Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.mft
File: 3tWhIk7c8ScO8bgGCYWqh9GRq6k.mft (raw, json)
Hash identifier: i1LBrJU/mjs3b7mofoorqrC4hYM++hreppDJpRqXO/4=
Subject key identifier: 98:60:C0:E5:7E:70:4A:19:B5:71:10:A4:82:95:BC:E3:A5:2C:3C:43
Authority key identifier: DE:D5:A1:22:4E:DC:F1:27:0E:F1:B8:06:09:85:AA:87:D1:91:AB:A9
Certificate issuer: /CN=ded5a1224edcf1270ef1b8060985aa87d191aba9
Certificate serial: 01A0C9A2791C35D3DE3135D3498ED29754FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tWhIk7c8ScO8bgGCYWqh9GRq6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.mft
Manifest number: 018A
Signing time: Tue 22 Sep 2026 15:01:03 +0000
Manifest this update: Tue 22 Sep 2026 15:01:03 +0000
Manifest next update: Wed 23 Sep 2026 15:01:03 +0000
Files and hashes: 1: 3tWhIk7c8ScO8bgGCYWqh9GRq6k.crl (hash: S5U+cWVVbtM9o8OQTqGNh74Llgje4uffTTi8guBxIuI=)
2: kwUfzWwrFQVASQO2F6UsVOxQr_k.roa (hash: B400R5yaG15mVyOg0wtFtZ9v1gBpdtwEZj5wGIDnL98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tWhIk7c8ScO8bgGCYWqh9GRq6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a2:79:1c:35:d3:de:31:35:d3:49:8e:d2:97:54:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded5a1224edcf1270ef1b8060985aa87d191aba9
Validity
Not Before: Sep 22 15:01:03 2026 GMT
Not After : Sep 23 15:01:03 2026 GMT
Subject: CN=9860c0e57e704a19b57110a48295bce3a52c3c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1b:dd:f3:c9:a3:f5:40:d4:58:df:c2:7a:76:
91:90:39:bc:3f:fc:f9:f2:ba:f0:35:c1:9a:7d:00:
e5:c1:57:94:fa:cf:3d:eb:89:6b:be:c9:5e:56:d2:
70:69:52:c1:2e:c1:a5:b7:80:c5:c6:5a:37:2d:08:
30:97:47:f6:ca:bb:a2:5f:cd:37:e6:43:3e:79:fb:
e1:0a:7e:a8:22:ea:90:60:fb:81:8f:27:a4:75:d6:
57:38:e6:24:cc:5c:73:78:84:c5:9d:dc:35:71:99:
1b:ec:a0:91:2e:aa:1e:cf:1a:4b:5e:7e:f2:50:d8:
79:7d:8e:ed:2d:85:07:db:66:90:d8:67:44:1b:2b:
88:50:d5:27:3d:81:16:1c:fc:a4:68:ea:86:16:b8:
be:18:c1:c1:a5:0f:4d:17:a9:e7:94:1a:2a:e6:1d:
c9:9c:cc:f3:52:3b:95:ef:c2:d1:4e:34:35:fa:63:
f7:2f:39:99:d5:cd:21:25:88:68:2f:3f:06:41:5f:
fb:7c:f8:99:88:c5:ec:9f:27:e7:f1:84:77:2b:91:
8a:67:d9:cb:01:6d:33:76:a6:85:8c:58:fd:62:ad:
a3:d4:5d:8c:14:72:f6:1f:65:99:2c:0d:61:91:dc:
7a:bf:87:c8:b4:1e:6a:a3:67:7d:da:43:f5:8d:0b:
d4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:60:C0:E5:7E:70:4A:19:B5:71:10:A4:82:95:BC:E3:A5:2C:3C:43
X509v3 Authority Key Identifier:
keyid:DE:D5:A1:22:4E:DC:F1:27:0E:F1:B8:06:09:85:AA:87:D1:91:AB:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tWhIk7c8ScO8bgGCYWqh9GRq6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6594df-0b5a-4640-86ad-aeded904dca5/1/3tWhIk7c8ScO8bgGCYWqh9GRq6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:3c:1d:27:be:75:b1:50:4f:3f:2c:c2:02:42:f8:4c:6c:99:
