Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
File: 3sDxT6yN2zSANygAdsw2YU2jBew.mft (raw, json)
Hash identifier: n8jBHBLYXa0RgGEWrQiD0UTUGAx3Wz8gXPY8SLCI/RA=
Subject key identifier: B2:A1:DD:8B:C1:15:2B:6D:84:4B:A5:EA:17:5C:0C:AD:45:0E:C1:51
Authority key identifier: DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC
Certificate issuer: /CN=dec0f14fac8ddb348037280076cc36614da305ec
Certificate serial: 01A0CE91DA5CAAD4F7C8B405161A3A1AD324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 14:01:00 +0000
Manifest this update: Wed 23 Sep 2026 14:01:00 +0000
Manifest next update: Thu 24 Sep 2026 14:01:00 +0000
Files and hashes: 1: 3sDxT6yN2zSANygAdsw2YU2jBew.crl (hash: zX/KOvqjuSqjFO9Bik3JEkzRQ11cqyPl4E/SMDRYhfc=)
2: 6jm1c5ao4TIq41DDCm24Gn-cCvM.roa (hash: DHj5HqftZAg5kJDUChpZMa9puMwdu/NpQqmWhiH73fE=)
3: vN3X2gJyA-NaxHofhY9qNnlihiU.roa (hash: vFhwABOyS5jHOyrs6cugyR9qcbRtTvsFb7emOoRjLdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:da:5c:aa:d4:f7:c8:b4:05:16:1a:3a:1a:d3:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec0f14fac8ddb348037280076cc36614da305ec
Validity
Not Before: Sep 23 14:01:00 2026 GMT
Not After : Sep 24 14:01:00 2026 GMT
Subject: CN=b2a1dd8bc1152b6d844ba5ea175c0cad450ec151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:86:59:a4:73:53:f1:59:77:b4:6e:3d:23:5d:
f6:96:b3:bd:7e:97:90:cc:d3:1c:bd:c9:38:fa:f7:
5a:5c:cd:91:18:9d:41:4e:49:c3:e9:5b:34:f5:3f:
45:dc:48:5b:e0:64:7c:79:da:ab:a0:8e:ac:85:bf:
06:4f:3d:dd:2f:24:eb:1f:34:7b:2d:34:e2:c7:f7:
a7:48:d6:da:93:60:8f:a5:cb:5f:a8:e4:2a:e3:5f:
93:46:04:e8:61:a3:db:83:10:04:ab:9a:e4:9c:bb:
69:ae:96:c0:5c:75:e7:ec:f2:4b:36:41:ff:21:47:
c5:a5:fe:7c:1d:ea:59:a1:42:07:04:b5:7a:4f:29:
e8:81:25:e6:37:b1:01:eb:7e:88:ab:d8:93:a1:62:
55:5e:c5:cd:b0:18:00:5b:19:da:2d:69:4d:af:23:
86:a6:55:22:dc:fd:0f:65:fe:c8:3f:d2:05:ab:6c:
0b:ab:32:bb:0d:cb:7f:ac:d9:44:cc:4f:d0:71:54:
d6:12:df:d8:1e:19:30:20:9f:22:9e:3a:35:34:e0:
cd:6b:15:24:8b:f6:cc:5f:1d:9d:10:0e:3f:8d:44:
5b:fd:32:85:58:df:b8:33:53:98:50:71:9e:e2:4c:
11:70:79:4f:93:b2:9a:87:e3:a3:21:f3:aa:07:5b:
c4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A1:DD:8B:C1:15:2B:6D:84:4B:A5:EA:17:5C:0C:AD:45:0E:C1:51
X509v3 Authority Key Identifier:
keyid:DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:16:69:f3:43:17:0f:fe:82:b3:75:81:89:63:70:75:41:a5:
25:7e:c0:6e:3c:38:4c:22:fe:09:a9:66:61:ab:28:40:7a:29:
