Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
File: 3AveFGeJXG86Rxl-rFjKE65Lt40.mft (raw, json)
Hash identifier: 9NobcyPELXV6U/taOfrFKuVTk5XrPAmrmXgaKX8kRtE=
Subject key identifier: C9:46:40:15:FA:40:6E:FD:C3:06:AD:EB:28:FB:A2:D7:1C:42:0B:20
Authority key identifier: DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
Certificate issuer: /CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Certificate serial: 01A0D94C9AA4BF336FE418DEB828DCF05B73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
Manifest number: 08FD
Signing time: Fri 25 Sep 2026 16:01:11 +0000
Manifest this update: Fri 25 Sep 2026 16:01:11 +0000
Manifest next update: Sat 26 Sep 2026 16:01:11 +0000
Files and hashes: 1: 3AveFGeJXG86Rxl-rFjKE65Lt40.crl (hash: Z3oouPSJLd1z0O8EcqW9FNDPlbNjtPF77CpX6cfeOqo=)
2: NQ95q7_fBq4hFcM7C69i14yhMnM.roa (hash: ejJOBDnYVVoI5WWCPtoXZfJQheFohOE2AVvhuxDWrtI=)
3: ae4EtHkHmRI0m5Ml2TfcxeUvfu0.roa (hash: lJHCnas8LIhDFnL2smTrrZd3UA35rr5s7gwOcROW5No=)
4: pUGXrda-5CwDfT8dIuT70gU_mF0.roa (hash: erT2OQfqvKXCpo5RhfMrTrP52PKYM1WR0OlhH7BXo1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4c:9a:a4:bf:33:6f:e4:18:de:b8:28:dc:f0:5b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Validity
Not Before: Sep 25 16:01:11 2026 GMT
Not After : Sep 26 16:01:11 2026 GMT
Subject: CN=c9464015fa406efdc306adeb28fba2d71c420b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:81:d5:9e:ab:f1:5e:8b:2b:eb:4a:29:50:ad:
fa:bd:c4:50:cf:4d:21:56:a0:9a:5d:56:59:e6:64:
d4:0a:96:4c:e6:a5:9c:ff:ca:24:97:17:aa:76:f3:
2b:86:5c:d4:f1:65:e8:47:ad:27:7c:b7:af:c0:e1:
52:fd:99:56:6c:cd:4d:85:f5:ac:df:d5:2c:8a:18:
69:36:de:e6:60:56:70:85:65:d4:36:28:07:d4:0f:
f2:70:07:07:e0:0f:74:d3:15:c5:e7:ba:b8:b2:4c:
6f:cf:78:85:06:60:d0:aa:58:e9:61:00:1d:a1:ee:
8f:e4:77:44:91:fb:bc:f8:ef:d6:64:76:ff:9b:7d:
07:97:13:02:e8:b3:e7:48:76:0c:ee:46:b3:b6:c0:
22:8f:38:e9:e0:e6:ff:69:61:68:a7:54:88:6a:82:
62:d3:84:63:fb:36:89:8c:14:7c:ca:be:aa:76:92:
79:0a:d1:88:08:9b:db:76:4f:9b:3e:6a:19:c2:bb:
3f:d6:57:5f:07:b1:44:87:c7:26:b9:84:d0:b4:15:
6b:2f:df:d8:ea:76:a6:9a:69:67:e0:f0:58:1f:9a:
75:4b:6b:e4:ae:e1:39:4d:e6:bc:49:4a:de:c7:42:
4b:24:d5:8d:dd:98:ef:6c:c4:60:c9:66:96:50:4f:
3e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:46:40:15:FA:40:6E:FD:C3:06:AD:EB:28:FB:A2:D7:1C:42:0B:20
X509v3 Authority Key Identifier:
keyid:DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:67:71:fc:db:b7:d0:b8:17:eb:9a:9e:17:99:42:c2:ed:cc:
