Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
File: 3A4l4XpRaWkjpcApZnh0CarJqjY.mft (raw, json)
Hash identifier: Ltn98yYTCHZ+x8VC8xA6cvrTC397duDU3ULU0affADs=
Subject key identifier: 8B:5F:72:64:82:27:41:CC:61:F8:88:24:29:86:9F:EA:70:63:7A:10
Authority key identifier: DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36
Certificate issuer: /CN=dc0e25e17a51696923a5c02966787409aac9aa36
Certificate serial: 01A0D124A4108906FCF001CD76C663AC0DD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
Manifest number: 0DF5
Signing time: Thu 24 Sep 2026 02:00:34 +0000
Manifest this update: Thu 24 Sep 2026 02:00:34 +0000
Manifest next update: Fri 25 Sep 2026 02:00:34 +0000
Files and hashes: 1: 3A4l4XpRaWkjpcApZnh0CarJqjY.crl (hash: EiHFRscrw6FzZWeursRwaV+kOgNOeByJz5vSeA2k/P4=)
2: 8eKxWvb4zfv90IxvIhC6Agnivz8.roa (hash: G16RKdZkVBD70lbGrNUAVc96E/zqs6SATLQUigTHejI=)
3: L7UW-pXnvlYkWrXuWl-BHGTptSA.roa (hash: 1E6LvcCv88x4DMY8tXMsH9q68BaOLR9gOeVWD7ScU5g=)
4: QlpFZfLz1Y4DlrHdUhzjCaGVsGA.roa (hash: gUEpTIDwhLoGCia5nrrt2yolqAa+IzFI1lHWvsOT9xI=)
5: fN8fa7ozPQ5m74ttWUFKBBiIQSc.roa (hash: JResCQGe6T+nLKqGjLFvLBJ3SMA0WiHLKq1Aux/XqUI=)
6: yJQ9nBonMQnEt_O9rr5CmMqvpwA.roa (hash: eo5bnMB5ExtqJKvflsj0G9k/9EeksB8fwhEsz05U4Zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:a4:10:89:06:fc:f0:01:cd:76:c6:63:ac:0d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e25e17a51696923a5c02966787409aac9aa36
Validity
Not Before: Sep 24 02:00:34 2026 GMT
Not After : Sep 25 02:00:34 2026 GMT
Subject: CN=8b5f7264822741cc61f8882429869fea70637a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:43:9c:1f:d7:d9:56:9c:0f:58:19:de:a6:bd:
65:50:dc:f1:ab:97:73:59:d3:a8:79:14:bd:34:22:
44:e4:e8:82:28:e3:60:b7:18:a1:d1:49:e2:21:36:
91:ad:4c:2d:48:25:8a:29:79:94:53:be:ec:ab:42:
79:61:23:2e:64:ab:29:a4:e2:d5:5f:86:0c:99:88:
2c:f9:0d:61:c8:82:ae:45:fe:9c:14:1b:ee:ce:04:
e7:fa:f1:d9:ec:b8:80:26:36:79:c7:34:eb:08:b0:
13:92:55:9d:fd:b5:39:c2:71:b3:fb:ad:7c:c7:39:
25:17:37:c4:fd:6e:8e:0f:3e:1f:8e:39:78:21:ea:
25:7e:cd:d2:2a:17:ab:ff:0b:06:6a:96:32:83:55:
da:56:0b:9c:c3:e7:f7:57:06:f6:73:fd:51:97:c4:
dd:17:25:70:3b:7e:22:e5:8e:5a:bc:b1:ae:09:3e:
96:d4:c4:4a:66:35:b7:b6:a0:62:15:ae:bb:25:e1:
41:9b:9c:70:ae:98:dc:8e:28:ba:e0:f2:92:cb:92:
3c:ab:78:a0:59:98:62:dd:4d:eb:af:f1:ca:02:de:
a1:66:b8:43:4b:00:f8:52:22:fe:dc:24:63:de:7b:
9b:27:c7:3b:86:a0:67:c8:ca:ed:7d:e5:bf:8c:d1:
37:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5F:72:64:82:27:41:CC:61:F8:88:24:29:86:9F:EA:70:63:7A:10
X509v3 Authority Key Identifier:
keyid:DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ba:c0:a6:e2:74:cc:60:ec:ec:24:6c:6f:d4:e0:07:7e:d7:
bc:88:7c:0f:7e:a5:e4:dd:b6:1d:9c:af:0e:96:86:64:9f:1c:
1a:60:5d:19:65:e3:b6:bd:47:0b:96:5a:37:15:c6:52:4b:26:
40:b8:8b:13:17:ea:87:94:be:5b:b6:5e:d3:84:f4:2e:17:9b:
ce:b2:18:1c:aa:e3:ea:29:8d:03:14:5a:04:84:80:7f:6e:c3:
61:d6:c0:b9:bf:7e:87:55:7c:fb:dd:f3:f0:32:b6:8a:4e:c5:
9d:d4:b2:37:5a:84:2a:5e:ca:ec:a7:0c:7c:ed:4e:4e:a1:b8:
fe:e3:52:4f:10:50:88:71:69:69:81:84:bd:b1:6f:80:e6:84:
d5:7b:20:fa:fe:de:01:c7:2c:44:5a:96:86:48:4d:da:de:a6:
22:4d:89:45:bd:c6:9e:3b:d8:41:5f:b1:62:ae:5e:60:e9:d1:
64:bf:b1:cd:bf:2e:d2:7b:a8:b7:dc:2d:cc:05:8d:33:de:53:
aa:6d:31:81:fd:49:25:05:1e:5c:f5:ff:7e:36:66:15:e5:43:
dc:56:b5:76:ee:87:d3:51:34:d3:03:46:18:53:a8:8c:2d:84:
d9:f3:5a:af:e7:6c:76:3c:e6:1c:16:59:ab:d8:0c:77:a3:46:
2d:ab:b2:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRJKQQiQb88AHNdsZjrA3SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMGUyNWUxN2E1MTY5NjkyM2E1YzAyOTY2Nzg3NDA5YWFj
OWFhMzYwHhcNMjYwOTI0MDIwMDM0WhcNMjYwOTI1MDIwMDM0WjAzMTEwLwYDVQQD
Eyg4YjVmNzI2NDgyMjc0MWNjNjFmODg4MjQyOTg2OWZlYTcwNjM3YTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUOcH9fZVpwPWBnepr1lUNzxq5dz
WdOoeRS9NCJE5OiCKONgtxih0UniITaRrUwtSCWKKXmUU77sq0J5YSMuZKsppOLV
X4YMmYgs+Q1hyIKuRf6cFBvuzgTn+vHZ7LiAJjZ5xzTrCLATklWd/bU5wnGz+618
xzklFzfE/W6ODz4fjjl4Ieolfs3SKher/wsGapYyg1XaVgucw+f3Vwb2c/1Rl8Td
FyVwO34i5Y5avLGuCT6W1MRKZjW3tqBiFa67JeFBm5xwrpjcjii64PKSy5I8q3ig
WZhi3U3rr/HKAt6hZrhDSwD4UiL+3CRj3nubJ8c7hqBnyMrtfeW/jNE31wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItfcmSCJ0HMYfiIJCmGn+pwY3oQMB8GA1UdIwQY
MBaAFNwOJeF6UWlpI6XAKWZ4dAmqyao2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0E0bDRYcFJhV2tqcGNBcFpuaDBDYXJKcWpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8yY2M0NmMtOGM1MS00MzMwLWI2MjMt
MTgzNWNjOGExZDlkLzEvM0E0bDRYcFJhV2tqcGNBcFpuaDBDYXJKcWpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8yY2M0NmMtOGM1MS00MzMwLWI2MjMtMTgzNWNjOGExZDlk
LzEvM0E0bDRYcFJhV2tqcGNBcFpuaDBDYXJKcWpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMrrApuJ0
zGDs7CRsb9TgB37XvIh8D36l5N22HZyvDpaGZJ8cGmBdGWXjtr1HC5ZaNxXGUksm
QLiLExfqh5S+W7Ze04T0LhebzrIYHKrj6imNAxRaBISAf27DYdbAub9+h1V8+93z
8DK2ik7FndSyN1qEKl7K7KcMfO1OTqG4/uNSTxBQiHFpaYGEvbFvgOaE1Xsg+v7e
AccsRFqWhkhN2t6mIk2JRb3GnjvYQV+xYq5eYOnRZL+xzb8u0nuot9wtzAWNM95T
qm0xgf1JJQUeXPX/fjZmFeVD3Fa1du6H01E00wNGGFOojC2E2fNar+dsdjzmHBZZ
q9gMd6NGLauy1w==
-----END CERTIFICATE-----
Generated at Thu Sep 24 12:21:52 2026 by rpki-client