84:fe:9f:00:c2:0b:06:c5:20:12:12:c4:57:26:e9:e4:2b:a2:
d4:94:aa:eb:f5:18:ba:68:40:ae:0c:c1:81:96:5c:4f:d3:89:
59:94:81:37:c7:e2:d8:9b:58:af:05:6b:17:93:4c:16:ae:ad:
67:ed:01:c4:ab:95:c8:8e:72:fd:84:c2:d0:b2:13:c3:09:36:
97:20:db:e2:f3:83:cc:41:1a:52:01:81:7b:72:1a:2e:47:6d:
b2:96:48:80:7e:af:18:df:bc:d0:3d:71:bf:cc:f6:73:eb:42:
4d:ea:c7:e5:7c:3a:27:a0:0e:c9:de:be:0d:46:72:27:88:8f:
5e:95:00:0b:ae:93:a5:f4:05:ad:4e:1b:fc:8f:8c:f7:b5:dc:
6f:57:cb:e7:42:0d:7e:65:ad:a3:6e:14:94:75:6b:c6:25:bf:
7f:ff:bc:74:b0:93:0d:03:69:b1:30:25:fa:3f:f7:a5:f4:d6:
22:b5:d3:7f:a1:5b:3b:a5:1b:24:a7:e1:e2:05:b5:33:f9:98:
0a:00:fa:62:fe:24:9a:ed:15:1c:fa:eb:ea:0d:d5:63:b8:14:
c6:db:3f:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOkdpcqtT3yLQFFho6GtMkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYzBmMTRmYWM4ZGRiMzQ4MDM3MjgwMDc2Y2MzNjYxNGRh
MzA1ZWMwHhcNMjYwOTIzMTQwMTAwWhcNMjYwOTI0MTQwMTAwWjAzMTEwLwYDVQQD
EyhiMmExZGQ4YmMxMTUyYjZkODQ0YmE1ZWExNzVjMGNhZDQ1MGVjMTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oZZpHNT8Vl3tG49I132lrO9fpeQ
zNMcvck4+vdaXM2RGJ1BTknD6Vs09T9F3Ehb4GR8edqroI6shb8GTz3dLyTrHzR7
LTTix/enSNbak2CPpctfqOQq41+TRgToYaPbgxAEq5rknLtprpbAXHXn7PJLNkH/
IUfFpf58HepZoUIHBLV6TynogSXmN7EB636Iq9iToWJVXsXNsBgAWxnaLWlNryOG
plUi3P0PZf7IP9IFq2wLqzK7Dct/rNlEzE/QcVTWEt/YHhkwIJ8injo1NODNaxUk
i/bMXx2dEA4/jURb/TKFWN+4M1OYUHGe4kwRcHlPk7Kah+OjIfOqB1vEBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLKh3YvBFStthEul6hdcDK1FDsFRMB8GA1UdIwQY
MBaAFN7A8U+sjds0gDcoAHbMNmFNowXsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3NEeFQ2eU4yelNBTnlnQWRzdzJZVTJqQmV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wMGE5ZjktMTRhMS00Yzk2LTgyMjMt
ZWViNmZkMzJlOTJmLzEvM3NEeFQ2eU4yelNBTnlnQWRzdzJZVTJqQmV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8wMGE5ZjktMTRhMS00Yzk2LTgyMjMtZWViNmZkMzJlOTJm
LzEvM3NEeFQ2eU4yelNBTnlnQWRzdzJZVTJqQmV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsBZp80MX
D/6Cs3WBiWNwdUGlJX7Abjw4TCL+CalmYasoQHophP6fAMILBsUgEhLEVybp5Cui
1JSq6/UYumhArgzBgZZcT9OJWZSBN8fi2JtYrwVrF5NMFq6tZ+0BxKuVyI5y/YTC
0LITwwk2lyDb4vODzEEaUgGBe3IaLkdtspZIgH6vGN+80D1xv8z2c+tCTerH5Xw6
J6AOyd6+DUZyJ4iPXpUAC66TpfQFrU4b/I+M97Xcb1fL50INfmWto24UlHVrxiW/
f/+8dLCTDQNpsTAl+j/3pfTWIrXTf6FbO6UbJKfh4gW1M/mYCgD6Yv4kmu0VHPrr
6g3VY7gUxts/IA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:49:30 2026 by rpki-client