Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
File: 3-KkwH5N3j8ePKw5ujshNTGsy7k.mft (raw, json)
Hash identifier: DJkYYLYTPQvMOLsFBnRRht1cDvB7vF6BI9It4wxm/TM=
Subject key identifier: 25:EB:F6:C1:08:73:2D:0F:D9:3D:3E:4B:56:E5:EE:12:98:E8:DB:B7
Authority key identifier: DF:E2:A4:C0:7E:4D:DE:3F:1E:3C:AC:39:BA:3B:21:35:31:AC:CB:B9
Certificate issuer: /CN=dfe2a4c07e4dde3f1e3cac39ba3b213531accbb9
Certificate serial: 01A0FF47A8666C4F5E7A41196F23A505BE0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-KkwH5N3j8ePKw5ujshNTGsy7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
Manifest number: 0233
Signing time: Sat 03 Oct 2026 01:01:21 +0000
Manifest this update: Sat 03 Oct 2026 01:01:21 +0000
Manifest next update: Sun 04 Oct 2026 01:01:21 +0000
Files and hashes: 1: 3-KkwH5N3j8ePKw5ujshNTGsy7k.crl (hash: 4kXcuNnRCI9EKuI0u9qAUZdt+GfVTXN5imGA3+UlKFY=)
2: Bq6stHEFxMFxnWEoWkNnr2q_nfU.roa (hash: FRvotk1GU1c0bgTGRLjQpv9XYU8csQF9vIzVahVu7Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-KkwH5N3j8ePKw5ujshNTGsy7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:47:a8:66:6c:4f:5e:7a:41:19:6f:23:a5:05:be:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe2a4c07e4dde3f1e3cac39ba3b213531accbb9
Validity
Not Before: Oct 3 01:01:21 2026 GMT
Not After : Oct 4 01:01:21 2026 GMT
Subject: CN=25ebf6c108732d0fd93d3e4b56e5ee1298e8dbb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:50:f6:9d:fa:21:11:a8:4d:2b:df:ae:31:13:
8a:e5:ed:82:04:c4:4b:d9:60:e5:13:95:30:ab:bd:
6d:a0:65:4f:e0:b0:c4:e4:19:d7:84:d6:e8:9c:42:
74:76:a5:2c:9e:6a:7e:57:0c:f1:73:35:a2:33:7c:
15:67:60:c6:e5:18:69:60:da:c0:0b:58:18:76:c8:
33:33:3c:c8:3a:16:2f:2e:ed:8f:d9:20:75:ae:12:
b6:e7:0e:3a:35:ec:da:bd:a2:f1:d8:32:7a:1a:c3:
fe:00:1c:86:6e:83:42:3a:02:ae:6e:47:47:d6:95:
a0:0a:21:ef:af:ec:1a:5a:16:75:07:67:00:62:a5:
ac:0f:fa:f0:b6:43:f6:20:85:10:d1:f3:ae:ce:7c:
a3:43:37:07:5c:63:04:a2:b1:dd:d8:4f:5c:9b:de:
a3:ad:ae:30:2b:f2:4b:30:3c:ec:78:31:8f:87:3c:
1d:22:66:a8:31:8a:12:35:70:62:44:ff:59:cd:c4:
e7:c7:c0:7c:f4:46:c5:21:b2:b9:ca:b4:bb:b5:cb:
2d:8f:6b:e5:6c:fa:34:52:fe:7e:e7:76:e8:38:08:
19:60:a8:42:82:b8:5d:8f:57:e5:0a:7b:47:b7:4d:
6a:14:b2:75:61:2f:c8:a3:12:f7:f9:e8:57:0f:61:
0c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:EB:F6:C1:08:73:2D:0F:D9:3D:3E:4B:56:E5:EE:12:98:E8:DB:B7
X509v3 Authority Key Identifier:
keyid:DF:E2:A4:C0:7E:4D:DE:3F:1E:3C:AC:39:BA:3B:21:35:31:AC:CB:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-KkwH5N3j8ePKw5ujshNTGsy7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/44ba12-0bb8-4ff7-8b95-aef96016c3ec/1/3-KkwH5N3j8ePKw5ujshNTGsy7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:0a:d4:b2:29:89:6a:f9:1f:ea:35:37:0a:dc:17:62:1a:82:
