Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
File: 3t-aZxvPF4nBtaw2MMdBvlYNraA.mft (raw, json)
Hash identifier: NDBuqiVIX5mIqUpJcu6r5uamqC/BeTYg4zNWXPmamo0=
Subject key identifier: 71:86:D4:E9:EF:E0:1D:8E:91:7B:2E:29:41:3D:60:C7:50:1E:C0:08
Authority key identifier: DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0
Certificate issuer: /CN=dedf9a671bcf1789c1b5ac3630c741be560dada0
Certificate serial: 01A0CB5933922CE3AEDCECCAB12FEB5BDEA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
Manifest number: 15E0
Signing time: Tue 22 Sep 2026 23:00:15 +0000
Manifest this update: Tue 22 Sep 2026 23:00:15 +0000
Manifest next update: Wed 23 Sep 2026 23:00:15 +0000
Files and hashes: 1: 3t-aZxvPF4nBtaw2MMdBvlYNraA.crl (hash: RQNwz+rh8eUzpwoJEr6P2Xqwe0ESCYewh4tLo2cgjjY=)
2: fy5Vxpj8Cp8uUIkOIqYsyPIJp9o.roa (hash: dPwdrijrUmXn5KvoJ9i354gs58IETiu1sAxzaL3DK6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:33:92:2c:e3:ae:dc:ec:ca:b1:2f:eb:5b:de:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedf9a671bcf1789c1b5ac3630c741be560dada0
Validity
Not Before: Sep 22 23:00:15 2026 GMT
Not After : Sep 23 23:00:15 2026 GMT
Subject: CN=7186d4e9efe01d8e917b2e29413d60c7501ec008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ab:e2:ec:77:6b:e8:69:3e:a3:38:5e:1c:38:
9e:38:40:2e:26:f1:1b:6e:e7:e4:3a:3d:c0:07:69:
8c:4a:2a:68:fa:3d:ad:fb:7d:d0:f8:53:90:33:c3:
1f:1b:0d:3e:bd:a5:5a:2f:59:17:53:86:3c:31:29:
ab:cb:a3:97:e1:c7:9d:12:4f:5a:8f:35:ae:62:ad:
23:f4:80:8a:c2:ed:ad:a3:c6:31:57:73:61:33:71:
3b:74:91:35:f5:64:e4:7b:54:fd:e7:80:84:26:75:
96:70:52:54:8b:f4:10:62:2d:50:a3:d3:3c:5e:f3:
c1:6c:36:a5:39:59:90:ea:97:8b:b4:c0:74:e4:11:
72:b2:48:92:81:32:c4:06:09:0c:93:27:63:38:e6:
74:85:e9:f7:7c:8d:96:4c:b7:1f:43:82:1e:54:3f:
75:8d:5e:67:4f:8e:67:fe:ac:e7:ba:ae:77:89:76:
61:ce:f7:2c:ca:8a:c8:88:a7:cb:b8:30:39:e2:fb:
79:3c:97:42:19:10:8f:c7:bd:af:03:d4:75:de:91:
19:96:60:d4:de:12:bc:57:42:06:77:3a:42:d0:76:
f2:99:9a:57:82:00:eb:0d:ec:be:44:fc:cb:54:44:
7a:ab:9a:5d:c1:76:0b:bb:67:ea:07:76:7f:04:21:
01:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:86:D4:E9:EF:E0:1D:8E:91:7B:2E:29:41:3D:60:C7:50:1E:C0:08
X509v3 Authority Key Identifier:
keyid:DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:25:07:b8:6a:3d:be:60:01:46:35:72:03:9e:27:55:35:12:
ae:05:dd:19:1d:e7:d8:83:64:5b:2f:0d:81:8b:e4:79:76:5e:
82:92:9a:39:ba:0b:02:bb:14:a6:d1:05:5a:56:05:9f:40:7a:
7a:fd:3a:1f:37:e8:66:af:cb:dd:7d:1b:37:73:0f:1e:83:42:
64:07:a6:cc:91:c7:2d:95:e8:7c:45:5f:24:1d:62:67:86:bf:
21:d2:ea:a5:fc:fa:52:e1:3e:e8:52:38:64:ff:e2:2d:b9:b6:
e0:02:00:78:c9:10:ff:db:93:78:ad:6c:c5:e4:90:42:12:ab:
4f:cc:d0:e9:6b:65:ae:68:55:0a:7c:18:a5:8c:de:db:00:d1:
81:00:46:cc:ba:58:3d:45:de:88:64:e6:e7:ba:1d:85:aa:99:
01:53:70:a2:03:29:e4:4b:df:b7:d5:59:4d:aa:f5:bf:f5:24:
c2:0a:22:29:eb:24:69:2f:18:21:9b:93:07:58:67:54:a8:d1:
90:ea:48:11:92:a0:df:5c:97:56:02:64:4c:f1:8c:e6:b7:be:
93:65:65:f3:bc:43:65:44:70:9b:a9:4d:4a:8b:df:99:de:42:
d3:72:a2:4d:1f:7f:76:59:71:fd:68:81:1d:41:7d:b4:5c:9c:
65:ab:fc:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLWTOSLOOu3OzKsS/rW96jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZGY5YTY3MWJjZjE3ODljMWI1YWMzNjMwYzc0MWJlNTYw
ZGFkYTAwHhcNMjYwOTIyMjMwMDE1WhcNMjYwOTIzMjMwMDE1WjAzMTEwLwYDVQQD
Eyg3MTg2ZDRlOWVmZTAxZDhlOTE3YjJlMjk0MTNkNjBjNzUwMWVjMDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKvi7Hdr6Gk+ozheHDieOEAuJvEb
bufkOj3AB2mMSipo+j2t+33Q+FOQM8MfGw0+vaVaL1kXU4Y8MSmry6OX4cedEk9a
jzWuYq0j9ICKwu2to8YxV3NhM3E7dJE19WTke1T954CEJnWWcFJUi/QQYi1Qo9M8
XvPBbDalOVmQ6peLtMB05BFyskiSgTLEBgkMkydjOOZ0hen3fI2WTLcfQ4IeVD91
jV5nT45n/qznuq53iXZhzvcsyorIiKfLuDA54vt5PJdCGRCPx72vA9R13pEZlmDU
3hK8V0IGdzpC0HbymZpXggDrDey+RPzLVER6q5pdwXYLu2fqB3Z/BCEBEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGG1Onv4B2OkXsuKUE9YMdQHsAIMB8GA1UdIwQY
MBaAFN7fmmcbzxeJwbWsNjDHQb5WDa2gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3QtYVp4dlBGNG5CdGF3Mk1NZEJ2bFlOcmFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iYjEzOTYtOWMwNS00ZTE3LWJiYzUt
Nzc2NjA1MDFjNDc4LzEvM3QtYVp4dlBGNG5CdGF3Mk1NZEJ2bFlOcmFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9iYjEzOTYtOWMwNS00ZTE3LWJiYzUtNzc2NjA1MDFjNDc4
LzEvM3QtYVp4dlBGNG5CdGF3Mk1NZEJ2bFlOcmFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACSUHuGo9
vmABRjVyA54nVTUSrgXdGR3n2INkWy8NgYvkeXZegpKaOboLArsUptEFWlYFn0B6
ev06HzfoZq/L3X0bN3MPHoNCZAemzJHHLZXofEVfJB1iZ4a/IdLqpfz6UuE+6FI4
ZP/iLbm24AIAeMkQ/9uTeK1sxeSQQhKrT8zQ6WtlrmhVCnwYpYze2wDRgQBGzLpY
PUXeiGTm57odhaqZAVNwogMp5Evft9VZTar1v/UkwgoiKeskaS8YIZuTB1hnVKjR
kOpIEZKg31yXVgJkTPGM5re+k2Vl87xDZURwm6lNSovfmd5C03KiTR9/dllx/WiB
HUF9tFycZav8Vw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 05:53:37 2026 by rpki-client