Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
File: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft (raw, json)
Hash identifier: uNN40DBprRQBDXEMyPqxl0VF3RnZ2z0jT8spOTI7ux8=
Subject key identifier: E7:A7:39:50:5F:71:B2:16:38:F5:1A:C4:56:61:04:3E:71:F6:E0:E2
Authority key identifier: DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
Certificate issuer: /CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Certificate serial: 019A01EB8455AAEAC2C3BD3CCAEBCC97F6FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
Manifest number: 1626
Signing time: Mon 20 Oct 2025 14:00:03 +0000
Manifest this update: Mon 20 Oct 2025 14:00:03 +0000
Manifest next update: Tue 21 Oct 2025 14:00:03 +0000
Files and hashes: 1: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl (hash: oQwEwEVxxI28n5dT0gcN5WvDyYVFOgmUrX46YnutM3k=)
2: i93FbkwGzwrRV5pk719Azh7mnco.roa (hash: FbLtCYorp5+hnW87pG1j3ZHIdaixJG9L/nchejMVUes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:eb:84:55:aa:ea:c2:c3:bd:3c:ca:eb:cc:97:f6:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Validity
Not Before: Oct 20 14:00:03 2025 GMT
Not After : Oct 21 14:00:03 2025 GMT
Subject: CN=e7a739505f71b21638f51ac45661043e71f6e0e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:97:5d:95:53:8a:c4:d4:45:da:d3:98:e8:b3:
e6:db:1b:e4:46:de:18:8c:a8:1b:96:8b:c3:4e:74:
67:11:43:81:64:56:f6:40:5c:42:38:1d:e5:84:d1:
8a:b0:67:84:da:63:93:a5:a8:53:d9:b8:22:c7:e9:
c6:89:57:6a:bf:8f:79:d8:04:8a:84:ea:2f:ab:39:
3c:ec:8e:cc:5e:97:ed:6c:01:51:24:10:da:ed:c4:
1c:3d:bb:65:f4:67:53:a0:8d:3d:f8:2d:0d:fd:52:
90:35:44:fd:e7:fd:f3:0a:e6:61:15:45:16:99:e3:
92:6d:8e:56:6b:b8:c6:47:a8:5e:0a:33:0a:b7:bd:
ab:93:3d:6c:a1:d3:74:e4:c7:38:e9:d2:b0:06:c4:
34:32:e3:d0:be:48:4c:a8:50:ca:b6:3f:6b:a3:86:
43:b1:2e:d2:29:d9:79:ac:79:e1:c3:98:50:3d:16:
5a:b6:59:a4:8d:08:cc:5c:fa:f8:98:e5:39:db:f2:
3e:10:27:f6:9f:8d:cb:52:20:d7:fb:39:06:a9:d5:
7c:90:19:71:b6:66:3c:10:86:bf:55:73:d9:0d:bf:
fc:45:b0:bd:15:9c:d9:2a:7a:fa:a5:e5:55:04:6f:
da:7f:8c:97:61:b8:89:94:5b:f3:c7:62:56:99:ef:
12:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A7:39:50:5F:71:B2:16:38:F5:1A:C4:56:61:04:3E:71:F6:E0:E2
X509v3 Authority Key Identifier:
keyid:DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:54:af:15:e9:b2:f6:52:96:eb:ef:ae:a1:c5:3c:32:ba:eb:
25:88:e0:0a:fb:37:68:60:3f:e2:cf:75:78:ed:6e:79:48:7d:
17:51:6d:81:34:41:d7:d6:6d:ff:0a:85:5f:3f:92:da:99:60:
4f:3b:ca:c4:aa:23:95:5d:75:cd:89:80:4a:f5:5d:50:9e:2e:
b1:80:61:49:62:32:8e:2d:05:c0:6f:ee:ca:1a:bd:fe:1b:74:
05:c7:57:38:35:4a:83:5f:3b:35:54:fc:a9:71:86:66:a6:2c:
29:c3:fc:e7:81:11:e0:34:e7:de:41:a6:43:f6:be:96:81:95:
4c:da:75:97:2a:1a:d8:8a:9a:22:48:a9:92:b8:6e:ca:8b:34:
73:5c:9e:92:1c:c7:fc:af:c0:dd:2d:60:38:fa:3c:e6:0a:c9:
c9:da:4d:6a:b2:4c:fe:15:51:cd:cc:6b:3f:a5:c8:9d:83:8c:
b0:32:d8:f9:ef:6d:e6:ec:eb:25:3f:b5:32:27:9b:78:6d:a3:
af:69:38:0b:e7:f2:bd:ed:71:94:1d:ec:49:bb:3d:24:e0:36:
75:e2:e8:f6:3b:c1:2b:57:97:22:2c:81:76:7d:58:9e:ef:2f:
75:23:04:54:ed:35:3c:e7:9a:a6:63:87:ed:fc:36:cd:09:2c:
db:36:8d:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoB64RVqurCw708yuvMl/b9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZmY4NWJiOGEzNzU5NTIzZTBjYzlmOGE5MWRiZGFmNDc0
ZDZiN2MwHhcNMjUxMDIwMTQwMDAzWhcNMjUxMDIxMTQwMDAzWjAzMTEwLwYDVQQD
EyhlN2E3Mzk1MDVmNzFiMjE2MzhmNTFhYzQ1NjYxMDQzZTcxZjZlMGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZddlVOKxNRF2tOY6LPm2xvkRt4Y
jKgblovDTnRnEUOBZFb2QFxCOB3lhNGKsGeE2mOTpahT2bgix+nGiVdqv4952ASK
hOovqzk87I7MXpftbAFRJBDa7cQcPbtl9GdToI09+C0N/VKQNUT95/3zCuZhFUUW
meOSbY5Wa7jGR6heCjMKt72rkz1sodN05Mc46dKwBsQ0MuPQvkhMqFDKtj9ro4ZD
sS7SKdl5rHnhw5hQPRZatlmkjQjMXPr4mOU52/I+ECf2n43LUiDX+zkGqdV8kBlx
tmY8EIa/VXPZDb/8RbC9FZzZKnr6peVVBG/af4yXYbiJlFvzx2JWme8SawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOenOVBfcbIWOPUaxFZhBD5x9uDiMB8GA1UdIwQY
MBaAFNz/hbuKN1lSPgzJ+Kkdva9HTWt8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1AtRnU0bzNXVkktRE1uNHFSMjlyMGROYTN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9lY2Q3ZmMtM2VmNy00MzI2LWE0ZWYt
NWJjMzAyYjRiNWZjLzEvM1AtRnU0bzNXVkktRE1uNHFSMjlyMGROYTN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9lY2Q3ZmMtM2VmNy00MzI2LWE0ZWYtNWJjMzAyYjRiNWZj
LzEvM1AtRnU0bzNXVkktRE1uNHFSMjlyMGROYTN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS1SvFemy
9lKW6++uocU8MrrrJYjgCvs3aGA/4s91eO1ueUh9F1FtgTRB19Zt/wqFXz+S2plg
TzvKxKojlV11zYmASvVdUJ4usYBhSWIyji0FwG/uyhq9/ht0BcdXODVKg187NVT8
qXGGZqYsKcP854ER4DTn3kGmQ/a+loGVTNp1lyoa2IqaIkipkrhuyos0c1yekhzH
/K/A3S1gOPo85grJydpNarJM/hVRzcxrP6XInYOMsDLY+e9t5uzrJT+1MiebeG2j
r2k4C+fyve1xlB3sSbs9JOA2deLo9jvBK1eXIiyBdn1Ynu8vdSMEVO01POeapmOH
7fw2zQks2zaNdA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:33:19 2025 by rpki-client