Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
File: 3A3qTqJUbXoBmk74JDtetjVlyEc.mft (raw, json)
Hash identifier: Bnuy5FWZFD2PSUUztcuTJjuHBM3IHKm6+IgelGbaeVM=
Subject key identifier: 6B:05:26:45:82:F4:86:76:C8:EF:36:74:2E:97:2F:34:10:C2:C8:CF
Authority key identifier: DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
Certificate issuer: /CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Certificate serial: 01A0CDB61AE977667E576937A757DE199AFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
Manifest number: 19FE
Signing time: Wed 23 Sep 2026 10:00:58 +0000
Manifest this update: Wed 23 Sep 2026 10:00:58 +0000
Manifest next update: Thu 24 Sep 2026 10:00:58 +0000
Files and hashes: 1: 3A3qTqJUbXoBmk74JDtetjVlyEc.crl (hash: yxmONgtO6dVQdIUv2IFsUUfCGBdeQDkTJ0oiGVoYgPc=)
2: gmn2k3f32tfDXu2zwYzVyGe8JSs.roa (hash: W9sjDbpYZWeZAU/ChNMb2ZUNyZYk9yxty8Xm+AfcIh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b6:1a:e9:77:66:7e:57:69:37:a7:57:de:19:9a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Validity
Not Before: Sep 23 10:00:58 2026 GMT
Not After : Sep 24 10:00:58 2026 GMT
Subject: CN=6b05264582f48676c8ef36742e972f3410c2c8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:70:c3:08:fe:fe:3b:f2:dc:1e:f2:74:d0:86:
ff:4d:34:9d:41:2a:ef:a4:2f:47:be:8d:b3:e2:b3:
ec:62:df:3e:f5:f1:0a:f0:dd:f9:29:9c:c3:32:c0:
92:60:ec:36:8e:f1:41:69:6a:37:c9:98:93:00:a5:
1b:74:84:f0:eb:78:76:86:17:ac:bc:bb:71:e8:83:
15:e5:60:ad:dd:69:32:36:98:62:00:e2:45:fa:e9:
90:00:b4:cd:26:82:d4:24:38:70:87:23:7d:19:ed:
aa:f9:74:e8:e6:76:5d:a6:c7:be:07:f7:fe:40:ea:
c1:56:4c:ab:dc:33:e8:72:4f:9a:d7:66:62:48:15:
7b:6e:ff:ea:cf:d4:aa:8b:ad:ff:2e:b0:84:2b:65:
d9:87:eb:42:fd:5d:a9:df:0c:1b:33:fb:ee:34:53:
c1:c2:60:79:1f:76:f2:bc:e4:cf:50:1e:6b:43:bf:
0b:a5:b1:d2:c9:2e:c4:07:25:74:d7:78:52:2f:a8:
a4:a7:26:95:16:63:f9:a2:72:43:0b:da:a4:22:51:
cd:6c:f6:2b:2c:d9:e9:6e:c2:70:a7:8c:79:74:d3:
04:ae:70:9f:bf:c5:6f:ce:93:fc:5e:f6:8e:63:10:
51:a0:0b:1d:0f:99:76:31:2b:45:7f:3f:a1:c5:f5:
cd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:05:26:45:82:F4:86:76:C8:EF:36:74:2E:97:2F:34:10:C2:C8:CF
X509v3 Authority Key Identifier:
keyid:DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d5:24:aa:4c:ad:cc:ba:86:ff:b5:a8:45:89:e8:42:95:dd:
a5:e5:f0:1c:d8:66:06:76:d2:ce:bc:20:25:aa:ff:0e:ae:09:
51:cf:c7:0f:ef:d4:92:6b:41:fd:db:09:56:82:43:60:88:6a:
6f:e0:bb:ea:ea:88:db:30:ff:81:6e:80:3c:af:54:06:5c:3d:
70:69:c8:96:5b:f5:24:02:15:27:c8:13:25:26:f7:a5:d7:1d:
5e:bd:14:88:92:31:89:c8:b9:cd:09:2b:bd:63:f6:b3:c4:77:
8b:d4:48:f9:fd:55:32:0d:48:5d:7d:2d:92:d9:e3:c2:7a:ee:
88:ec:8a:74:f2:00:67:b8:aa:6f:2d:16:25:e0:6a:bd:ee:b4:
59:21:98:b7:4a:83:bf:85:dc:9e:cd:55:63:8b:a5:df:4c:9a:
34:de:1f:d3:f2:02:fd:d7:59:a0:a9:bc:cf:6d:82:f4:60:68:
64:69:45:68:3a:ea:75:2b:d2:22:e0:dd:6e:a1:1a:82:f4:4a:
b8:33:7f:c1:fb:f1:7a:1e:2e:a8:6e:e0:c3:69:e0:9f:92:06:
d8:ad:27:b5:9b:10:71:ed:72:8d:62:f2:a3:bf:30:5c:c9:66:
56:65:c3:13:5f:4f:35:88:bd:be:c5:6c:b0:33:af:f7:c0:a5:
3f:68:39:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNthrpd2Z+V2k3p1feGZr6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMGRlYTRlYTI1NDZkN2EwMTlhNGVmODI0M2I1ZWI2MzU2
NWM4NDcwHhcNMjYwOTIzMTAwMDU4WhcNMjYwOTI0MTAwMDU4WjAzMTEwLwYDVQQD
Eyg2YjA1MjY0NTgyZjQ4Njc2YzhlZjM2NzQyZTk3MmYzNDEwYzJjOGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnDDCP7+O/LcHvJ00Ib/TTSdQSrv
pC9Hvo2z4rPsYt8+9fEK8N35KZzDMsCSYOw2jvFBaWo3yZiTAKUbdITw63h2hhes
vLtx6IMV5WCt3WkyNphiAOJF+umQALTNJoLUJDhwhyN9Ge2q+XTo5nZdpse+B/f+
QOrBVkyr3DPock+a12ZiSBV7bv/qz9Sqi63/LrCEK2XZh+tC/V2p3wwbM/vuNFPB
wmB5H3byvOTPUB5rQ78LpbHSyS7EByV013hSL6ikpyaVFmP5onJDC9qkIlHNbPYr
LNnpbsJwp4x5dNMErnCfv8VvzpP8XvaOYxBRoAsdD5l2MStFfz+hxfXNHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsFJkWC9IZ2yO82dC6XLzQQwsjPMB8GA1UdIwQY
MBaAFNwN6k6iVG16AZpO+CQ7XrY1ZchHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0EzcVRxSlViWG9CbWs3NEpEdGV0alZseUVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zNWE2ZTUtMzM2NC00YTc0LTk2NGMt
M2Q0YjI4M2YzMjJkLzEvM0EzcVRxSlViWG9CbWs3NEpEdGV0alZseUVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zNWE2ZTUtMzM2NC00YTc0LTk2NGMtM2Q0YjI4M2YzMjJk
LzEvM0EzcVRxSlViWG9CbWs3NEpEdGV0alZseUVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNUkqkyt
zLqG/7WoRYnoQpXdpeXwHNhmBnbSzrwgJar/Dq4JUc/HD+/UkmtB/dsJVoJDYIhq
b+C76uqI2zD/gW6APK9UBlw9cGnIllv1JAIVJ8gTJSb3pdcdXr0UiJIxici5zQkr
vWP2s8R3i9RI+f1VMg1IXX0tktnjwnruiOyKdPIAZ7iqby0WJeBqve60WSGYt0qD
v4Xcns1VY4ul30yaNN4f0/IC/ddZoKm8z22C9GBoZGlFaDrqdSvSIuDdbqEagvRK
uDN/wfvxeh4uqG7gw2ngn5IG2K0ntZsQce1yjWLyo78wXMlmVmXDE19PNYi9vsVs
sDOv98ClP2g5xw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 13:28:46 2026 by rpki-client