Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
File: 3rGA3ccUMQPwLmnLnNoZwjleV6E.mft (raw, json)
Hash identifier: Knwsfk+GXFt66gbSA9H80W1l++nDfkiF/cFu/qNzLH0=
Subject key identifier: 63:65:77:36:F3:5E:C7:FB:33:61:32:30:5D:87:11:CD:F6:FC:A4:E8
Authority key identifier: DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
Certificate issuer: /CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Certificate serial: 01A0D124CF80170EB79EA7503DACEFF1F0A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
Manifest number: 1A6B
Signing time: Thu 24 Sep 2026 02:00:45 +0000
Manifest this update: Thu 24 Sep 2026 02:00:45 +0000
Manifest next update: Fri 25 Sep 2026 02:00:45 +0000
Files and hashes: 1: 3rGA3ccUMQPwLmnLnNoZwjleV6E.crl (hash: TBba4gatdNfmG13CpaMcROrrMW1sA+kgVgn5R8dHtcw=)
2: 4Qc85N4EwfShTiGhUnkvPvcjOEs.roa (hash: 5gcG+cc/9htcQzQfIk5Lbs8J3j2mNNeVz49M8qI81nA=)
3: dHkvv2AfkDDcX-uBDSlHxgyE9BM.roa (hash: MkJGi0URj4efKyUrfGEHvlM7u0U0Wn9mOiKm3NgF9Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:cf:80:17:0e:b7:9e:a7:50:3d:ac:ef:f1:f0:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb180ddc7143103f02e69cb9cda19c2395e57a1
Validity
Not Before: Sep 24 02:00:45 2026 GMT
Not After : Sep 25 02:00:45 2026 GMT
Subject: CN=63657736f35ec7fb336132305d8711cdf6fca4e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:52:dd:2c:c4:a2:3f:88:4e:5c:64:a7:d5:e0:
7f:2c:52:b5:f5:1a:49:53:a6:d6:34:f7:ad:f8:0f:
a4:70:be:95:41:e0:e9:79:64:78:7b:c2:fb:8d:2d:
3b:92:cb:8a:f2:22:43:1e:12:03:a4:fc:eb:13:27:
4b:b2:9e:45:ea:7b:6d:4b:09:bd:c1:dd:51:ca:03:
90:e8:c4:69:d5:e0:dc:1a:0b:04:62:d2:fe:2c:a4:
62:47:b7:bd:b7:3e:7c:f2:3f:42:f3:fe:11:41:33:
d8:72:58:23:3a:21:74:bc:54:73:07:bd:10:e8:76:
a8:d5:92:38:06:7e:31:9a:73:56:e8:70:6c:8d:f5:
9e:66:f5:9c:65:52:22:58:ed:f8:42:c3:ae:37:96:
d5:89:6d:82:22:f2:2e:1b:27:03:6a:a2:f6:04:6e:
f0:a6:b3:50:52:48:60:af:ff:ed:b5:13:7d:a3:b7:
af:90:00:93:4f:47:e1:75:18:43:46:92:a4:d7:d4:
d0:02:a4:b7:39:38:45:8c:a4:ce:88:51:98:2c:78:
1d:d8:4b:15:20:a5:3a:3d:90:cd:d7:ce:b4:e6:04:
18:a2:13:11:7d:37:73:2e:53:3a:a6:e3:67:d4:fb:
9e:a8:20:76:17:2d:d8:f8:92:bb:ce:7b:86:83:74:
6b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:65:77:36:F3:5E:C7:FB:33:61:32:30:5D:87:11:CD:F6:FC:A4:E8
X509v3 Authority Key Identifier:
keyid:DE:B1:80:DD:C7:14:31:03:F0:2E:69:CB:9C:DA:19:C2:39:5E:57:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rGA3ccUMQPwLmnLnNoZwjleV6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f90883-e480-4cf1-abd2-9091cd73d38c/1/3rGA3ccUMQPwLmnLnNoZwjleV6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:46:fc:45:59:fc:16:08:e4:c6:70:95:7f:fc:59:f3:97:4c:
4f:d3:3f:da:87:7a:ef:84:16:a9:da:96:03:12:e9:11:7b:92:
ba:f1:d6:d6:8d:e2:45:87:48:ee:b8:23:44:a6:1b:27:95:8b:
91:0b:5f:bc:37:14:ac:e9:bd:52:0e:98:c5:7c:a7:07:69:48:
8b:64:ec:56:a4:9e:74:43:93:93:bf:b5:0c:2f:9b:c6:d2:06:
63:c5:cf:7f:da:d5:68:27:a6:3d:f4:1e:83:bb:0b:cb:95:14:
32:f9:1f:c4:5b:cf:b4:60:bf:1f:83:de:f0:8f:10:ca:58:65:
5e:f2:42:7f:97:9b:62:e1:6a:05:1b:9c:84:e7:6e:96:a4:b9:
a2:28:79:f1:92:03:11:54:79:fa:ea:2a:95:a0:3f:bf:bf:f5:
f4:40:65:ed:36:fa:ad:30:ea:23:98:25:ea:4a:7f:30:4a:b1:
82:1a:d0:6e:7e:66:cb:53:7d:5d:78:05:54:51:f0:70:b4:c1:
58:59:9a:f8:9b:0e:fc:44:ff:60:80:e5:d5:a1:94:25:de:63:
69:57:e7:c3:c0:d2:e4:52:15:91:ed:c9:c0:f0:99:54:3f:89:
96:fe:67:53:6b:5a:fd:ad:2f:89:72:6c:52:bf:dd:cf:bf:fb:
ee:01:73:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRJM+AFw63nqdQPazv8fCoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYjE4MGRkYzcxNDMxMDNmMDJlNjljYjljZGExOWMyMzk1
ZTU3YTEwHhcNMjYwOTI0MDIwMDQ1WhcNMjYwOTI1MDIwMDQ1WjAzMTEwLwYDVQQD
Eyg2MzY1NzczNmYzNWVjN2ZiMzM2MTMyMzA1ZDg3MTFjZGY2ZmNhNGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlLdLMSiP4hOXGSn1eB/LFK19RpJ
U6bWNPet+A+kcL6VQeDpeWR4e8L7jS07ksuK8iJDHhIDpPzrEydLsp5F6nttSwm9
wd1RygOQ6MRp1eDcGgsEYtL+LKRiR7e9tz588j9C8/4RQTPYclgjOiF0vFRzB70Q
6Hao1ZI4Bn4xmnNW6HBsjfWeZvWcZVIiWO34QsOuN5bViW2CIvIuGycDaqL2BG7w
prNQUkhgr//ttRN9o7evkACTT0fhdRhDRpKk19TQAqS3OThFjKTOiFGYLHgd2EsV
IKU6PZDN18605gQYohMRfTdzLlM6puNn1PueqCB2Fy3Y+JK7znuGg3RrOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNldzbzXsf7M2EyMF2HEc32/KToMB8GA1UdIwQY
MBaAFN6xgN3HFDED8C5py5zaGcI5XlehMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3JHQTNjY1VNUVB3TG1uTG5Ob1p3amxlVjZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9mOTA4ODMtZTQ4MC00Y2YxLWFiZDIt
OTA5MWNkNzNkMzhjLzEvM3JHQTNjY1VNUVB3TG1uTG5Ob1p3amxlVjZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9mOTA4ODMtZTQ4MC00Y2YxLWFiZDItOTA5MWNkNzNkMzhj
LzEvM3JHQTNjY1VNUVB3TG1uTG5Ob1p3amxlVjZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhUb8RVn8
FgjkxnCVf/xZ85dMT9M/2od674QWqdqWAxLpEXuSuvHW1o3iRYdI7rgjRKYbJ5WL
kQtfvDcUrOm9Ug6YxXynB2lIi2TsVqSedEOTk7+1DC+bxtIGY8XPf9rVaCemPfQe
g7sLy5UUMvkfxFvPtGC/H4Pe8I8QylhlXvJCf5ebYuFqBRuchOdulqS5oih58ZID
EVR5+uoqlaA/v7/19EBl7Tb6rTDqI5gl6kp/MEqxghrQbn5my1N9XXgFVFHwcLTB
WFma+JsO/ET/YIDl1aGUJd5jaVfnw8DS5FIVke3JwPCZVD+Jlv5nU2ta/a0viXJs
Ur/dz7/77gFzJw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 13:22:19 2026 by rpki-client