Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
File: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft (raw, json)
Hash identifier: oSt3KQdkvnT7I20HCp1q/EF5pVHiLhPNm/R7/y64+xY=
Subject key identifier: F5:10:7E:79:F7:EE:B7:34:13:8B:7E:0D:9E:B9:E9:38:82:A9:33:81
Authority key identifier: DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
Certificate issuer: /CN=df0198a7b3afdcdd7003562a0871878e238760ad
Certificate serial: 01A0D5DEA10338A2F768E378B8CB24B32CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
Manifest number: 1522
Signing time: Fri 25 Sep 2026 00:02:12 +0000
Manifest this update: Fri 25 Sep 2026 00:02:12 +0000
Manifest next update: Sat 26 Sep 2026 00:02:12 +0000
Files and hashes: 1: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl (hash: 0WMJuHT7o1YNbiKj2ayl3iAYPCDCiJrW4x5bZd3L3IQ=)
2: SO6QjR1hksAlM1LEwjsSfqyQA6I.roa (hash: ywShTaMxtKmWmIhHqGYn82a6dMwPRqUZ2JHI/iurJ+w=)
3: Y89C32NzpkA3PQGSAOSpiB1CVZA.roa (hash: A3b0H1rBdmLPnm3DdKs/p6L4k7I984tyefEWdXhVLr0=)
4: csf31rqb-Vtp8DxAcvND5Xzia2g.roa (hash: tIcC2hzx8VFbqFhPv8CNA+NzwFonxl1ILY4nFDsUkqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:a1:03:38:a2:f7:68:e3:78:b8:cb:24:b3:2c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0198a7b3afdcdd7003562a0871878e238760ad
Validity
Not Before: Sep 25 00:02:12 2026 GMT
Not After : Sep 26 00:02:12 2026 GMT
Subject: CN=f5107e79f7eeb734138b7e0d9eb9e93882a93381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1b:67:4d:f3:e1:e1:82:54:03:8d:35:2d:be:
4b:0b:f9:f4:6e:20:ed:76:88:a9:5c:a2:1e:b7:eb:
95:c6:31:82:e2:3f:b7:18:f5:18:02:ae:d4:8f:27:
ac:a1:26:16:45:8a:86:f1:36:34:11:d7:7a:b0:ad:
02:ef:ff:f2:7c:25:66:9e:ae:79:1e:8d:e4:d4:f6:
91:25:19:94:08:7a:c9:4a:71:e3:a9:29:50:07:6e:
d2:11:6b:9b:77:6a:92:8c:39:a4:c6:73:ae:3e:31:
2e:61:0f:f8:5a:9e:39:3a:07:e7:a5:13:ae:2d:62:
f4:8f:12:9c:92:cb:61:ee:57:a5:19:95:86:92:2b:
0a:28:3f:f4:90:6c:ee:2b:a5:1b:ec:a3:98:68:c6:
7e:79:8a:a4:6b:23:ec:6b:15:59:c5:e7:c0:64:c5:
4f:67:4c:f5:8d:d9:39:49:d0:e9:07:c9:a4:9d:fe:
3a:f9:81:a3:bf:28:36:e3:fd:e3:fb:15:2a:01:6e:
4d:bd:f4:9c:23:9b:57:56:76:3f:24:c9:29:ac:11:
79:62:a6:cb:ec:ba:c7:ed:c8:29:49:91:d7:8a:1a:
ce:be:a5:14:69:3d:60:7d:73:3a:52:1f:fc:be:d5:
7c:ff:65:9a:02:c5:63:db:b3:73:b3:52:1b:1c:b1:
b1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:10:7E:79:F7:EE:B7:34:13:8B:7E:0D:9E:B9:E9:38:82:A9:33:81
X509v3 Authority Key Identifier:
keyid:DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b5:cf:d7:60:e0:c2:92:22:95:8c:06:97:8b:d9:01:3a:60:
