Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
File: 3A4bkNUSzDQC92FBQGKXleTUrEw.mft (raw, json)
Hash identifier: frkc5CAdpYJ16jfphQu3ZyOe66EIZyi6lC9p28hOa8Y=
Subject key identifier: F3:46:DB:ED:EF:91:25:25:70:92:57:20:BF:E5:40:2F:10:55:D6:AF
Authority key identifier: DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
Certificate issuer: /CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Certificate serial: 01A0D83C557F9E039846B66FC246E97D33D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
Manifest number: 1582
Signing time: Fri 25 Sep 2026 11:03:47 +0000
Manifest this update: Fri 25 Sep 2026 11:03:47 +0000
Manifest next update: Sat 26 Sep 2026 11:03:47 +0000
Files and hashes: 1: 3A4bkNUSzDQC92FBQGKXleTUrEw.crl (hash: yRWG7YxEVvfom7Ytx6SXoHfAG8WNGz00pv0BquySf28=)
2: oglaQX4nFsIGr-Rok7QLUW7-tlM.roa (hash: s+KJpOp9hYCyRUjA+Of2ZWgASyr4epw2ZvVJ2zuqMSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3c:55:7f:9e:03:98:46:b6:6f:c2:46:e9:7d:33:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Validity
Not Before: Sep 25 11:03:47 2026 GMT
Not After : Sep 26 11:03:47 2026 GMT
Subject: CN=f346dbedef91252570925720bfe5402f1055d6af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bd:75:65:08:90:4c:b3:3d:0f:0c:49:2e:62:
53:e6:83:d9:8e:80:d8:43:e1:4b:4d:a6:67:86:a4:
1a:68:d5:11:1c:39:3c:27:09:50:19:2c:1e:0d:27:
64:b9:77:9e:f5:3e:ce:a0:6b:54:b9:ed:de:0b:36:
16:59:a1:6f:19:8e:33:50:9d:ab:64:72:c1:5d:f5:
25:2c:32:fb:a9:93:43:94:43:db:74:43:77:25:25:
dc:d0:2b:8e:1f:02:25:d4:9c:92:93:d1:40:0e:eb:
1c:b2:17:e1:c1:88:ea:09:a7:19:0c:2c:37:9a:86:
b9:ba:8f:51:4b:1c:3f:4b:ca:a4:51:2a:67:84:4d:
f2:ff:95:b9:1e:c5:00:3f:b4:fb:fa:d8:6d:c0:a4:
2b:24:2e:f5:04:f6:ef:bf:9d:54:d8:9a:47:29:3d:
cf:5b:db:18:10:1a:fb:b6:73:ad:00:78:e3:ee:63:
e4:60:99:85:e5:ac:7c:94:1f:ac:23:60:c1:bf:8b:
06:eb:44:60:81:ed:52:c8:49:70:d8:10:9f:e9:75:
b3:23:54:a4:a2:01:2c:62:f2:a3:55:3c:27:67:eb:
0b:32:7d:78:b3:d5:28:cd:5d:1c:39:16:1d:56:87:
1f:52:ca:f4:cb:68:2a:34:1b:68:f7:9e:43:dd:7e:
51:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:46:DB:ED:EF:91:25:25:70:92:57:20:BF:E5:40:2F:10:55:D6:AF
X509v3 Authority Key Identifier:
keyid:DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:58:b0:ba:0f:65:a7:6e:5f:77:fe:41:7d:f3:35:08:00:97:
92:c4:21:c8:79:20:54:a3:3f:c7:6f:78:7a:b9:77:59:59:d9:
