:fa:64:b2:dc:22:68:52:
48:2e:6e:4b:ed:31:52:55:59:36:99:9b:48:35:ca:
33:fc:6f:a6:a6:7a:8f:b1:35:09:ec:b3:94:96:0e:
a1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:89:86:84:2C:62:0F:F8:20:DB:E1:85:E2:BB:F9:78:90:5A:12:E4
X509v3 Authority Key Identifier:
keyid:DF:E2:A4:C0:7E:4D:DE:3F:1E:3C:AC:39:BA:3B:21:35:31:AC:CB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-KkwH5N3j8ePKw5ujshNTGsy7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:27:e3:d1:37:71:9e:7c:e6:dd:94:6e:88:d0:0d:7a:38:48:
bb:70:ba:bb:3e:fe:82:4c:80:d6:14:f5:72:80:77:db:db:b9:
d2:59:8a:6f:78:e9:90:1e:32:71:fe:a9:46:c8:42:5e:4f:c7:
3b:eb:af:9b:fe:6a:34:d8:2c:3c:f5:4d:b7:b2:f4:a2:e2:74:
94:e1:0a:6b:4b:3b:8e:9a:ab:32:94:80:78:9d:be:f1:92:62:
69:05:0f:79:f0:8e:08:5c:8d:55:22:a9:ee:7c:28:cd:c3:86:
a6:d2:24:b2:94:b6:84:87:ad:2c:0c:fb:dd:1c:e8:ab:de:61:
0d:f8:04:c7:61:2e:36:9a:00:9a:dd:f2:5b:e2:c3:20:54:42:
49:a0:cb:f9:6b:6d:06:25:ec:e9:40:5a:29:6f:f8:28:74:78:
05:b0:33:e7:88:a5:65:47:df:26:a5:9a:28:d0:e4:4d:97:58:
4a:be:97:16:f5:47:85:3b:18:89:34:41:7b:c8:89:47:ef:64:
5f:b7:3a:9b:ec:5a:8f:da:cf:3c:9d:e1:95:ba:bb:d2:18:c6:
93:2d:93:a4:ab:78:f1:7b:bf:68:0b:f6:14:26:88:23:d7:57:
7f:3a:91:a4:1c:ea:6a:41:f9:6a:a3:61:b4:de:bd:e8:69:f6:
85:aa:08:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDec06opkyBFWfNlqSU3synMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZTJhNGMwN2U0ZGRlM2YxZTNjYWMzOWJhM2IyMTM1MzFh
Y2NiYjkwHhcNMjYwOTI2MTYwMTMzWhcNMjYwOTI3MTYwMTMzWjAzMTEwLwYDVQQD
Eyg5MDg5ODY4NDJjNjIwZmY4MjBkYmUxODVlMmJiZjk3ODkwNWExMmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYgKuGGnly18GcHtCK7PgJuiD4/Q
k4uSNbFuQjDn7uGLCrWhgygnWxSeLarj/yOHxb9yNkyhpbAdvkpB+eS1IPX9Q9+4
AlTO1eji5AjRdn9uZNDuyrH1zMWKqYIh6o3PgPI/a5ffXVlg2WTWlV/2BWRIl533
WVQAnvnQ5ir3+mnNVd5D5+wasSG1Boit5AOMte/LL2iZPXz53hGg/+HPQ/2S/Q18
P99DQ8iD2ZOh3GRLpDdrVduYQu9gvrj23f+ANKz44fxoOyuBH2SjIxnBavmR/r3I
AXNSY/pkstwiaFJILm5L7TFSVVk2mZtINcoz/G+mpnqPsTUJ7LOUlg6hmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCJhoQsYg/4INvhheK7+XiQWhLkMB8GA1UdIwQY
MBaAFN/ipMB+Td4/HjysObo7ITUxrMu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMy1La3dINU4zajhlUEt3NXVqc2hOVEdzeTdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi80NGJhMTItMGJiOC00ZmY3LThiOTUt
YWVmOTYwMTZjM2VjLzEvMy1La3dINU4zajhlUEt3NXVqc2hOVEdzeTdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi80NGJhMTItMGJiOC00ZmY3LThiOTUtYWVmOTYwMTZjM2Vj
LzEvMy1La3dINU4zajhlUEt3NXVqc2hOVEdzeTdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcCfj0Tdx
nnzm3ZRuiNANejhIu3C6uz7+gkyA1hT1coB329u50lmKb3jpkB4ycf6pRshCXk/H
O+uvm/5qNNgsPPVNt7L0ouJ0lOEKa0s7jpqrMpSAeJ2+8ZJiaQUPefCOCFyNVSKp
7nwozcOGptIkspS2hIetLAz73Rzoq95hDfgEx2EuNpoAmt3yW+LDIFRCSaDL+Wtt
BiXs6UBaKW/4KHR4BbAz54ilZUffJqWaKNDkTZdYSr6XFvVHhTsYiTRBe8iJR+9k
X7c6m+xaj9rPPJ3hlbq70hjGky2TpKt48Xu/aAv2FCaII9dXfzqRpBzqakH5aqNh
tN696Gn2haoI4g==
-----END CERTIFICATE-----
Generated at Sun Sep 27 00:34:28 2026 by rpki-client