dc:cc:9e:7d:c3:47:9a:da:bb:6e:a5:29:ec:af:bb:df:22:89:
41:18:13:68:9f:a0:ba:e9:9c:e5:32:1f:05:d8:ab:0d:28:9e:
ff:80:d6:d9:97:df:05:34:70:0a:08:ff:54:20:1b:e7:20:7d:
26:fb:b0:77:de:b8:55:b0:91:bd:05:e9:69:e3:46:67:57:75:
ee:fc:bc:59:fd:9a:4f:99:02:5e:95:08:9d:60:0a:f8:46:b0:
9f:93:ce:72:6f:fd:fe:34:14:90:06:9d:d6:c4:4a:b8:84:cd:
92:12:9d:7b:78:a5:8e:9a:d2:94:be:0e:28:c9:91:68:00:6d:
da:02:fb:f0:bc:44:7b:83:38:86:a4:53:43:16:9d:3c:6b:a0:
b2:7e:fe:37:bd:c8:52:cc:37:f0:81:e3:e3:fa:ae:2f:94:9b:
0f:6c:2d:16:a0:b2:6c:30:b3:e2:91:4b:a1:fd:b4:10:48:1e:
b0:06:5e:49:5f:27:2d:7a:3d:40:ee:71:d2:f4:57:db:47:d3:
0f:e6:5c:18:6f:38:84:ec:5f:a0:77:70:49:88:32:1c:32:e2:
0a:b5:13:2a:1b:06:ce:1f:e8:8f:90:22:24:1c:7f:42:9a:ae:
83:b1:ff:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDV3qEDOKL3aON4uMsksyzsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMDE5OGE3YjNhZmRjZGQ3MDAzNTYyYTA4NzE4NzhlMjM4
NzYwYWQwHhcNMjYwOTI1MDAwMjEyWhcNMjYwOTI2MDAwMjEyWjAzMTEwLwYDVQQD
EyhmNTEwN2U3OWY3ZWViNzM0MTM4YjdlMGQ5ZWI5ZTkzODgyYTkzMzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxtnTfPh4YJUA401Lb5LC/n0biDt
doipXKIet+uVxjGC4j+3GPUYAq7UjyesoSYWRYqG8TY0Edd6sK0C7//yfCVmnq55
Ho3k1PaRJRmUCHrJSnHjqSlQB27SEWubd2qSjDmkxnOuPjEuYQ/4Wp45OgfnpROu
LWL0jxKcksth7lelGZWGkisKKD/0kGzuK6Ub7KOYaMZ+eYqkayPsaxVZxefAZMVP
Z0z1jdk5SdDpB8mknf46+YGjvyg24/3j+xUqAW5NvfScI5tXVnY/JMkprBF5YqbL
7LrH7cgpSZHXihrOvqUUaT1gfXM6Uh/8vtV8/2WaAsVj27Nzs1IbHLGxfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPUQfnn37rc0E4t+DZ656TiCqTOBMB8GA1UdIwQY
MBaAFN8BmKezr9zdcANWKghxh44jh2CtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3dHWXA3T3YzTjF3QTFZcUNIR0hqaU9IWUswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9kM2ZjYTYtZWNiNS00M2FhLThjOWQt
MGZjYzZjMzAxMWZjLzEvM3dHWXA3T3YzTjF3QTFZcUNIR0hqaU9IWUswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9kM2ZjYTYtZWNiNS00M2FhLThjOWQtMGZjYzZjMzAxMWZj
LzEvM3dHWXA3T3YzTjF3QTFZcUNIR0hqaU9IWUswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF7XP12Dg
wpIilYwGl4vZATpg3MyefcNHmtq7bqUp7K+73yKJQRgTaJ+guumc5TIfBdirDSie
/4DW2ZffBTRwCgj/VCAb5yB9Jvuwd964VbCRvQXpaeNGZ1d17vy8Wf2aT5kCXpUI
nWAK+Eawn5POcm/9/jQUkAad1sRKuITNkhKde3iljprSlL4OKMmRaABt2gL78LxE
e4M4hqRTQxadPGugsn7+N73IUsw38IHj4/quL5SbD2wtFqCybDCz4pFLof20EEge
sAZeSV8nLXo9QO5x0vRX20fTD+ZcGG84hOxfoHdwSYgyHDLiCrUTKhsGzh/oj5Ai
JBx/Qpqug7H/6Q==
-----END CERTIFICATE-----
Generated at Fri Sep 25 05:11:45 2026 by rpki-client