9c:ed:30:07:90:10:1c:52:9c:d8:c2:4f:26:c9:5d:53:8e:5f:
1e:da:c1:cf:31:7f:0b:12:8a:f9:3f:b2:1d:b6:88:13:d6:57:
68:b1:ad:9e:17:72:69:18:47:f5:9f:b0:c3:09:f6:fb:a1:ac:
33:af:4f:d5:67:25:8c:6c:a9:20:1a:06:c7:3e:78:5d:02:e1:
52:4f:0f:9e:5b:83:4c:90:f1:8d:55:0b:95:6f:31:50:16:7c:
62:53:c7:34:1d:42:2c:aa:23:2d:9d:b6:1e:99:2f:26:2d:a2:
d2:15:1f:1c:16:1c:70:75:f6:74:40:6b:5b:d7:b5:27:83:e1:
75:2f:6c:85:cf:f0:d7:99:01:ba:dd:24:03:f6:ba:4c:d0:ed:
29:39:bd:c1:2d:33:4f:d0:7e:ec:38:39:1b:a5:98:6e:d4:9c:
14:8d:29:8c:50:4f:6d:a8:ac:f7:c2:5c:92:53:9c:1d:42:ad:
25:a6:9c:79:0b:b3:b5:44:97:a5:cc:0a:02:3f:a7:8d:09:75:
1e:09:86:fd:32:80:d3:ab:e5:62:b0:4a:69:6c:d3:a5:e4:cd:
cc:89:c4:38:9a:6f:d9:45:e6:86:bd:87:97:0a:82:f2:82:25:
1f:bb:ed:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJonkcNdPeMTXTSY7Sl1T/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZDVhMTIyNGVkY2YxMjcwZWYxYjgwNjA5ODVhYTg3ZDE5
MWFiYTkwHhcNMjYwOTIyMTUwMTAzWhcNMjYwOTIzMTUwMTAzWjAzMTEwLwYDVQQD
Eyg5ODYwYzBlNTdlNzA0YTE5YjU3MTEwYTQ4Mjk1YmNlM2E1MmMzYzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhvd88mj9UDUWN/CenaRkDm8P/z5
8rrwNcGafQDlwVeU+s8964lrvsleVtJwaVLBLsGlt4DFxlo3LQgwl0f2yruiX803
5kM+efvhCn6oIuqQYPuBjyekddZXOOYkzFxzeITFndw1cZkb7KCRLqoezxpLXn7y
UNh5fY7tLYUH22aQ2GdEGyuIUNUnPYEWHPykaOqGFri+GMHBpQ9NF6nnlBoq5h3J
nMzzUjuV78LRTjQ1+mP3LzmZ1c0hJYhoLz8GQV/7fPiZiMXsnyfn8YR3K5GKZ9nL
AW0zdqaFjFj9Yq2j1F2MFHL2H2WZLA1hkdx6v4fItB5qo2d92kP1jQvUewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhgwOV+cEoZtXEQpIKVvOOlLDxDMB8GA1UdIwQY
MBaAFN7VoSJO3PEnDvG4BgmFqofRkaupMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3RXaElrN2M4U2NPOGJnR0NZV3FoOUdScTZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS82NTk0ZGYtMGI1YS00NjQwLTg2YWQt
YWVkZWQ5MDRkY2E1LzEvM3RXaElrN2M4U2NPOGJnR0NZV3FoOUdScTZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS82NTk0ZGYtMGI1YS00NjQwLTg2YWQtYWVkZWQ5MDRkY2E1
LzEvM3RXaElrN2M4U2NPOGJnR0NZV3FoOUdScTZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUTwdJ751
sVBPPyzCAkL4TGyZnO0wB5AQHFKc2MJPJsldU45fHtrBzzF/CxKK+T+yHbaIE9ZX
aLGtnhdyaRhH9Z+wwwn2+6GsM69P1WcljGypIBoGxz54XQLhUk8PnluDTJDxjVUL
lW8xUBZ8YlPHNB1CLKojLZ22HpkvJi2i0hUfHBYccHX2dEBrW9e1J4PhdS9shc/w
15kBut0kA/a6TNDtKTm9wS0zT9B+7Dg5G6WYbtScFI0pjFBPbais98JcklOcHUKt
JaaceQuztUSXpcwKAj+njQl1HgmG/TKA06vlYrBKaWzTpeTNzInEOJpv2UXmhr2H
lwqC8oIlH7vtJQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 02:06:58 2026 by rpki-client