Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
File: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft (raw, json)
Hash identifier: jS6Fu1rQcK3GEuUGg7a1Ow0CF/xC57yYrZ/y4ouqV+g=
Subject key identifier: BC:55:9F:B7:A8:C9:F7:6F:71:54:FF:03:DB:D3:30:5B:05:2A:E0:91
Authority key identifier: DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95
Certificate issuer: /CN=de0ccd2391fa32c0ade297c5fc883090b3991395
Certificate serial: 01A0CDEC66A9A4F584DB586AA5D2F06223F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 11:00:17 +0000
Manifest this update: Wed 23 Sep 2026 11:00:17 +0000
Manifest next update: Thu 24 Sep 2026 11:00:17 +0000
Files and hashes: 1: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl (hash: O2g9GzLtTVtilWGiyUdcXoHGjjwDTs3bxqfXRaDCzYc=)
2: 9unExc-u2klcvykG9A7nqtJ0jEo.roa (hash: fK53zNSLF8dtN9JmssE7wAYgASom2B/ybWqpgUFg/kU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:66:a9:a4:f5:84:db:58:6a:a5:d2:f0:62:23:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0ccd2391fa32c0ade297c5fc883090b3991395
Validity
Not Before: Sep 23 11:00:17 2026 GMT
Not After : Sep 24 11:00:17 2026 GMT
Subject: CN=bc559fb7a8c9f76f7154ff03dbd3305b052ae091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e2:4d:06:fb:30:b9:ae:2c:24:d8:3e:ec:f1:
3a:53:32:1d:a0:9a:b7:23:5e:71:95:c5:f9:17:ec:
33:9e:f7:af:cc:42:b2:81:c5:b7:21:09:9d:33:85:
19:7b:d7:bb:78:36:a7:f6:8f:43:38:3b:49:b4:bb:
d4:2e:1c:03:7f:74:21:68:4c:ec:75:60:a9:1a:82:
c1:74:4d:e4:af:59:40:9c:46:48:f5:ab:60:ff:56:
f1:93:5d:e8:7e:17:0a:a7:23:63:9b:bd:d7:7e:50:
8b:43:a6:c2:ce:bb:bd:50:2f:7f:03:22:12:0a:49:
21:2c:73:f6:aa:73:d8:82:39:01:43:c4:41:3c:4a:
78:a4:43:6a:fd:60:ba:e9:97:8a:85:dd:ba:79:f4:
05:af:92:16:94:58:d1:3c:c4:a5:58:0f:f9:41:fd:
10:84:19:47:c7:d7:ca:67:ef:9a:f7:b4:05:a7:63:
69:e8:e5:3f:f7:85:f3:67:38:b7:87:8e:c5:f1:4b:
55:d6:a6:54:01:70:53:a7:5c:ad:e2:f8:13:0b:e2:
f5:aa:61:f7:fe:c7:30:d6:b0:e8:0c:b5:83:2c:0c:
3a:62:f3:86:63:fa:b1:58:6c:54:c5:8b:e4:b6:83:
1e:fc:01:95:94:b6:5b:f4:8f:8d:d6:47:70:08:98:
68:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:55:9F:B7:A8:C9:F7:6F:71:54:FF:03:DB:D3:30:5B:05:2A:E0:91
X509v3 Authority Key Identifier:
keyid:DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:99:a3:21:86:cd:1d:22:47:bd:d6:62:d4:4b:da:fc:5d:50:
75:ce:b5:64:0d:06:9d:58:65:c6:d5:c3:24:28:6d:2b:67:8c:
b9:20:55:3e:d6:23:67:90:44:82:c7:53:0d:cc:0a:b3:c9:10:
f3:89:c3:ee:11:d5:05:ef:f8:75:fa:e3:fc:33:48:7b:ee:cc:
b4:bb:8e:db:90:e5:33:e4:b5:4a:9f:61:c0:c3:f2:23:5b:5f:
fc:5d:46:66:af:cf:f2:a7:db:86:29:a7:d5:b5:35:35:16:ba:
1b:28:78:33:ad:70:49:82:8f:40:dc:bd:aa:6b:f5:64:b4:34:
5b:cb:2b:5a:59:ca:d6:7e:a6:d6:85:40:c6:76:da:01:8f:a7:
7b:45:5e:d9:02:ee:b4:c4:3d:bc:c6:d7:0a:9a:79:89:4e:f8:
37:3f:4b:86:23:29:49:83:f2:f2:f1:af:1a:db:18:ac:44:6f:
f5:af:6f:e4:2c:c5:a9:1a:2d:8c:5f:78:73:87:ba:80:9a:05:
fd:4f:1f:4b:3d:76:a4:45:5e:3c:b7:0e:20:41:1c:d1:38:67:
92:18:35:04:a2:07:4e:19:c9:fd:cd:b5:63:22:16:98:1b:6a:
7b:2e:4c:ca:f2:cd:86:fd:aa:37:65:03:5e:20:ce:dc:47:9d:
1b:09:47:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDN7GappPWE21hqpdLwYiPyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMGNjZDIzOTFmYTMyYzBhZGUyOTdjNWZjODgzMDkwYjM5
OTEzOTUwHhcNMjYwOTIzMTEwMDE3WhcNMjYwOTI0MTEwMDE3WjAzMTEwLwYDVQQD
EyhiYzU1OWZiN2E4YzlmNzZmNzE1NGZmMDNkYmQzMzA1YjA1MmFlMDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuJNBvswua4sJNg+7PE6UzIdoJq3
I15xlcX5F+wznvevzEKygcW3IQmdM4UZe9e7eDan9o9DODtJtLvULhwDf3QhaEzs
dWCpGoLBdE3kr1lAnEZI9atg/1bxk13ofhcKpyNjm73XflCLQ6bCzru9UC9/AyIS
CkkhLHP2qnPYgjkBQ8RBPEp4pENq/WC66ZeKhd26efQFr5IWlFjRPMSlWA/5Qf0Q
hBlHx9fKZ++a97QFp2Np6OU/94XzZzi3h47F8UtV1qZUAXBTp1yt4vgTC+L1qmH3
/scw1rDoDLWDLAw6YvOGY/qxWGxUxYvktoMe/AGVlLZb9I+N1kdwCJhoDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxVn7eoyfdvcVT/A9vTMFsFKuCRMB8GA1UdIwQY
MBaAFN4MzSOR+jLAreKXxfyIMJCzmROVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2d6Tkk1SDZNc0N0NHBmRl9JZ3drTE9aRTVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zNTI0ODctYTBjOC00ZDkxLThlOWQt
NjdjMWE2M2M1MTUwLzEvM2d6Tkk1SDZNc0N0NHBmRl9JZ3drTE9aRTVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zNTI0ODctYTBjOC00ZDkxLThlOWQtNjdjMWE2M2M1MTUw
LzEvM2d6Tkk1SDZNc0N0NHBmRl9JZ3drTE9aRTVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKpmjIYbN
HSJHvdZi1Eva/F1Qdc61ZA0GnVhlxtXDJChtK2eMuSBVPtYjZ5BEgsdTDcwKs8kQ
84nD7hHVBe/4dfrj/DNIe+7MtLuO25DlM+S1Sp9hwMPyI1tf/F1GZq/P8qfbhimn
1bU1NRa6Gyh4M61wSYKPQNy9qmv1ZLQ0W8srWlnK1n6m1oVAxnbaAY+ne0Ve2QLu
tMQ9vMbXCpp5iU74Nz9LhiMpSYPy8vGvGtsYrERv9a9v5CzFqRotjF94c4e6gJoF
/U8fSz12pEVePLcOIEEc0Thnkhg1BKIHThnJ/c21YyIWmBtqey5MyvLNhv2qN2UD
XiDO3EedGwlHaQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 21:19:18 2026 by rpki-client