Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.mft
File: 3fwxxRjdlxX93slYJSfshEjXhA0.mft (raw, json)
Hash identifier: wJeoTY5IRbNEXwlfcn14z2MT48whiM8QsvUIiku064c=
Subject key identifier: 22:25:5B:A0:00:00:DA:1F:DC:21:D3:CF:A6:0E:50:BE:86:57:C1:6B
Authority key identifier: DD:FC:31:C5:18:DD:97:15:FD:DE:C9:58:25:27:EC:84:48:D7:84:0D
Certificate issuer: /CN=ddfc31c518dd9715fddec9582527ec8448d7840d
Certificate serial: 01A0D012A2EE5644CD16575CD81FC03BF2FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fwxxRjdlxX93slYJSfshEjXhA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.mft
Manifest number: E5
Signing time: Wed 23 Sep 2026 21:01:17 +0000
Manifest this update: Wed 23 Sep 2026 21:01:17 +0000
Manifest next update: Thu 24 Sep 2026 21:01:17 +0000
Files and hashes: 1: 2rI5z9MKWkWLbN4Ac0mrTh9wI0Q.asa (hash: gEb+fnmGtGeQVf4nv5uRoOoaQszHv4xPq/xVWvjZho4=)
2: 3fwxxRjdlxX93slYJSfshEjXhA0.crl (hash: qyY/zmLdOPEQMqKu7K/Y02+k3YnB5mdVNsu0trgJnaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fwxxRjdlxX93slYJSfshEjXhA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:a2:ee:56:44:cd:16:57:5c:d8:1f:c0:3b:f2:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfc31c518dd9715fddec9582527ec8448d7840d
Validity
Not Before: Sep 23 21:01:17 2026 GMT
Not After : Sep 24 21:01:17 2026 GMT
Subject: CN=22255ba00000da1fdc21d3cfa60e50be8657c16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9c:5d:16:cf:ab:d2:1f:bb:42:d4:cd:d9:4b:
2c:db:a5:f3:1b:47:d9:4b:89:93:e7:3c:33:aa:24:
d9:59:3f:61:65:a3:b4:ab:74:85:9c:8d:ee:4f:58:
56:b7:ec:67:c0:d8:3c:21:fa:dc:7e:33:00:d8:54:
d6:a5:51:2f:7f:8b:47:2c:b1:d2:58:3e:b3:28:f8:
2f:45:07:39:ea:a8:f0:28:cf:c9:d3:42:5b:33:21:
14:56:ad:24:bb:5f:5a:63:68:36:64:95:83:1a:c4:
18:fa:98:fb:e6:8d:26:fa:5f:0e:e6:f8:56:da:29:
f0:7d:22:54:c3:98:15:60:32:a4:8f:2a:b4:87:75:
7a:e7:16:8c:16:01:6a:64:3e:d7:3d:3e:45:00:6f:
54:2f:4c:f6:c3:0d:d7:fc:40:27:25:16:65:f7:3a:
4d:74:ad:b0:e4:f6:fe:ab:91:47:0c:ed:e3:d2:7c:
e5:f0:c2:60:99:7c:8e:91:95:81:2e:1a:80:cc:7a:
b8:eb:9e:33:bf:ff:61:5b:d4:13:b7:eb:28:80:34:
04:c0:03:d9:ef:b9:f4:81:d2:6d:df:a1:7a:06:4a:
3a:b7:5d:dd:64:fb:cf:8e:bf:53:87:4f:72:7d:10:
fa:f2:41:a9:b4:43:28:09:c0:4d:b7:ea:ed:b0:27:
bf:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:25:5B:A0:00:00:DA:1F:DC:21:D3:CF:A6:0E:50:BE:86:57:C1:6B
X509v3 Authority Key Identifier:
keyid:DD:FC:31:C5:18:DD:97:15:FD:DE:C9:58:25:27:EC:84:48:D7:84:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fwxxRjdlxX93slYJSfshEjXhA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:31:ca:67:32:77:ea:15:02:57:0a:c4:09:6d:5b:5f:8c:39:
7b:83:43:b8:e5:ca:bb:f5:39:d4:bf:8e:54:18:f8:04:e5:52:
e6:d5:ba:77:1a:19:ab:0e:36:8c:92:90:58:df:2e:8a:42:51:
04:2e:7c:e7:d1:66:7a:c8:a6:cf:c8:83:b9:55:28:66:cf:75:
d2:f0:73:58:da:75:7e:4a:69:80:fe:17:22:5d:43:36:00:81:
f4:5d:4f:6f:da:54:06:f9:72:95:31:68:ae:93:25:a2:a9:3f:
95:84:82:80:8c:e9:b7:35:34:ad:81:dc:cd:6f:5f:ca:b8:80:
f5:8a:b6:3a:dc:c8:48:d9:52:54:df:51:9f:4a:d6:df:3c:89:
0f:be:35:ba:a2:8b:0c:9b:08:c0:dc:ff:b0:6c:5c:5b:51:d2:
4d:f2:c8:49:b5:28:0c:26:5a:ff:a1:6c:34:e1:8c:9e:5a:43:
3f:43:e5:79:b4:93:5b:c9:74:02:7f:7b:c4:d1:12:0f:bd:e4:
a9:31:91:42:97:ca:2d:fd:d7:37:32:09:24:bf:bf:12:ed:3e:
b2:8a:97:bb:60:ef:b3:8a:bf:5f:00:80:ad:c1:42:04:5e:f3:
af:8d:35:64:24:65:96:b7:f5:16:97:aa:f9:b1:e9:a6:88:40:
a0:c5:b9:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQEqLuVkTNFldc2B/AO/L6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZmMzMWM1MThkZDk3MTVmZGRlYzk1ODI1MjdlYzg0NDhk
Nzg0MGQwHhcNMjYwOTIzMjEwMTE3WhcNMjYwOTI0MjEwMTE3WjAzMTEwLwYDVQQD
EygyMjI1NWJhMDAwMDBkYTFmZGMyMWQzY2ZhNjBlNTBiZTg2NTdjMTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZxdFs+r0h+7QtTN2Uss26XzG0fZ
S4mT5zwzqiTZWT9hZaO0q3SFnI3uT1hWt+xnwNg8IfrcfjMA2FTWpVEvf4tHLLHS
WD6zKPgvRQc56qjwKM/J00JbMyEUVq0ku19aY2g2ZJWDGsQY+pj75o0m+l8O5vhW
2inwfSJUw5gVYDKkjyq0h3V65xaMFgFqZD7XPT5FAG9UL0z2ww3X/EAnJRZl9zpN
dK2w5Pb+q5FHDO3j0nzl8MJgmXyOkZWBLhqAzHq4654zv/9hW9QTt+sogDQEwAPZ
77n0gdJt36F6Bko6t13dZPvPjr9Th09yfRD68kGptEMoCcBNt+rtsCe/owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIlW6AAANof3CHTz6YOUL6GV8FrMB8GA1UdIwQY
MBaAFN38McUY3ZcV/d7JWCUn7IRI14QNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2Z3eHhSamRseFg5M3NsWUpTZnNoRWpYaEEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS85NDk3MjQtOGEzOS00YTA0LWI1ZWUt
NzcyMmExZDlhYTQxLzEvM2Z3eHhSamRseFg5M3NsWUpTZnNoRWpYaEEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS85NDk3MjQtOGEzOS00YTA0LWI1ZWUtNzcyMmExZDlhYTQx
LzEvM2Z3eHhSamRseFg5M3NsWUpTZnNoRWpYaEEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVjHKZzJ3
6hUCVwrECW1bX4w5e4NDuOXKu/U51L+OVBj4BOVS5tW6dxoZqw42jJKQWN8uikJR
BC5859Fmesimz8iDuVUoZs910vBzWNp1fkppgP4XIl1DNgCB9F1Pb9pUBvlylTFo
rpMloqk/lYSCgIzptzU0rYHczW9fyriA9Yq2OtzISNlSVN9Rn0rW3zyJD741uqKL
DJsIwNz/sGxcW1HSTfLISbUoDCZa/6FsNOGMnlpDP0PlebSTW8l0An97xNESD73k
qTGRQpfKLf3XNzIJJL+/Eu0+soqXu2Dvs4q/XwCArcFCBF7zr401ZCRllrf1Fpeq
+bHppohAoMW5Zg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 03:50:52 2026 by rpki-client