Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/a2532b-1a60-418b-a6a8-ad89c8cf0059/1/3r0M4EwQIKaT5tp915ZJeLS_dcE.mft
File: 3r0M4EwQIKaT5tp915ZJeLS_dcE.mft (raw, json)
Hash identifier: 5x++496sLf0s23Bu2DZKKepF2SiXG67c/z61zYevn7s=
Subject key identifier: 19:D6:7F:91:1A:4B:3A:FE:60:45:D7:61:AB:8A:E3:F6:63:42:56:C7
Authority key identifier: DE:BD:0C:E0:4C:10:20:A6:93:E6:DA:7D:D7:96:49:78:B4:BF:75:C1
Certificate issuer: /CN=debd0ce04c1020a693e6da7dd7964978b4bf75c1
Certificate serial: 01A0CE5A6A30771828247184FB47AD3FC891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3r0M4EwQIKaT5tp915ZJeLS_dcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a2532b-1a60-418b-a6a8-ad89c8cf0059/1/3r0M4EwQIKaT5tp915ZJeLS_dcE.mft
Manifest number: 92
Signing time: Wed 23 Sep 2026 13:00:26 +0000
Manifest this update: Wed 23 Sep 2026 13:00:26 +0000
Manifest next update: Thu 24 Sep 2026 13:00:26 +0000
Files and hashes: 1: 3r0M4EwQIKaT5tp915ZJeLS_dcE.crl (hash: N+eVTIX8opVxIpdf2MCD3h35aHAA6/VCQcEIUViQADY=)
2: xdX0VrTVG7c4ScLml_1qkCmtiiE.roa (hash: M7mCvRr7szZ+UQTBMebMCqcIwEnnqv3tYiKhcgcsC6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a2532b-1a60-418b-a6a8-ad89c8cf0059/1/3r0M4EwQIKaT5tp915ZJeLS_dcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/a2532b-1a60-418b-a6a8-ad89c8cf0059/1/3r0M4EwQIKaT5tp915ZJeLS_dcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3r0M4EwQIKaT5tp915ZJeLS_dcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:6a:30:77:18:28:24:71:84:fb:47:ad:3f:c8:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=debd0ce04c1020a693e6da7dd7964978b4bf75c1
Validity
Not Before: Sep 23 13:00:26 2026 GMT
Not After : Sep 24 13:00:26 2026 GMT
Subject: CN=19d67f911a4b3afe6045d761ab8ae3f6634256c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:bb:2a:77:04:7e:76:b1:7e:d8:27:b4:2a:a2:
56:36:4d:56:d0:2c:7d:09:3f:65:05:e5:21:af:61:
ff:60:3e:90:c4:69:09:39:aa:78:df:a0:21:db:b6:
12:ad:0d:a1:2d:6f:87:ff:55:8f:8b:7e:1c:15:3f:
ea:32:90:95:2a:01:af:c2:41:e2:8e:cc:68:b6:9a:
ae:08:2d:66:91:f1:f0:d3:f2:47:9c:f1:eb:e4:19:
4e:d3:7f:aa:3f:e4:0f:2b:03:6e:7e:8f:49:6b:73:
b4:03:05:74:f7:ee:ea:d9:57:c5:8b:fd:72:9c:fb:
ac:06:83:36:55:62:c8:6d:eb:64:0c:c8:18:58:d3:
57:41:8f:9d:67:c7:be:0f:03:80:e9:46:10:53:3d:
5a:c9:f5:e2:ce:80:58:47:36:77:80:f4:e7:c4:7a:
3b:f3:23:f4:f6:81:95:28:4b:5d:29:31:53:45:c2:
f5:32:93:3f:a9:e0:06:d7:56:b1:38:88:fd:fe:f7:
3c:41:ea:3f:20:5e:e6:e9:4e:8c:e5:ea:fb:4c:56:
7d:82:1e:da:31:b1:7a:a3:1c:1c:f3:f5:4f:34:68:
7d:64:bc:88:e5:3f:33:c2:4a:6a:4a:e0:12:40:53:
b0:24:96:ef:ff:2a:7a:cd:12:39:d1:b7:2b:78:79:
b8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D6:7F:91:1A:4B:3A:FE:60:45:D7:61:AB:8A:E3:F6:63:42:56:C7
X509v3 Authority Key Identifier:
keyid:DE:BD:0C:E0:4C:10:20:A6:93:E6:DA:7D:D7:96:49:78:B4:BF:75:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3r0M4EwQIKaT5tp915ZJeLS_dcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a2532b-1a60-418b-a6a8-ad89c8cf0059/1/3r0M4EwQIKaT5tp915ZJeLS_dcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a2532b-1a60-418b-a6a8-ad89c8cf0059/1/3r0M4EwQIKaT5tp915ZJeLS_dcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:4f:ec:a0:f8:27:39:90:ef:f9:0f:1a:16:b9:39:3d:f9:29:
06:5f:de:af:2a:2b:41:ab:db:15:66:33:b6:77:28:d4:20:40:
b7:b1:f7:04:51:03:a5:de:16:f0:1b:4c:57:91:82:fe:6d:51:
4e:0f:84:68:80:be:af:c0:cb:d0:02:51:f6:f3:27:ad:74:de:
2c:a0:22:10:62:d3:42:71:fb:2c:ab:aa:7f:49:e2:3f:2f:be:
54:3e:e5:e5:4f:ba:1e:ac:cc:da:ae:5c:25:03:88:e0:90:3b:
a5:15:b6:c8:d3:f5:13:92:e9:eb:6f:ae:97:f9:16:f3:32:60:
6b:b7:7d:a0:4c:d1:13:79:1a:f6:f1:97:df:92:f1:11:4d:2c:
09:12:4a:2d:83:dd:fe:b8:8e:04:50:4f:dd:60:87:19:8d:76:
fd:0f:f4:f2:15:42:71:2c:db:11:4d:65:bd:f7:84:96:31:d6:
d2:4f:b4:46:af:19:08:b3:a5:82:5e:e8:d3:12:89:01:0d:9c:
4c:ba:4a:bb:67:78:dc:a2:5e:10:4e:2a:8f:59:7c:04:be:3c:
7f:7b:36:7a:b9:79:0b:a7:58:40:5f:74:9d:ec:84:a7:87:b5:
aa:17:59:db:f0:50:91:4c:bb:bd:9e:37:7d:0d:ee:52:10:f9:
0e:70:d9:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOWmowdxgoJHGE+0etP8iRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYmQwY2UwNGMxMDIwYTY5M2U2ZGE3ZGQ3OTY0OTc4YjRi
Zjc1YzEwHhcNMjYwOTIzMTMwMDI2WhcNMjYwOTI0MTMwMDI2WjAzMTEwLwYDVQQD
EygxOWQ2N2Y5MTFhNGIzYWZlNjA0NWQ3NjFhYjhhZTNmNjYzNDI1NmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bsqdwR+drF+2Ce0KqJWNk1W0Cx9
CT9lBeUhr2H/YD6QxGkJOap436Ah27YSrQ2hLW+H/1WPi34cFT/qMpCVKgGvwkHi
jsxotpquCC1mkfHw0/JHnPHr5BlO03+qP+QPKwNufo9Ja3O0AwV09+7q2VfFi/1y
nPusBoM2VWLIbetkDMgYWNNXQY+dZ8e+DwOA6UYQUz1ayfXizoBYRzZ3gPTnxHo7
8yP09oGVKEtdKTFTRcL1MpM/qeAG11axOIj9/vc8Qeo/IF7m6U6M5er7TFZ9gh7a
MbF6oxwc8/VPNGh9ZLyI5T8zwkpqSuASQFOwJJbv/yp6zRI50bcreHm46QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBnWf5EaSzr+YEXXYauK4/ZjQlbHMB8GA1UdIwQY
MBaAFN69DOBMECCmk+bafdeWSXi0v3XBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3IwTTRFd1FJS2FUNXRwOTE1WkplTFNfZGNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hMjUzMmItMWE2MC00MThiLWE2YTgt
YWQ4OWM4Y2YwMDU5LzEvM3IwTTRFd1FJS2FUNXRwOTE1WkplTFNfZGNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9hMjUzMmItMWE2MC00MThiLWE2YTgtYWQ4OWM4Y2YwMDU5
LzEvM3IwTTRFd1FJS2FUNXRwOTE1WkplTFNfZGNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaE/soPgn
OZDv+Q8aFrk5PfkpBl/eryorQavbFWYztnco1CBAt7H3BFEDpd4W8BtMV5GC/m1R
Tg+EaIC+r8DL0AJR9vMnrXTeLKAiEGLTQnH7LKuqf0niPy++VD7l5U+6HqzM2q5c
JQOI4JA7pRW2yNP1E5Lp62+ul/kW8zJga7d9oEzRE3ka9vGX35LxEU0sCRJKLYPd
/riOBFBP3WCHGY12/Q/08hVCcSzbEU1lvfeEljHW0k+0Rq8ZCLOlgl7o0xKJAQ2c
TLpKu2d43KJeEE4qj1l8BL48f3s2erl5C6dYQF90neyEp4e1qhdZ2/BQkUy7vZ43
fQ3uUhD5DnDZkg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 18:08:53 2026 by rpki-client