Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
File: 3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft (raw, json)
Hash identifier: /diPMvXKrEx8u+Qtyms+H8Gcak6eQi3b0bScRl8dKTs=
Subject key identifier: A7:23:1F:93:A6:22:8A:03:7E:88:44:2C:F0:99:48:26:F1:BE:FE:CF
Authority key identifier: DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
Certificate issuer: /CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Certificate serial: 01A0CEFFEA1F4F0337C441915B036EE06364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
Manifest number: 124C
Signing time: Wed 23 Sep 2026 16:01:12 +0000
Manifest this update: Wed 23 Sep 2026 16:01:12 +0000
Manifest next update: Thu 24 Sep 2026 16:01:12 +0000
Files and hashes: 1: 3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl (hash: kH5ssgKnDaPeh4ATxSi915vomfuGY0bYJ3qbmE5DNes=)
2: ZupcI2nbSj0kv3bOiTJw_7ju_nM.roa (hash: 8lfURhp4+6wvfeyaLwrd59nHvD9zLaiHI+8CWa149w4=)
3: uRzlID_nfuupcIGUXbHpyyUrxts.roa (hash: 5LvqBXGtCHTt2jvIwKxCsctM10tlaiQJ5CWlpcE9cx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:ea:1f:4f:03:37:c4:41:91:5b:03:6e:e0:63:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Validity
Not Before: Sep 23 16:01:12 2026 GMT
Not After : Sep 24 16:01:12 2026 GMT
Subject: CN=a7231f93a6228a037e88442cf0994826f1befecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:56:8a:83:7b:d8:9b:b2:c6:28:32:e5:a9:7a:
39:7c:ab:d9:5b:b2:9e:78:f8:b2:b2:52:e8:36:20:
9a:53:f0:fe:d7:4b:c4:e7:5d:0f:2f:b2:c4:60:00:
1d:08:1b:02:ea:93:a6:3c:fd:33:5b:5b:04:ab:ec:
8d:fb:b5:ec:0a:ba:6f:fa:5f:fa:6a:ac:c9:ec:3d:
5c:ad:50:56:53:d3:89:08:ea:ef:c5:06:62:b9:3c:
90:d5:b9:c0:61:c1:ba:46:bc:ee:c7:ee:35:cf:22:
9f:ab:e4:f8:51:93:d1:1a:08:9f:94:11:eb:16:ab:
6f:7c:f4:4b:ed:4b:b6:c3:72:3b:bd:3d:37:cd:08:
7c:cc:6d:7f:6b:9f:36:1b:f1:af:17:65:4d:0a:15:
05:cd:c4:10:a1:c8:b1:45:7a:16:55:b4:2b:09:fa:
41:aa:67:21:eb:6a:0a:89:3c:18:34:5e:71:e2:76:
d6:9f:5d:f0:66:9c:f5:31:ba:12:3d:69:a6:56:53:
dd:ef:3c:34:48:9d:9c:32:fb:b5:c2:1a:f6:19:cf:
55:1f:1d:d3:a5:84:6f:56:80:c7:53:2a:c5:28:68:
b0:58:9a:b5:ab:a0:a0:56:06:14:29:fd:1f:04:2e:
b1:6e:25:87:f2:56:db:2f:fa:1b:e6:37:a8:91:1e:
98:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:23:1F:93:A6:22:8A:03:7E:88:44:2C:F0:99:48:26:F1:BE:FE:CF
X509v3 Authority Key Identifier:
keyid:DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:42:03:5f:6b:c9:c2:1e:28:c7:08:3f:68:e8:c4:7e:9b:f2:
dc:85:68:88:15:18:dd:34:17:f1:33:6a:83:e6:39:37:86:f1:
d4:b6:eb:80:7a:d5:54:3b:b0:07:c2:03:16:75:9e:63:48:4c:
ce:3d:7d:35:9c:95:0f:5b:22:c5:99:19:35:cf:2c:6a:a7:bd:
5e:4a:78:5e:66:1f:bf:13:c5:b6:35:28:5b:da:c4:d1:d6:15:
bf:b3:2f:ae:fb:9d:15:7f:f7:99:77:1a:1d:e3:78:f8:db:a4:
4c:41:12:2c:24:c0:4a:1c:ba:bc:4a:81:95:fa:c6:ee:8e:7e:
d1:f4:bb:a3:97:02:c4:ba:b2:5a:2a:ae:ad:55:4d:b7:ce:53:
40:4f:d0:47:19:00:67:25:16:72:59:aa:10:b3:c7:70:da:ac:
83:ee:92:b5:44:a8:4a:a7:82:4d:2c:0f:88:dd:d0:61:9c:da:
9d:4f:81:5e:5d:3e:fd:8f:63:94:b1:96:02:9c:28:8c:4a:99:
12:a4:e1:81:83:b4:ca:6e:a0:ca:98:d1:8e:4e:5e:7c:a8:c1:
9a:ea:24:e4:08:a2:7b:5d:3c:4d:10:69:ad:7a:53:1b:c2:0c:
5e:e2:b9:9a:42:04:db:e4:9d:d7:4d:73:34:4c:b3:54:a6:42:
1e:60:5d:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDO/+ofTwM3xEGRWwNu4GNkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNjkxNzY0NWQ5ZDIyMDQzNWY5MWM3ZTQ2YzgxMTBjZjg5
YWNiZTQwHhcNMjYwOTIzMTYwMTEyWhcNMjYwOTI0MTYwMTEyWjAzMTEwLwYDVQQD
EyhhNzIzMWY5M2E2MjI4YTAzN2U4ODQ0MmNmMDk5NDgyNmYxYmVmZWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7VaKg3vYm7LGKDLlqXo5fKvZW7Ke
ePiyslLoNiCaU/D+10vE510PL7LEYAAdCBsC6pOmPP0zW1sEq+yN+7XsCrpv+l/6
aqzJ7D1crVBWU9OJCOrvxQZiuTyQ1bnAYcG6Rrzux+41zyKfq+T4UZPRGgiflBHr
FqtvfPRL7Uu2w3I7vT03zQh8zG1/a582G/GvF2VNChUFzcQQocixRXoWVbQrCfpB
qmch62oKiTwYNF5x4nbWn13wZpz1MboSPWmmVlPd7zw0SJ2cMvu1whr2Gc9VHx3T
pYRvVoDHUyrFKGiwWJq1q6CgVgYUKf0fBC6xbiWH8lbbL/ob5jeokR6Y4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKcjH5OmIooDfohELPCZSCbxvv7PMB8GA1UdIwQY
MBaAFNxpF2RdnSIENfkcfkbIEQz4msvkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0drWFpGMmRJZ1ExLVJ4LVJzZ1JEUGlheS1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zNTQ0YTctZDU1Ni00NzAxLTk1N2Et
NDI4YmU5MDA4ZmJhLzEvM0drWFpGMmRJZ1ExLVJ4LVJzZ1JEUGlheS1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zNTQ0YTctZDU1Ni00NzAxLTk1N2EtNDI4YmU5MDA4ZmJh
LzEvM0drWFpGMmRJZ1ExLVJ4LVJzZ1JEUGlheS1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiUIDX2vJ
wh4oxwg/aOjEfpvy3IVoiBUY3TQX8TNqg+Y5N4bx1LbrgHrVVDuwB8IDFnWeY0hM
zj19NZyVD1sixZkZNc8saqe9Xkp4XmYfvxPFtjUoW9rE0dYVv7MvrvudFX/3mXca
HeN4+NukTEESLCTAShy6vEqBlfrG7o5+0fS7o5cCxLqyWiqurVVNt85TQE/QRxkA
ZyUWclmqELPHcNqsg+6StUSoSqeCTSwPiN3QYZzanU+BXl0+/Y9jlLGWApwojEqZ
EqThgYO0ym6gypjRjk5efKjBmuok5Aiie108TRBprXpTG8IMXuK5mkIE2+Sd101z
NEyzVKZCHmBdsA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 01:56:26 2026 by rpki-client