Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
File: 3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft (raw, json)
Hash identifier: tzYFe3Ep+6+oq5JIfOf5hT5I6UDRR5DUkduI4fYKL5E=
Subject key identifier: 63:30:49:B3:AB:21:7C:A5:7E:79:59:EA:65:97:AD:9E:67:B9:C8:E0
Authority key identifier: DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
Certificate issuer: /CN=dee623e2aff7b03afeb94260348c1633b54d9056
Certificate serial: 01A0DA96A5564015DB27C6E4EC71F0362438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
Manifest number: 1A86
Signing time: Fri 25 Sep 2026 22:01:40 +0000
Manifest this update: Fri 25 Sep 2026 22:01:40 +0000
Manifest next update: Sat 26 Sep 2026 22:01:40 +0000
Files and hashes: 1: 2WGl8G8pi8oMegi8RKRiyyTcfBY.roa (hash: eFPA6RWwauuX6BAg0wBN5keK8VZL6vRlLkve+VSJ0ZE=)
2: 3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl (hash: FPkU4t73A+iP2KokQl1QkX0PyfejCH38NOwXHWJKqA0=)
3: WSkrs1ltbglcOvmgNNdKDlpJVJo.roa (hash: EfPSiAnXovgs9qwouEhgN4C060q6TwU5BAOhp7sYuHU=)
4: _fWzLCKSJmnuveEvkqcAAbIsnQU.roa (hash: hfCXoWjDXZMkDBWfgzrI+fe9FDLmJGHVyF9Qx+EgAyg=)
5: _xnVn4Z2mdrwXIaogX13bELVsCM.roa (hash: ApqTNIYHPR2DmL0Vq3O1QjPD2Uk/9+5OvGzlqh5bBUk=)
6: p04FvvBEHzMTXVoNNN3LSmN2jSQ.roa (hash: HB8efpVA3BHYu9Zn4BAQKGXl8PNjjJD4B4das4y3Wnc=)
7: xJ4TSRJyqffQgy_-86pjaJ3lB3I.roa (hash: ewjgg7+zEymo+Ubr8e5xOG/nC4U9si8j1VyBDgd9eok=)
8: ygo3H5OHWrmMxmaU3h9Trr2iclQ.roa (hash: 3KarnZJsM1oC9NHKT7Yavsz5aIphKie2KhT0LQNo1gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 22:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:a5:56:40:15:db:27:c6:e4:ec:71:f0:36:24:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee623e2aff7b03afeb94260348c1633b54d9056
Validity
Not Before: Sep 25 22:01:40 2026 GMT
Not After : Sep 26 22:01:40 2026 GMT
Subject: CN=633049b3ab217ca57e7959ea6597ad9e67b9c8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:13:06:e9:ff:9d:29:0c:07:9c:5f:83:3d:59:
52:08:29:0c:49:24:05:cc:d1:a8:19:7c:a5:4c:ef:
51:4b:09:92:dd:94:42:d8:6a:d1:37:a2:16:7c:90:
2a:11:34:01:33:ed:99:c6:d6:0c:02:16:19:7e:2d:
32:37:0c:cb:7c:6f:af:5c:79:73:6c:ab:8a:c4:14:
47:e5:93:ac:9b:85:15:a1:b0:ae:e1:90:d2:cb:9e:
40:8d:2e:bd:57:ec:ff:63:22:57:44:b0:c1:01:d4:
fb:35:02:f7:d5:da:57:3f:a0:f1:75:23:2e:ab:f5:
2b:be:39:68:3b:a5:6f:13:c0:46:3a:d2:4a:63:7c:
5a:b0:1a:1e:96:6c:5d:f4:64:d6:5c:2c:25:05:85:
35:4a:ee:d7:3c:0f:b7:7b:90:73:16:17:fa:4a:ef:
a9:b6:96:a1:ef:55:25:3c:c3:06:86:92:bf:6c:49:
01:81:c8:d8:1b:04:84:2b:ba:4c:73:67:ce:8c:99:
92:72:be:ce:15:a6:50:4d:14:c8:bb:ed:87:6a:50:
e0:16:b8:55:4d:8c:3e:f1:06:2c:5a:1e:48:13:c3:
