Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft
File: 3AWXDmUMKq8atqOjOoNzJGahUS4.mft (raw, json)
Hash identifier: RA9w6z7chOphZSuSGgzJxLVw23ZAE6cnmjaDWtQtn9M=
Subject key identifier: B6:BE:50:E8:76:52:20:A4:20:CA:96:55:CF:C9:A7:AE:13:29:38:A5
Authority key identifier: DC:05:97:0E:65:0C:2A:AF:1A:B6:A3:A3:3A:83:73:24:66:A1:51:2E
Certificate issuer: /CN=dc05970e650c2aaf1ab6a3a33a83732466a1512e
Certificate serial: 01A0CE24DDC37180622EFE7BA3597EC12F3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AWXDmUMKq8atqOjOoNzJGahUS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft
Manifest number: 1A6E
Signing time: Wed 23 Sep 2026 12:01:57 +0000
Manifest this update: Wed 23 Sep 2026 12:01:57 +0000
Manifest next update: Thu 24 Sep 2026 12:01:57 +0000
Files and hashes: 1: 3AWXDmUMKq8atqOjOoNzJGahUS4.crl (hash: MQc5rP2kcY1Ak5UUFecPNaaSUKaQzblevgNMDiN2iDo=)
2: JP7O65gp7zX3tDUG-U1DvEtjCFA.roa (hash: 4wb9GuGN7HSRqQwmPjSk8wSV9Gc7TW0TyvFnGjiWA5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AWXDmUMKq8atqOjOoNzJGahUS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:dd:c3:71:80:62:2e:fe:7b:a3:59:7e:c1:2f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc05970e650c2aaf1ab6a3a33a83732466a1512e
Validity
Not Before: Sep 23 12:01:57 2026 GMT
Not After : Sep 24 12:01:57 2026 GMT
Subject: CN=b6be50e8765220a420ca9655cfc9a7ae132938a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:30:e1:14:c8:66:40:30:c1:90:b8:a3:95:3d:
cd:da:f9:4d:f6:68:a4:cd:da:fb:9d:c0:a5:7c:c4:
f7:5f:7d:32:a3:cc:c3:c1:e0:cb:5f:4c:28:79:3c:
c6:0a:f5:e4:f8:2c:9d:99:8b:f4:59:03:9a:8a:be:
ac:ba:b6:95:46:4c:d6:ca:62:b9:8e:3d:4d:7c:b8:
b8:9a:a7:88:8c:8d:ab:0c:20:1c:96:ec:14:13:1f:
f4:63:6e:33:5a:e7:c6:cf:1a:d9:ff:45:d7:4a:79:
f5:e5:81:f0:2e:e3:bb:63:bc:24:d9:15:55:11:e8:
8b:b3:fc:c0:12:b1:f1:b5:dc:47:6b:18:08:04:85:
73:17:58:49:4d:6f:2f:9b:97:6f:06:6e:fa:0f:ee:
31:03:eb:12:d0:3d:83:6a:4d:a2:c0:8a:de:8c:2c:
c6:08:90:0c:dc:5c:78:77:7f:78:9e:ac:f3:32:fe:
ae:a3:c8:8d:e7:4c:01:6b:8f:16:ed:e9:a8:91:da:
1f:36:89:6a:48:0e:4e:48:86:82:ef:d2:19:24:07:
0d:39:50:fc:4c:f7:8b:f4:61:b4:ce:89:21:2e:ce:
9d:d7:b4:09:16:d4:77:1d:0b:f2:ac:33:82:e6:0f:
6e:9a:76:7c:29:65:36:12:8e:3e:53:54:d6:14:a4:
4d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BE:50:E8:76:52:20:A4:20:CA:96:55:CF:C9:A7:AE:13:29:38:A5
X509v3 Authority Key Identifier:
keyid:DC:05:97:0E:65:0C:2A:AF:1A:B6:A3:A3:3A:83:73:24:66:A1:51:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AWXDmUMKq8atqOjOoNzJGahUS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:27:1d:bb:c1:d8:93:7a:b3:a5:d3:56:51:19:85:14:b1:7c:
3e:cb:c0:a7:1c:24:b6:5a:ed:4c:69:04:4f:d0:21:c6:63:46:
87:d9:8d:e5:37:4b:07:9d:a2:21:d9:ad:1c:84:94:f6:2b:4e:
cc:40:3a:55:a7:47:81:b2:99:4b:11:36:ef:d2:80:13:60:75:
de:cc:41:57:f6:34:25:02:f3:e7:48:63:db:7f:89:c9:43:40:
6c:ea:24:e2:e7:ec:14:84:6e:3e:78:ec:25:d2:94:61:b4:c5:
b0:e5:b8:85:49:06:38:6f:30:a8:f2:78:b1:2d:34:bb:ac:66:
d1:1a:b9:f8:4b:7b:3e:a0:53:12:57:a4:f4:f4:80:89:89:00:
de:2b:eb:2a:f4:37:6d:50:27:bf:c4:84:e3:e1:f9:40:bd:02:
f2:e4:1a:7b:b0:0f:4f:f4:86:29:ba:dc:1e:b6:43:92:77:13:
e3:88:b2:56:48:cc:66:14:e5:ec:d4:ea:24:87:1d:64:2a:cf:
c2:ad:c6:b6:56:8e:1f:29:56:fe:84:85:f4:52:7e:40:45:b4:
4d:bb:04:c4:46:d6:ef:15:8b:7f:d4:69:85:6c:9d:a1:05:fd:
56:5a:25:56:32:fc:9f:5f:87:0a:0f:2b:a4:b1:15:32:04:8e:
f1:f8:c1:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOJN3DcYBiLv57o1l+wS86MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMDU5NzBlNjUwYzJhYWYxYWI2YTNhMzNhODM3MzI0NjZh
MTUxMmUwHhcNMjYwOTIzMTIwMTU3WhcNMjYwOTI0MTIwMTU3WjAzMTEwLwYDVQQD
EyhiNmJlNTBlODc2NTIyMGE0MjBjYTk2NTVjZmM5YTdhZTEzMjkzOGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjDhFMhmQDDBkLijlT3N2vlN9mik
zdr7ncClfMT3X30yo8zDweDLX0woeTzGCvXk+CydmYv0WQOair6suraVRkzWymK5
jj1NfLi4mqeIjI2rDCAcluwUEx/0Y24zWufGzxrZ/0XXSnn15YHwLuO7Y7wk2RVV
EeiLs/zAErHxtdxHaxgIBIVzF1hJTW8vm5dvBm76D+4xA+sS0D2Dak2iwIrejCzG
CJAM3Fx4d394nqzzMv6uo8iN50wBa48W7emokdofNolqSA5OSIaC79IZJAcNOVD8
TPeL9GG0zokhLs6d17QJFtR3HQvyrDOC5g9umnZ8KWU2Eo4+U1TWFKRN8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLa+UOh2UiCkIMqWVc/Jp64TKTilMB8GA1UdIwQY
MBaAFNwFlw5lDCqvGrajozqDcyRmoVEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0FXWERtVU1LcThhdHFPak9vTnpKR2FoVVM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zYjlhNDgtOGI2My00ZDNiLWEzYTkt
NjdhNTQwZTI5N2YwLzEvM0FXWERtVU1LcThhdHFPak9vTnpKR2FoVVM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8zYjlhNDgtOGI2My00ZDNiLWEzYTktNjdhNTQwZTI5N2Yw
LzEvM0FXWERtVU1LcThhdHFPak9vTnpKR2FoVVM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcycdu8HY
k3qzpdNWURmFFLF8PsvApxwktlrtTGkET9AhxmNGh9mN5TdLB52iIdmtHISU9itO
zEA6VadHgbKZSxE279KAE2B13sxBV/Y0JQLz50hj23+JyUNAbOok4ufsFIRuPnjs
JdKUYbTFsOW4hUkGOG8wqPJ4sS00u6xm0Rq5+Et7PqBTElek9PSAiYkA3ivrKvQ3
bVAnv8SE4+H5QL0C8uQae7APT/SGKbrcHrZDkncT44iyVkjMZhTl7NTqJIcdZCrP
wq3GtlaOHylW/oSF9FJ+QEW0TbsExEbW7xWLf9RphWydoQX9VlolVjL8n1+HCg8r
pLEVMgSO8fjBbg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 22:44:38 2026 by rpki-client