c2:03:1a:af:3a:3f:c9:7e:92:f0:3a:10:fb:5c:c4:c5:89:26:
18:34:89:e0:8d:34:43:12:06:fa:73:19:36:37:81:1d:6b:de:
4e:3e:9d:c4:27:c0:1a:d9:b9:63:32:7b:37:2a:f7:9f:1a:43:
1c:44:0d:06:0b:99:f3:e4:89:61:6a:7c:aa:73:f0:73:64:e5:
69:c9:d4:6a:2a:eb:11:33:37:7c:9b:70:e1:cf:7e:68:39:f2:
59:17:a1:e8:3f:b9:6a:b8:e5:8f:c4:c6:88:c7:aa:ce:be:e3:
9e:c2:d6:8c:03:3c:84:fe:bd:07:ed:da:fa:87:b2:d9:ec:ad:
55:59:d1:a0:29:22:25:9f:d1:dc:e5:2e:eb:88:5b:ea:73:fc:
10:e4:b8:9d:60:20:62:26:b7:1a:5f:a9:95:2c:df:4b:aa:f6:
29:29:be:89:02:5c:67:c6:7b:d6:ec:06:fd:8a:0a:89:30:2c:
36:8a:33:3c:86:91:f5:fa:3f:80:66:a4:31:19:d5:ab:21:93:
95:49:2e:5c:51:d3:57:ee:95:2f:73:5b:23:f8:22:58:0a:ff:
7c:64:ca:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYPFV/ngOYRrZvwkbpfTPUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMGUxYjkwZDUxMmNjMzQwMmY3NjE0MTQwNjI5Nzk1ZTRk
NGFjNGMwHhcNMjYwOTI1MTEwMzQ3WhcNMjYwOTI2MTEwMzQ3WjAzMTEwLwYDVQQD
EyhmMzQ2ZGJlZGVmOTEyNTI1NzA5MjU3MjBiZmU1NDAyZjEwNTVkNmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL11ZQiQTLM9DwxJLmJT5oPZjoDY
Q+FLTaZnhqQaaNURHDk8JwlQGSweDSdkuXee9T7OoGtUue3eCzYWWaFvGY4zUJ2r
ZHLBXfUlLDL7qZNDlEPbdEN3JSXc0CuOHwIl1JySk9FADuscshfhwYjqCacZDCw3
moa5uo9RSxw/S8qkUSpnhE3y/5W5HsUAP7T7+thtwKQrJC71BPbvv51U2JpHKT3P
W9sYEBr7tnOtAHjj7mPkYJmF5ax8lB+sI2DBv4sG60Rgge1SyElw2BCf6XWzI1Sk
ogEsYvKjVTwnZ+sLMn14s9UozV0cORYdVocfUsr0y2gqNBto955D3X5RfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPNG2+3vkSUlcJJXIL/lQC8QVdavMB8GA1UdIwQY
MBaAFNwOG5DVEsw0AvdhQUBil5Xk1KxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0E0YmtOVVN6RFFDOTJGQlFHS1hsZVRVckV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85YTIzMTQtMjMxMC00M2RkLWE3NjYt
MTZmNTJjZWE0ZWIxLzEvM0E0YmtOVVN6RFFDOTJGQlFHS1hsZVRVckV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi85YTIzMTQtMjMxMC00M2RkLWE3NjYtMTZmNTJjZWE0ZWIx
LzEvM0E0YmtOVVN6RFFDOTJGQlFHS1hsZVRVckV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvFiwug9l
p25fd/5BffM1CACXksQhyHkgVKM/x294erl3WVnZwgMarzo/yX6S8DoQ+1zExYkm
GDSJ4I00QxIG+nMZNjeBHWveTj6dxCfAGtm5YzJ7Nyr3nxpDHEQNBguZ8+SJYWp8
qnPwc2TlacnUairrETM3fJtw4c9+aDnyWReh6D+5arjlj8TGiMeqzr7jnsLWjAM8
hP69B+3a+oey2eytVVnRoCkiJZ/R3OUu64hb6nP8EOS4nWAgYia3Gl+plSzfS6r2
KSm+iQJcZ8Z71uwG/YoKiTAsNoozPIaR9fo/gGakMRnVqyGTlUkuXFHTV+6VL3Nb
I/giWAr/fGTKdw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:10:14 2026 by rpki-client