ed:79:95:3b:cf:27:e8:3b:46:f9:9b:6c:2c:aa:56:
da:7d:9a:c9:a6:ed:5d:92:a4:f2:2b:60:bd:14:2a:
a4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:30:49:B3:AB:21:7C:A5:7E:79:59:EA:65:97:AD:9E:67:B9:C8:E0
X509v3 Authority Key Identifier:
keyid:DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:f1:cd:e3:98:94:8c:bd:3c:4c:77:a0:0f:87:90:a4:79:96:
30:11:e2:53:19:23:d6:db:ec:65:89:f9:ff:63:61:e0:f7:7c:
bb:cf:14:57:be:28:b3:68:4c:57:3b:91:44:31:cd:79:fe:0c:
e2:76:a9:6d:7b:60:ee:7e:db:9f:f2:4d:3d:fd:d8:e5:b4:f8:
0f:44:43:d1:81:a2:ba:a0:1e:d0:d1:a3:4d:be:21:e0:47:41:
6b:66:39:99:e0:1a:82:ca:e4:eb:ba:b7:60:59:f4:39:68:cb:
be:18:d8:f1:00:56:55:6a:79:54:3d:ff:8f:c4:a9:09:ed:d0:
b3:0d:8b:3a:1c:f1:7b:13:7f:88:37:96:e2:e1:73:58:90:5e:
3e:98:ab:37:bd:9a:cf:e0:61:1b:6e:20:31:19:08:2b:52:5f:
e0:29:74:5e:a9:e2:33:b6:b5:fd:f3:c6:4b:52:e4:22:9b:73:
a4:be:65:31:84:20:fa:ee:35:f5:b2:c1:f0:7e:50:98:77:7a:
da:ad:d0:91:90:3f:76:2c:22:4c:68:35:ff:d8:2e:67:d9:41:
01:93:7a:a6:6f:48:7c:cb:fd:01:1f:fd:05:fc:e5:52:4a:43:
99:95:c9:4a:ad:eb:45:03:75:c1:fb:a6:52:ff:53:9f:fb:96:
6c:5a:b0:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDalqVWQBXbJ8bk7HHwNiQ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZTYyM2UyYWZmN2IwM2FmZWI5NDI2MDM0OGMxNjMzYjU0
ZDkwNTYwHhcNMjYwOTI1MjIwMTQwWhcNMjYwOTI2MjIwMTQwWjAzMTEwLwYDVQQD
Eyg2MzMwNDliM2FiMjE3Y2E1N2U3OTU5ZWE2NTk3YWQ5ZTY3YjljOGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RMG6f+dKQwHnF+DPVlSCCkMSSQF
zNGoGXylTO9RSwmS3ZRC2GrRN6IWfJAqETQBM+2ZxtYMAhYZfi0yNwzLfG+vXHlz
bKuKxBRH5ZOsm4UVobCu4ZDSy55AjS69V+z/YyJXRLDBAdT7NQL31dpXP6DxdSMu
q/UrvjloO6VvE8BGOtJKY3xasBoelmxd9GTWXCwlBYU1Su7XPA+3e5BzFhf6Su+p
tpah71UlPMMGhpK/bEkBgcjYGwSEK7pMc2fOjJmScr7OFaZQTRTIu+2HalDgFrhV
TYw+8QYsWh5IE8PteZU7zyfoO0b5m2wsqlbafZrJpu1dkqTyK2C9FCqk8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMwSbOrIXylfnlZ6mWXrZ5nucjgMB8GA1UdIwQY
MBaAFN7mI+Kv97A6/rlCYDSMFjO1TZBWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ODcxZmYtM2YyNi00Yjk0LWE0NjQt
NmNjMWQzZWE4MzJlLzEvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC85ODcxZmYtM2YyNi00Yjk0LWE0NjQtNmNjMWQzZWE4MzJl
LzEvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlvHN45iU
jL08THegD4eQpHmWMBHiUxkj1tvsZYn5/2Nh4Pd8u88UV74os2hMVzuRRDHNef4M
4napbXtg7n7bn/JNPf3Y5bT4D0RD0YGiuqAe0NGjTb4h4EdBa2Y5meAagsrk67q3
YFn0OWjLvhjY8QBWVWp5VD3/j8SpCe3Qsw2LOhzxexN/iDeW4uFzWJBePpirN72a
z+BhG24gMRkIK1Jf4Cl0XqniM7a1/fPGS1LkIptzpL5lMYQg+u419bLB8H5QmHd6
2q3QkZA/diwiTGg1/9guZ9lBAZN6pm9IfMv9AR/9BfzlUkpDmZXJSq3rRQN1wfum
Uv9Tn/uWbFqwYQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 07:40:41 2026 by rpki-client