Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
File: 3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft (raw, json)
Hash identifier: 57N/fo42HNLuNvUGsj92fNVi2SnqoMxVr8xmKe1vMw8=
Subject key identifier: 59:F6:3A:92:20:3E:E0:D1:D4:C5:32:E2:2D:72:3D:8B:02:E3:E5:2F
Authority key identifier: DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6
Certificate issuer: /CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6
Certificate serial: 01A0DACDE3511BBD7A928078C6B801E314FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
Manifest number: 1181
Signing time: Fri 25 Sep 2026 23:02:01 +0000
Manifest this update: Fri 25 Sep 2026 23:02:01 +0000
Manifest next update: Sat 26 Sep 2026 23:02:01 +0000
Files and hashes: 1: 3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl (hash: E1J/lkpJy2lI8k6FxjRaNzocuCExLOUXYuq6MtLKgsE=)
2: KdEq-OeVxvI5CqMaBlN9K8-QwE0.asa (hash: bM3X6ryr93DZAzA3CFAR2S/fr/RWSQdRtJYrZgQf3n0=)
3: MJozjNqLnPQyzg6RwUr67wJnDj0.roa (hash: GrVcVPg8QNDGergH76PpUDqLKrseVEoNPTuvrqjQXRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 23:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:cd:e3:51:1b:bd:7a:92:80:78:c6:b8:01:e3:14:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6
Validity
Not Before: Sep 25 23:02:01 2026 GMT
Not After : Sep 26 23:02:01 2026 GMT
Subject: CN=59f63a92203ee0d1d4c532e22d723d8b02e3e52f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8f:d1:60:0a:d4:99:50:61:f7:2d:ca:ec:07:
b6:4e:63:1b:12:55:a6:25:34:2c:87:35:b0:89:87:
99:47:14:13:0c:d9:bb:b3:a4:45:d9:06:d3:ee:5e:
7b:b6:23:f7:6d:b3:2a:08:0f:b6:35:00:0c:64:32:
0a:d4:fd:9d:24:72:fe:8a:a5:43:2f:c0:b1:c9:00:
48:b2:cb:55:b8:62:f6:4b:66:34:5e:26:66:d0:bb:
f1:a5:cd:d6:24:31:a0:14:5a:c3:ba:7a:e3:8f:2b:
4f:21:dc:eb:4d:25:29:f5:27:79:2d:84:02:b3:f1:
c4:a5:2f:d7:21:74:3c:ae:36:74:55:05:23:8c:70:
22:a1:d0:9b:1a:67:af:e6:3e:ff:0b:c8:b5:7f:30:
23:bc:8b:2b:9b:bb:e5:ed:0d:a0:64:10:66:95:33:
55:81:59:f2:84:60:d9:df:5f:24:a0:89:d8:41:35:
dd:14:e4:22:a5:ef:d3:38:dc:cc:57:02:0d:e5:32:
09:3a:bd:9d:1f:40:44:62:5f:ca:1f:f3:47:c2:2d:
bb:86:cc:17:01:fb:3c:43:a5:b6:bd:ea:af:b6:93:
6f:cc:d5:05:40:2e:5b:06:6f:98:9c:d2:a9:ea:fa:
4e:35:b0:88:f8:d6:e2:3d:b1:26:70:68:6b:e5:3f:
88:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F6:3A:92:20:3E:E0:D1:D4:C5:32:E2:2D:72:3D:8B:02:E3:E5:2F
X509v3 Authority Key Identifier:
keyid:DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:46:43:b3:7a:f8:4d:5a:f7:40:a4:9e:a1:de:05:68:52:cb:
