Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
File: 3Os5Sq4INtNDQfetMZSUdlq1awc.mft (raw, json)
Hash identifier: vVzQaQYQbho3Hxxzv8vz+rUL/euI9xYnlDfLfmQxyMg=
Subject key identifier: AE:A5:CA:34:81:8B:D0:2D:CD:F5:20:F0:89:BF:7C:EE:C2:EB:C5:C2
Authority key identifier: DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
Certificate issuer: /CN=dceb394aae0836d34341f7ad319494765ab56b07
Certificate serial: 01A0DC8554BF9BFBF1BD5195F5C06F9A56C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
Manifest number: 0617
Signing time: Sat 26 Sep 2026 07:02:00 +0000
Manifest this update: Sat 26 Sep 2026 07:02:00 +0000
Manifest next update: Sun 27 Sep 2026 07:02:00 +0000
Files and hashes: 1: 3Os5Sq4INtNDQfetMZSUdlq1awc.crl (hash: BLa2PjEusFc/SyKetKqFxFnPfm9oRGIU9STIZcpn7xw=)
2: RwZ9F-pdINA65vVgGDGApgyfhto.roa (hash: eZaWhNjBT1qB/UTcePoZ/N6A45ILygXPpUHwGv0YfOw=)
3: SFQQoJg97TGHjrgzii8KpRT8xfc.roa (hash: iv/LMo2P0Oa29pglyapnh+eYTODXjJUku1HA9y8udbA=)
4: sOAijZZYpwie6wu7M4Wlx6kerB4.roa (hash: H5sz+pWO9A1d2Sg5RORtCUGJSuWJhTFvhX/iRzLdtRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:85:54:bf:9b:fb:f1:bd:51:95:f5:c0:6f:9a:56:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dceb394aae0836d34341f7ad319494765ab56b07
Validity
Not Before: Sep 26 07:02:00 2026 GMT
Not After : Sep 27 07:02:00 2026 GMT
Subject: CN=aea5ca34818bd02dcdf520f089bf7ceec2ebc5c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d7:3e:3b:b8:b3:cf:f0:8f:11:c1:ed:34:05:
2c:4a:a7:95:65:a6:84:d5:d4:e5:43:7b:5f:1e:09:
17:5b:c2:a8:fa:f8:c0:47:43:e9:b7:c9:e1:7f:42:
c7:67:7c:ea:a7:13:fc:4c:68:d9:39:e7:ef:05:89:
4a:f9:33:53:17:7a:6b:fa:3a:7c:63:9c:2e:fd:17:
be:c5:e8:cc:7a:70:52:be:ae:32:f9:86:3f:d8:58:
85:1c:06:c4:71:8d:c9:6c:d6:13:c7:86:71:18:6a:
23:7d:bc:0d:1f:a2:8a:75:41:1f:18:47:3b:ee:ef:
99:a8:48:ee:ea:bf:8f:9e:25:ba:34:30:79:d6:f7:
1f:7e:b4:9b:01:91:7f:61:3b:fb:31:5a:d4:89:57:
3b:e9:9a:3a:70:ce:21:ef:5b:46:30:89:ab:0a:5d:
6b:9c:17:0e:9c:be:cf:9c:21:42:7b:48:dd:fd:09:
bc:80:db:23:08:d4:7d:9b:bd:f4:03:70:03:68:fa:
e2:b1:97:a0:4c:76:7c:9c:7c:b9:91:fc:ae:6f:03:
f6:98:be:64:cc:5e:2e:3a:d6:35:5a:e3:db:a3:65:
2b:88:68:95:29:2f:50:81:1a:0b:c6:0d:e2:8e:6f:
8a:cd:e3:dc:1a:f5:ca:96:a3:50:1a:0c:c4:f0:a5:
e7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A5:CA:34:81:8B:D0:2D:CD:F5:20:F0:89:BF:7C:EE:C2:EB:C5:C2
X509v3 Authority Key Identifier:
keyid:DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:bf:aa:a9:99:fc:21:05:2b:b6:18:15:a2:1e:ea:dd:e0:c7:
ec:ea:c6:80:37:bc:10:a6:6b:46:06:1d:88:20:6b:17:72:1d:
80:27:3f:94:ea:99:60:ba:15:06:ec:6f:36:2e:37:6a:ef:92:
17:ef:ba:40:72:45:ac:af:c1:2b:e8:26:a9:30:92:2a:ae:3c:
99:35:1c:a6:3e:2b:a4:65:4d:20:34:7a:92:22:44:e7:c8:3e:
1c:a6:70:2c:b5:da:9b:e6:43:c6:5e:f3:4f:14:11:8a:ee:7c:
16:81:5b:d2:29:c9:8c:1d:7f:65:32:8e:7f:30:2d:5f:fa:a5:
a7:36:71:85:79:02:69:46:d7:ac:0e:98:23:ed:33:e4:8a:5e:
9e:db:52:ca:1e:1a:68:b1:af:6c:61:92:70:07:b6:18:7f:c6:
2f:11:b4:00:04:0b:88:a9:6a:f5:fd:ae:20:5a:85:44:1b:d7:
10:d7:b6:58:23:57:be:73:a2:be:d9:3e:7e:34:92:06:6d:9f:
e5:76:71:48:0a:96:79:83:db:c1:72:71:4a:9e:b7:46:c2:26:
12:ef:60:13:e8:c4:2f:0b:3f:d9:ad:35:75:f5:bc:ff:5f:04:
6c:b3:06:1a:6c:2d:f8:8b:85:4a:62:41:4f:91:4a:2c:e9:9b:
2c:07:ad:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDchVS/m/vxvVGV9cBvmlbEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZWIzOTRhYWUwODM2ZDM0MzQxZjdhZDMxOTQ5NDc2NWFi
NTZiMDcwHhcNMjYwOTI2MDcwMjAwWhcNMjYwOTI3MDcwMjAwWjAzMTEwLwYDVQQD
EyhhZWE1Y2EzNDgxOGJkMDJkY2RmNTIwZjA4OWJmN2NlZWMyZWJjNWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntc+O7izz/CPEcHtNAUsSqeVZaaE
1dTlQ3tfHgkXW8Ko+vjAR0Ppt8nhf0LHZ3zqpxP8TGjZOefvBYlK+TNTF3pr+jp8
Y5wu/Re+xejMenBSvq4y+YY/2FiFHAbEcY3JbNYTx4ZxGGojfbwNH6KKdUEfGEc7
7u+ZqEju6r+PniW6NDB51vcffrSbAZF/YTv7MVrUiVc76Zo6cM4h71tGMImrCl1r
nBcOnL7PnCFCe0jd/Qm8gNsjCNR9m730A3ADaPrisZegTHZ8nHy5kfyubwP2mL5k
zF4uOtY1WuPbo2UriGiVKS9QgRoLxg3ijm+KzePcGvXKlqNQGgzE8KXnVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6lyjSBi9AtzfUg8Im/fO7C68XCMB8GA1UdIwQY
MBaAFNzrOUquCDbTQ0H3rTGUlHZatWsHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM09zNVNxNElOdE5EUWZldE1aU1VkbHExYXdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wYjA2NGYtYjAxYS00MzcxLWE0NGEt
NDBjODZiMzJlYjIyLzEvM09zNVNxNElOdE5EUWZldE1aU1VkbHExYXdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8wYjA2NGYtYjAxYS00MzcxLWE0NGEtNDBjODZiMzJlYjIy
LzEvM09zNVNxNElOdE5EUWZldE1aU1VkbHExYXdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOb+qqZn8
IQUrthgVoh7q3eDH7OrGgDe8EKZrRgYdiCBrF3IdgCc/lOqZYLoVBuxvNi43au+S
F++6QHJFrK/BK+gmqTCSKq48mTUcpj4rpGVNIDR6kiJE58g+HKZwLLXam+ZDxl7z
TxQRiu58FoFb0inJjB1/ZTKOfzAtX/qlpzZxhXkCaUbXrA6YI+0z5IpenttSyh4a
aLGvbGGScAe2GH/GLxG0AAQLiKlq9f2uIFqFRBvXENe2WCNXvnOivtk+fjSSBm2f
5XZxSAqWeYPbwXJxSp63RsImEu9gE+jELws/2a01dfW8/18EbLMGGmwt+IuFSmJB
T5FKLOmbLAetUg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 13:01:22 2026 by rpki-client