Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft
File: 3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft (raw, json)
Hash identifier: SM1GzPMYaI+63glt5EB9eQHB/W83fuEv+CvCs7cdZGk=
Subject key identifier: 4A:98:D8:BC:97:3B:87:BC:7E:17:1D:1E:62:97:68:84:29:B7:28:5A
Authority key identifier: DE:EA:3E:1A:CA:6A:5C:9D:C3:F8:8C:38:27:6F:09:1E:BA:BC:E0:A4
Certificate issuer: /CN=deea3e1aca6a5c9dc3f88c38276f091ebabce0a4
Certificate serial: 01A0D94D80F99D110CE89D7338F8D9564CA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uo-GspqXJ3D-Iw4J28JHrq84KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft
Manifest number: 0524
Signing time: Fri 25 Sep 2026 16:02:10 +0000
Manifest this update: Fri 25 Sep 2026 16:02:10 +0000
Manifest next update: Sat 26 Sep 2026 16:02:10 +0000
Files and hashes: 1: 3uo-GspqXJ3D-Iw4J28JHrq84KQ.crl (hash: YgbU/0cdMb6Q6KnMI1uQN0dhNblgqbetx0eIVrEs/0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3uo-GspqXJ3D-Iw4J28JHrq84KQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4d:80:f9:9d:11:0c:e8:9d:73:38:f8:d9:56:4c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deea3e1aca6a5c9dc3f88c38276f091ebabce0a4
Validity
Not Before: Sep 25 16:02:10 2026 GMT
Not After : Sep 26 16:02:10 2026 GMT
Subject: CN=4a98d8bc973b87bc7e171d1e6297688429b7285a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:56:a4:68:d2:f3:65:ae:45:66:8b:85:af:0c:
52:29:98:f0:71:c2:22:7d:62:1d:8c:99:88:a3:bc:
7c:15:84:67:78:e4:d8:d4:b9:7b:9a:8f:b6:82:a1:
40:d7:21:ef:0d:d4:6a:33:b8:38:2c:66:a8:d9:61:
72:12:e8:8a:ec:35:e7:50:f4:bd:86:c7:41:a4:a8:
d3:79:cb:b1:ff:96:f3:8b:bb:59:04:88:a6:1d:7e:
e1:19:b8:6d:c7:fe:77:bb:05:5a:57:6a:23:f2:cb:
26:db:12:4e:fb:4a:63:5f:8c:05:f1:d4:00:da:2b:
4f:db:11:d9:58:c7:4a:a7:6d:e6:b7:45:04:5e:bb:
d5:a2:7b:91:49:0b:9e:52:ac:ce:74:6a:76:f3:03:
cd:9a:17:54:1a:20:d9:8a:2b:1d:7a:b0:94:35:3a:
34:1b:a5:a2:48:9c:a3:42:49:76:a2:a3:92:1a:24:
d2:ee:e1:79:9e:d2:ae:84:97:6c:b6:fa:a6:de:ff:
15:7b:fd:f9:5e:a3:1f:5e:63:9d:ef:77:03:ce:3d:
8e:51:75:b0:42:63:7e:2a:51:e3:f8:6d:3e:ee:ce:
3f:da:f8:bc:aa:2d:73:0e:54:80:f7:06:9c:a7:0f:
04:ac:aa:55:c4:8e:05:a1:82:a5:2d:a9:c0:c5:84:
12:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:98:D8:BC:97:3B:87:BC:7E:17:1D:1E:62:97:68:84:29:B7:28:5A
X509v3 Authority Key Identifier:
keyid:DE:EA:3E:1A:CA:6A:5C:9D:C3:F8:8C:38:27:6F:09:1E:BA:BC:E0:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uo-GspqXJ3D-Iw4J28JHrq84KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2f5e74-bd5e-4679-852b-7bef0b4cc25e/1/3uo-GspqXJ3D-Iw4J28JHrq84KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c6:c1:64:f4:ae:dc:f6:eb:8c:47:2b:c0:3f:62:b0:d1:7b:
e2:98:d7:be:9b:26:65:b2:44:25:99:63:37:aa:28:55:52:7e:
0b:cd:9c:18:cd:49:ae:5f:9e:be:d0:47:a7:ed:d4:35:60:15:
e7:de:3b:b7:c1:5f:0f:91:7f:0f:ff:cc:76:fe:ce:00:fb:84:
db:60:52:08:19:e6:5a:eb:92:5c:8e:13:af:30:f9:79:f2:e6:
d4:9e:a4:d7:ac:9d:11:45:37:28:2a:7b:56:27:0b:a1:c6:ca:
89:dc:1f:b6:c9:90:97:b8:3a:17:31:1c:9e:c4:91:0d:71:e0:
93:63:e4:65:f9:81:c0:4e:ee:46:d6:0b:98:89:b5:d3:50:64:
fc:14:ee:40:18:27:e0:52:d7:10:6b:41:7d:25:41:6e:4a:65:
81:9f:eb:ea:4c:7e:45:3d:a1:d2:ba:c5:37:cd:e3:37:81:8b:
38:78:f3:94:e6:31:9c:80:94:a2:ca:b9:f0:f5:34:bd:0f:24:
82:2d:bc:fb:4c:f4:e6:f5:47:81:03:e8:86:b8:fd:ba:96:30:
2a:1f:42:21:08:fe:e3:92:bd:69:03:ab:b2:88:c4:86:d9:8f:
f8:04:dd:cf:4b:57:fa:ba:40:db:9a:f5:7b:7b:cc:29:96:45:
8c:e1:56:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZTYD5nREM6J1zOPjZVkyhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZWEzZTFhY2E2YTVjOWRjM2Y4OGMzODI3NmYwOTFlYmFi
Y2UwYTQwHhcNMjYwOTI1MTYwMjEwWhcNMjYwOTI2MTYwMjEwWjAzMTEwLwYDVQQD
Eyg0YTk4ZDhiYzk3M2I4N2JjN2UxNzFkMWU2Mjk3Njg4NDI5YjcyODVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11akaNLzZa5FZouFrwxSKZjwccIi
fWIdjJmIo7x8FYRneOTY1Ll7mo+2gqFA1yHvDdRqM7g4LGao2WFyEuiK7DXnUPS9
hsdBpKjTecux/5bzi7tZBIimHX7hGbhtx/53uwVaV2oj8ssm2xJO+0pjX4wF8dQA
2itP2xHZWMdKp23mt0UEXrvVonuRSQueUqzOdGp28wPNmhdUGiDZiisderCUNTo0
G6WiSJyjQkl2oqOSGiTS7uF5ntKuhJdstvqm3v8Ve/35XqMfXmOd73cDzj2OUXWw
QmN+KlHj+G0+7s4/2vi8qi1zDlSA9wacpw8ErKpVxI4FoYKlLanAxYQSjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqY2LyXO4e8fhcdHmKXaIQptyhaMB8GA1UdIwQY
MBaAFN7qPhrKalydw/iMOCdvCR66vOCkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3VvLUdzcHFYSjNELUl3NEoyOEpIcnE4NEtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8yZjVlNzQtYmQ1ZS00Njc5LTg1MmIt
N2JlZjBiNGNjMjVlLzEvM3VvLUdzcHFYSjNELUl3NEoyOEpIcnE4NEtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8yZjVlNzQtYmQ1ZS00Njc5LTg1MmItN2JlZjBiNGNjMjVl
LzEvM3VvLUdzcHFYSjNELUl3NEoyOEpIcnE4NEtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArMbBZPSu
3PbrjEcrwD9isNF74pjXvpsmZbJEJZljN6ooVVJ+C82cGM1Jrl+evtBHp+3UNWAV
5947t8FfD5F/D//Mdv7OAPuE22BSCBnmWuuSXI4TrzD5efLm1J6k16ydEUU3KCp7
VicLocbKidwftsmQl7g6FzEcnsSRDXHgk2PkZfmBwE7uRtYLmIm101Bk/BTuQBgn
4FLXEGtBfSVBbkplgZ/r6kx+RT2h0rrFN83jN4GLOHjzlOYxnICUosq58PU0vQ8k
gi28+0z05vVHgQPohrj9upYwKh9CIQj+45K9aQOrsojEhtmP+ATdz0tX+rpA25r1
e3vMKZZFjOFWnQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 19:21:27 2026 by rpki-client