Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft
File: 3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft (raw, json)
Hash identifier: i3bwANPVej2UMvi/2kNWLaXrSF3ZxC6Uhnopqn4sQyc=
Subject key identifier: FA:26:0D:8A:BE:63:45:E7:CD:10:21:E1:C1:09:D3:F0:A9:B0:ED:25
Authority key identifier: DF:14:F4:79:AD:A9:A9:7A:62:04:DF:0E:A9:8A:23:EA:76:1D:47:36
Certificate issuer: /CN=df14f479ada9a97a6204df0ea98a23ea761d4736
Certificate serial: 01A0DACDC30CC57B48E20405CA25A740B419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xT0ea2pqXpiBN8OqYoj6nYdRzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft
Manifest number: 025E
Signing time: Fri 25 Sep 2026 23:01:52 +0000
Manifest this update: Fri 25 Sep 2026 23:01:52 +0000
Manifest next update: Sat 26 Sep 2026 23:01:52 +0000
Files and hashes: 1: 3xT0ea2pqXpiBN8OqYoj6nYdRzY.crl (hash: 24k6Ryx+DKmVyqa+msflHXllF1istmZCG3GNK+Lr2MY=)
2: Eczgp2EFr8e_XSlXUgSdJTrIAak.roa (hash: FsSSezhMi82MyPxKqmo1dtY5pOhu7CRckdx69CzRJss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xT0ea2pqXpiBN8OqYoj6nYdRzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:cd:c3:0c:c5:7b:48:e2:04:05:ca:25:a7:40:b4:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df14f479ada9a97a6204df0ea98a23ea761d4736
Validity
Not Before: Sep 25 23:01:52 2026 GMT
Not After : Sep 26 23:01:52 2026 GMT
Subject: CN=fa260d8abe6345e7cd1021e1c109d3f0a9b0ed25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7f:b1:54:b5:c3:25:8e:07:ec:c4:80:4a:b5:
d8:c4:1a:97:91:87:10:18:d8:50:53:2c:c2:ab:8a:
28:f8:a8:89:ee:b9:22:83:d7:53:76:48:38:48:cb:
2e:21:dd:af:f5:50:14:13:c0:e9:16:3c:8c:09:e3:
d8:16:1c:e6:3b:ee:d1:b4:d7:30:a7:6f:82:25:dc:
1f:40:05:19:71:ca:37:00:5c:c6:66:91:90:85:a7:
50:3a:ab:6e:60:d4:08:3a:d4:6b:a6:d3:da:95:77:
75:34:07:d8:ac:92:2a:44:9f:08:ac:62:98:58:b1:
92:bf:97:c3:83:db:51:00:27:e2:57:89:c6:ca:19:
27:45:90:e2:a5:49:b5:6e:7c:f0:05:90:94:d8:13:
77:40:3c:e3:de:d4:26:04:e2:0c:26:4e:ef:9f:be:
46:64:43:39:9f:ed:0e:48:f2:fe:3c:cf:6b:6e:e0:
da:40:cc:dc:77:58:d3:18:a4:7a:34:8f:4e:5b:e1:
ff:a6:2d:42:65:9b:97:7e:78:ec:16:63:6f:49:3e:
d8:9f:72:8a:95:fe:92:1a:39:5b:b4:40:44:f7:f3:
93:f2:bc:46:4c:9b:84:7d:de:6d:30:7f:6b:ae:80:
e1:c5:ed:47:22:00:69:da:09:9a:38:84:bc:da:2e:
c6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:26:0D:8A:BE:63:45:E7:CD:10:21:E1:C1:09:D3:F0:A9:B0:ED:25
X509v3 Authority Key Identifier:
keyid:DF:14:F4:79:AD:A9:A9:7A:62:04:DF:0E:A9:8A:23:EA:76:1D:47:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xT0ea2pqXpiBN8OqYoj6nYdRzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7e09b-c223-4bdf-ade0-050a79e94eee/1/3xT0ea2pqXpiBN8OqYoj6nYdRzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:2f:e7:14:e1:ae:3b:b7:6b:e1:21:b1:16:34:a2:8c:05:2d:
