Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
File: 3Go3QvDw-xIJIrM57wHOz4f00e4.mft (raw, json)
Hash identifier: RwAds/HiKzr6Qcf6sP+9UdEAzmVUm7kutFtunf7FZS4=
Subject key identifier: 33:9A:0B:5F:B3:93:CC:8F:41:FE:85:64:1C:FD:36:17:B5:F6:DE:34
Authority key identifier: DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
Certificate issuer: /CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Certificate serial: 01A0DEAAAADFE9F15772EE0503ABF9F0826D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
Manifest number: 1A75
Signing time: Sat 26 Sep 2026 17:02:01 +0000
Manifest this update: Sat 26 Sep 2026 17:02:01 +0000
Manifest next update: Sun 27 Sep 2026 17:02:01 +0000
Files and hashes: 1: 1YkIJofGDPbAKhB5ldovfVVJQaQ.roa (hash: ft15usCMKxpuecv7eKItu1OCSt1aYNUn7zhbarfUJ4o=)
2: 3Go3QvDw-xIJIrM57wHOz4f00e4.crl (hash: tFLIBfF2b2/naezZ+viJMGSl35DEMs1t5wT/kBHovVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 17:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:aa:aa:df:e9:f1:57:72:ee:05:03:ab:f9:f0:82:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Validity
Not Before: Sep 26 17:02:01 2026 GMT
Not After : Sep 27 17:02:01 2026 GMT
Subject: CN=339a0b5fb393cc8f41fe85641cfd3617b5f6de34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d7:14:1b:cc:e5:ef:86:49:2f:6e:c0:09:69:
8b:bb:f7:19:b5:03:c8:14:f5:db:1b:12:b4:6b:73:
fe:4f:8a:25:de:fd:c5:70:6e:4d:d0:4f:e4:8f:b2:
c0:4e:98:f4:df:d1:67:c1:19:87:da:ce:6d:09:a0:
be:1b:72:77:89:e7:88:79:fb:a4:1a:6b:46:49:e1:
1f:b3:c6:69:4e:ea:b7:74:88:eb:42:9f:76:3e:37:
64:b2:4a:d5:34:53:43:02:b9:29:9b:10:2f:5b:14:
e4:38:7d:06:71:b1:be:03:d4:66:a6:87:f3:6a:cc:
b7:26:f3:e8:85:cc:c6:1c:35:24:53:2c:ba:8d:86:
eb:0c:2e:87:61:e8:6e:0b:e6:f9:26:77:80:5c:ec:
39:40:54:0f:b9:be:09:85:d4:bb:58:8c:e9:ee:71:
a0:17:13:d9:d2:37:ae:3c:3b:7d:61:40:fc:1a:82:
25:c0:46:57:c1:85:ee:c7:83:51:6d:08:71:e6:38:
0d:9c:11:f0:c4:89:7b:f7:67:66:72:a0:68:e6:cc:
d3:50:eb:f4:f7:f3:8d:ea:33:d3:a4:81:05:ba:47:
08:3a:fc:49:6e:41:44:6d:72:11:67:f8:5f:1f:8d:
a9:cc:98:a1:c2:b7:d6:32:cc:65:c5:4a:9a:2d:24:
8c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9A:0B:5F:B3:93:CC:8F:41:FE:85:64:1C:FD:36:17:B5:F6:DE:34
X509v3 Authority Key Identifier:
keyid:DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:27:13:72:fb:af:c1:46:80:45:ca:ba:aa:52:84:e9:04:c3:
03:3e:63:f7:43:8d:ab:90:f6:81:6e:92:5d:e5:e3:a6:b0:a4:
55:df:4e:dd:2e:47:c4:ce:0c:41:f9:a3:5c:bc:f6:4c:2e:a8:
cc:76:d4:ef:92:40:b1:fc:fe:dc:74:44:ff:f4:d0:44:87:96:
0d:23:d5:0f:ad:84:29:92:be:ed:6b:5e:c9:e7:7a:95:d9:75:
c1:10:fc:eb:f5:c1:f2:9d:a5:d5:8e:19:53:b8:33:50:0b:da:
f2:22:e0:9e:b8:4b:fd:3b:cd:c7:4d:6b:72:5a:47:cd:55:20:
22:97:1a:92:33:be:a3:15:f9:f8:0f:2a:7f:2e:6e:b2:77:92:
cc:26:cc:5c:58:ef:b6:3b:fc:16:fa:8f:d8:93:82:76:40:88:
93:1f:5c:01:e4:f1:ac:9b:f5:86:a4:11:40:31:a4:95:5f:77:
64:87:ba:08:f8:c1:1d:6b:46:aa:fc:7b:8c:ce:07:5d:e1:15:
27:cd:e0:ae:04:d1:0c:98:cd:2b:4f:2c:f0:25:14:35:3b:f0:
99:d1:84:a5:d0:ca:bc:7b:88:6c:f4:94:98:41:86:8a:64:39:
14:41:21:76:50:f0:c7:3c:ff:42:bd:17:e4:06:3f:04:c7:d5:
bf:af:9d:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDeqqrf6fFXcu4FA6v58IJtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNmEzNzQyZjBmMGZiMTIwOTIyYjMzOWVmMDFjZWNmODdm
NGQxZWUwHhcNMjYwOTI2MTcwMjAxWhcNMjYwOTI3MTcwMjAxWjAzMTEwLwYDVQQD
EygzMzlhMGI1ZmIzOTNjYzhmNDFmZTg1NjQxY2ZkMzYxN2I1ZjZkZTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9cUG8zl74ZJL27ACWmLu/cZtQPI
FPXbGxK0a3P+T4ol3v3FcG5N0E/kj7LATpj039FnwRmH2s5tCaC+G3J3ieeIefuk
GmtGSeEfs8ZpTuq3dIjrQp92PjdkskrVNFNDArkpmxAvWxTkOH0GcbG+A9Rmpofz
asy3JvPohczGHDUkUyy6jYbrDC6HYehuC+b5JneAXOw5QFQPub4JhdS7WIzp7nGg
FxPZ0jeuPDt9YUD8GoIlwEZXwYXux4NRbQhx5jgNnBHwxIl792dmcqBo5szTUOv0
9/ON6jPTpIEFukcIOvxJbkFEbXIRZ/hfH42pzJihwrfWMsxlxUqaLSSMlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDOaC1+zk8yPQf6FZBz9Nhe19t40MB8GA1UdIwQY
MBaAFNxqN0Lw8PsSCSKzOe8Bzs+H9NHuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0dvM1F2RHcteElKSXJNNTd3SE96NGYwMGU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80N2M5NzMtMjA1Yi00MTk3LTg2OTgt
Y2MxZDJjNWUxYjMxLzEvM0dvM1F2RHcteElKSXJNNTd3SE96NGYwMGU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy80N2M5NzMtMjA1Yi00MTk3LTg2OTgtY2MxZDJjNWUxYjMx
LzEvM0dvM1F2RHcteElKSXJNNTd3SE96NGYwMGU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATycTcvuv
wUaARcq6qlKE6QTDAz5j90ONq5D2gW6SXeXjprCkVd9O3S5HxM4MQfmjXLz2TC6o
zHbU75JAsfz+3HRE//TQRIeWDSPVD62EKZK+7Wteyed6ldl1wRD86/XB8p2l1Y4Z
U7gzUAva8iLgnrhL/TvNx01rclpHzVUgIpcakjO+oxX5+A8qfy5usneSzCbMXFjv
tjv8FvqP2JOCdkCIkx9cAeTxrJv1hqQRQDGklV93ZIe6CPjBHWtGqvx7jM4HXeEV
J83grgTRDJjNK08s8CUUNTvwmdGEpdDKvHuIbPSUmEGGimQ5FEEhdlDwxzz/Qr0X
5AY/BMfVv6+d8A==
-----END CERTIFICATE-----
Generated at Sun Sep 27 00:46:34 2026 by rpki-client