42:9a:1b:6d:a8:96:bf:b6:a5:32:43:d1:41:c1:52:58:66:22:
03:5d:66:22:fd:81:92:f6:c0:fa:96:15:be:3f:7e:f1:ea:83:
91:08:03:d6:84:05:7a:79:83:9c:f7:e5:f0:50:fd:5f:98:74:
36:00:b9:0f:3f:c9:d2:39:fe:4e:d2:d3:ec:a1:77:bf:04:99:
9c:c6:75:c4:27:95:a7:6d:66:9a:e8:ef:67:0e:99:ef:a3:7a:
ff:4e:7f:73:52:80:cb:a3:90:ea:d2:6c:1b:10:36:d3:f1:a6:
3e:92:0a:c0:61:73:85:33:84:ab:0d:f5:93:68:a2:88:a1:a1:
8a:29:84:e6:fc:c9:62:40:a0:f5:56:5e:e1:e0:1a:f6:4e:f9:
6c:f5:b2:0b:1f:01:ae:cd:94:70:e0:85:d4:5f:53:b4:4b:e7:
eb:98:1a:55:f8:3f:0e:8f:c9:d9:d4:bd:fd:49:02:59:97:b1:
f5:ab:69:e3:07:c9:ab:92:72:7b:83:16:94:9d:53:69:0b:2e:
64:9e:26:bb:97:54:52:b2:2f:d1:d9:1a:bf:ce:c0:ca:7d:95:
e1:60:07:ad:55:fe:5e:f2:75:2d:8d:f8:b1:d0:33:9f:be:6b:
50:9b:7c:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZTJqkvzNv5BjeuCjc8FtzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMGJkZTE0Njc4OTVjNmYzYTQ3MTk3ZWFjNThjYTEzYWU0
YmI3OGQwHhcNMjYwOTI1MTYwMTExWhcNMjYwOTI2MTYwMTExWjAzMTEwLwYDVQQD
EyhjOTQ2NDAxNWZhNDA2ZWZkYzMwNmFkZWIyOGZiYTJkNzFjNDIwYjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YHVnqvxXosr60opUK36vcRQz00h
VqCaXVZZ5mTUCpZM5qWc/8oklxeqdvMrhlzU8WXoR60nfLevwOFS/ZlWbM1NhfWs
39UsihhpNt7mYFZwhWXUNigH1A/ycAcH4A900xXF57q4skxvz3iFBmDQqljpYQAd
oe6P5HdEkfu8+O/WZHb/m30HlxMC6LPnSHYM7kaztsAijzjp4Ob/aWFop1SIaoJi
04Rj+zaJjBR8yr6qdpJ5CtGICJvbdk+bPmoZwrs/1ldfB7FEh8cmuYTQtBVrL9/Y
6nammmln4PBYH5p1S2vkruE5Tea8SUrex0JLJNWN3ZjvbMRgyWaWUE8+XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlGQBX6QG79wwat6yj7otccQgsgMB8GA1UdIwQY
MBaAFNwL3hRniVxvOkcZfqxYyhOuS7eNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0F2ZUZHZUpYRzg2UnhsLXJGaktFNjVMdDQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9jZjA2M2YtOTQ5My00NmYxLWFjZDEt
MzFjN2ZiNDcxNWY2LzEvM0F2ZUZHZUpYRzg2UnhsLXJGaktFNjVMdDQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9jZjA2M2YtOTQ5My00NmYxLWFjZDEtMzFjN2ZiNDcxNWY2
LzEvM0F2ZUZHZUpYRzg2UnhsLXJGaktFNjVMdDQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKWdx/Nu3
0LgX65qeF5lCwu3MQpobbaiWv7alMkPRQcFSWGYiA11mIv2BkvbA+pYVvj9+8eqD
kQgD1oQFenmDnPfl8FD9X5h0NgC5Dz/J0jn+TtLT7KF3vwSZnMZ1xCeVp21mmujv
Zw6Z76N6/05/c1KAy6OQ6tJsGxA20/GmPpIKwGFzhTOEqw31k2iiiKGhiimE5vzJ
YkCg9VZe4eAa9k75bPWyCx8Brs2UcOCF1F9TtEvn65gaVfg/Do/J2dS9/UkCWZex
9atp4wfJq5Jye4MWlJ1TaQsuZJ4mu5dUUrIv0dkav87Ayn2V4WAHrVX+XvJ1LY34
sdAzn75rUJt8cA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 21:31:28 2026 by rpki-client