4b:5e:57:73:60:7d:2c:2f:7e:7f:2a:00:77:1b:6e:02:9c:b6:
c1:c3:b8:cc:f8:8d:03:7e:d7:7a:d1:1a:b2:95:57:64:da:13:
76:cc:f3:e6:e6:d6:40:d8:73:61:97:c2:93:78:37:8c:39:02:
0a:43:1b:fd:fa:1b:0e:b4:d4:31:7f:73:3e:71:7e:be:74:82:
2f:d6:3e:13:ce:e0:c3:03:79:00:79:21:f4:c6:eb:e1:16:33:
0b:99:8d:48:54:e0:6e:87:6a:5e:c4:59:8b:00:be:6d:49:c5:
01:37:07:67:7a:c1:57:86:ce:ab:dd:8d:fb:4f:9e:c3:d9:92:
66:7f:06:93:37:91:27:fd:15:08:93:22:ed:56:e9:3d:2f:08:
35:6c:96:d9:dc:2a:ba:bd:ef:c9:ac:5a:80:13:a2:43:0d:96:
0a:3f:7b:96:a9:2e:f6:ea:29:5e:ec:c1:22:fb:cd:b6:0a:50:
ec:67:c2:66:bc:31:b5:73:51:f6:fa:3e:4f:05:07:13:bd:58:
94:53:50:94:1f:f1:a3:7e:f0:58:95:34:05:dc:0c:3d:90:1e:
d9:a5:59:97:cb:e2:52:5f:50:1c:d2:c3:27:17:aa:55:d5:29:
ad:ef:2b:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDazeNRG716koB4xrgB4xT8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNWU2YzIzMzA5MTFiYzFkYzhjODNkNDExZWY2YjEyMDhi
M2JiZDYwHhcNMjYwOTI1MjMwMjAxWhcNMjYwOTI2MjMwMjAxWjAzMTEwLwYDVQQD
Eyg1OWY2M2E5MjIwM2VlMGQxZDRjNTMyZTIyZDcyM2Q4YjAyZTNlNTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyY/RYArUmVBh9y3K7Ae2TmMbElWm
JTQshzWwiYeZRxQTDNm7s6RF2QbT7l57tiP3bbMqCA+2NQAMZDIK1P2dJHL+iqVD
L8CxyQBIsstVuGL2S2Y0XiZm0Lvxpc3WJDGgFFrDunrjjytPIdzrTSUp9Sd5LYQC
s/HEpS/XIXQ8rjZ0VQUjjHAiodCbGmev5j7/C8i1fzAjvIsrm7vl7Q2gZBBmlTNV
gVnyhGDZ318koInYQTXdFOQipe/TONzMVwIN5TIJOr2dH0BEYl/KH/NHwi27hswX
Afs8Q6W2veqvtpNvzNUFQC5bBm+YnNKp6vpONbCI+NbiPbEmcGhr5T+IcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFn2OpIgPuDR1MUy4i1yPYsC4+UvMB8GA1UdIwQY
MBaAFN5ebCMwkRvB3IyD1BHvaxIIs7vWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2w1c0l6Q1JHOEhjaklQVUVlOXJFZ2l6dTlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kZTlkNzItZmNkNC00YzdjLTg5Y2Et
ZGU0YmE3ODZmODcyLzEvM2w1c0l6Q1JHOEhjaklQVUVlOXJFZ2l6dTlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9kZTlkNzItZmNkNC00YzdjLTg5Y2EtZGU0YmE3ODZmODcy
LzEvM2w1c0l6Q1JHOEhjaklQVUVlOXJFZ2l6dTlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANUZDs3r4
TVr3QKSeod4FaFLLS15Xc2B9LC9+fyoAdxtuApy2wcO4zPiNA37XetEaspVXZNoT
dszz5ubWQNhzYZfCk3g3jDkCCkMb/fobDrTUMX9zPnF+vnSCL9Y+E87gwwN5AHkh
9Mbr4RYzC5mNSFTgbodqXsRZiwC+bUnFATcHZ3rBV4bOq92N+0+ew9mSZn8GkzeR
J/0VCJMi7VbpPS8INWyW2dwqur3vyaxagBOiQw2WCj97lqku9uopXuzBIvvNtgpQ
7GfCZrwxtXNR9vo+TwUHE71YlFNQlB/xo37wWJU0BdwMPZAe2aVZl8viUl9QHNLD
JxeqVdUpre8rTw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 09:51:59 2026 by rpki-client