46:51:fd:60:46:07:5b:52:11:62:ee:2d:66:7d:c8:13:7f:32:
2d:33:89:54:6b:24:4d:31:9e:54:bf:a3:9b:72:db:e3:8e:b8:
f9:e4:2c:a7:6c:65:ab:14:a1:ef:73:55:a9:7e:aa:52:4e:d5:
68:6d:2c:c7:67:a9:a9:78:40:38:26:f2:90:34:86:a9:e5:98:
f2:e8:5e:99:5a:b8:b6:25:58:eb:66:b7:dd:c5:da:f1:3e:be:
6f:86:7d:2c:a2:28:9f:35:f9:8c:94:eb:81:8b:6c:a9:5e:28:
6c:73:7d:e8:7a:12:8b:d9:39:0c:72:ad:c4:8a:e4:12:e0:7f:
59:8b:a8:19:d0:dc:2d:cd:79:02:d4:87:b6:79:6f:05:fe:78:
52:bd:53:69:f8:15:f9:c1:aa:59:98:6e:ab:fa:dc:32:70:cd:
fe:19:48:b1:30:a1:35:a5:cc:87:1d:41:ee:2e:c2:fa:87:02:
47:d3:df:bc:90:d5:5a:e9:0c:06:70:c4:05:96:b9:bf:16:04:
8a:4a:c5:bd:4b:a4:58:b9:2a:d6:48:68:5d:9b:bd:e9:bb:17:
8e:17:97:8e:f3:42:88:3b:5a:d5:74:44:3b:cd:9b:34:d9:d8:
5e:d8:31:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD/R6hmbE9eekEZbyOlBb4NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZTJhNGMwN2U0ZGRlM2YxZTNjYWMzOWJhM2IyMTM1MzFh
Y2NiYjkwHhcNMjYxMDAzMDEwMTIxWhcNMjYxMDA0MDEwMTIxWjAzMTEwLwYDVQQD
EygyNWViZjZjMTA4NzMyZDBmZDkzZDNlNGI1NmU1ZWUxMjk4ZThkYmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslD2nfohEahNK9+uMROK5e2CBMRL
2WDlE5Uwq71toGVP4LDE5BnXhNbonEJ0dqUsnmp+VwzxczWiM3wVZ2DG5RhpYNrA
C1gYdsgzMzzIOhYvLu2P2SB1rhK25w46NezavaLx2DJ6GsP+AByGboNCOgKubkdH
1pWgCiHvr+waWhZ1B2cAYqWsD/rwtkP2IIUQ0fOuznyjQzcHXGMEorHd2E9cm96j
ra4wK/JLMDzseDGPhzwdImaoMYoSNXBiRP9ZzcTnx8B89EbFIbK5yrS7tcstj2vl
bPo0Uv5+53boOAgZYKhCgrhdj1flCntHt01qFLJ1YS/IoxL3+ehXD2EMwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXr9sEIcy0P2T0+S1bl7hKY6Nu3MB8GA1UdIwQY
MBaAFN/ipMB+Td4/HjysObo7ITUxrMu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMy1La3dINU4zajhlUEt3NXVqc2hOVEdzeTdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi80NGJhMTItMGJiOC00ZmY3LThiOTUt
YWVmOTYwMTZjM2VjLzEvMy1La3dINU4zajhlUEt3NXVqc2hOVEdzeTdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi80NGJhMTItMGJiOC00ZmY3LThiOTUtYWVmOTYwMTZjM2Vj
LzEvMy1La3dINU4zajhlUEt3NXVqc2hOVEdzeTdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATArUsimJ
avkf6jU3CtwXYhqCRlH9YEYHW1IRYu4tZn3IE38yLTOJVGskTTGeVL+jm3Lb4464
+eQsp2xlqxSh73NVqX6qUk7VaG0sx2epqXhAOCbykDSGqeWY8uhemVq4tiVY62a3
3cXa8T6+b4Z9LKIonzX5jJTrgYtsqV4obHN96HoSi9k5DHKtxIrkEuB/WYuoGdDc
Lc15AtSHtnlvBf54Ur1TafgV+cGqWZhuq/rcMnDN/hlIsTChNaXMhx1B7i7C+ocC
R9PfvJDVWukMBnDEBZa5vxYEikrFvUukWLkq1khoXZu96bsXjheXjvNCiDta1XRE
O82bNNnYXtgxIQ==
-----END CERTIFICATE-----
Generated at Sat Oct 3 08:36:46 2026 by rpki-client