3a:2b:79:79:76:c6:a0:00:89:9d:73:50:5e:b9:59:d3:66:37:
b1:7a:06:8a:82:33:11:21:02:a5:43:67:42:b4:bd:ea:31:1f:
cb:9d:cf:1b:d3:d7:ef:72:6b:c9:c4:49:4a:04:33:73:3d:ce:
a7:2c:c6:3b:6d:4e:41:b7:a0:64:03:08:e8:f1:4f:7d:df:9c:
9a:ef:c4:e1:03:1e:2c:05:6f:00:00:1b:70:62:83:0a:f6:8a:
ca:40:4c:cc:6e:62:e0:ce:a3:c1:c5:0b:fb:90:5c:14:24:75:
b6:08:cc:50:38:ce:ab:d9:15:34:94:df:5f:1e:19:8e:f7:30:
0b:53:8c:ed:3c:53:aa:79:45:42:9c:90:6b:c3:1f:f8:ac:67:
64:0a:1e:7a:41:67:bf:ba:4e:3f:76:cb:12:13:19:57:f0:4a:
ee:a2:48:d3:d2:df:37:40:bf:78:5a:21:99:3a:42:4f:25:77:
9b:52:b3:e6:f2:9a:98:fa:de:26:ca:d7:cc:03:48:79:8b:ba:
42:d1:11:5f:9c:71:ba:65:9d:01:99:0b:e5:1d:10:f6:11:07:
17:18:fe:3f:09:59:db:60:c1:0a:06:90:02:e6:ce:55:ba:01:
ca:e0:a4:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDazcMMxXtI4gQFyiWnQLQZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMTRmNDc5YWRhOWE5N2E2MjA0ZGYwZWE5OGEyM2VhNzYx
ZDQ3MzYwHhcNMjYwOTI1MjMwMTUyWhcNMjYwOTI2MjMwMTUyWjAzMTEwLwYDVQQD
EyhmYTI2MGQ4YWJlNjM0NWU3Y2QxMDIxZTFjMTA5ZDNmMGE5YjBlZDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6X+xVLXDJY4H7MSASrXYxBqXkYcQ
GNhQUyzCq4oo+KiJ7rkig9dTdkg4SMsuId2v9VAUE8DpFjyMCePYFhzmO+7RtNcw
p2+CJdwfQAUZcco3AFzGZpGQhadQOqtuYNQIOtRrptPalXd1NAfYrJIqRJ8IrGKY
WLGSv5fDg9tRACfiV4nGyhknRZDipUm1bnzwBZCU2BN3QDzj3tQmBOIMJk7vn75G
ZEM5n+0OSPL+PM9rbuDaQMzcd1jTGKR6NI9OW+H/pi1CZZuXfnjsFmNvST7Yn3KK
lf6SGjlbtEBE9/OT8rxGTJuEfd5tMH9rroDhxe1HIgBp2gmaOIS82i7GswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPomDYq+Y0XnzRAh4cEJ0/CpsO0lMB8GA1UdIwQY
MBaAFN8U9Hmtqal6YgTfDqmKI+p2HUc2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3hUMGVhMnBxWHBpQk44T3FZb2o2bllkUnpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9lN2UwOWItYzIyMy00YmRmLWFkZTAt
MDUwYTc5ZTk0ZWVlLzEvM3hUMGVhMnBxWHBpQk44T3FZb2o2bllkUnpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9lN2UwOWItYzIyMy00YmRmLWFkZTAtMDUwYTc5ZTk0ZWVl
LzEvM3hUMGVhMnBxWHBpQk44T3FZb2o2bllkUnpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXC/nFOGu
O7dr4SGxFjSijAUtOit5eXbGoACJnXNQXrlZ02Y3sXoGioIzESECpUNnQrS96jEf
y53PG9PX73JrycRJSgQzcz3OpyzGO21OQbegZAMI6PFPfd+cmu/E4QMeLAVvAAAb
cGKDCvaKykBMzG5i4M6jwcUL+5BcFCR1tgjMUDjOq9kVNJTfXx4ZjvcwC1OM7TxT
qnlFQpyQa8Mf+KxnZAoeekFnv7pOP3bLEhMZV/BK7qJI09LfN0C/eFohmTpCTyV3
m1Kz5vKamPreJsrXzANIeYu6QtERX5xxumWdAZkL5R0Q9hEHFxj+PwlZ22DBCgaQ
AubOVboByuCkkQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 02:10:34 2026 by rpki-client