Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3JiY7LrH3bObIOqZsDjSbEaoJNQ.mft
File: 3JiY7LrH3bObIOqZsDjSbEaoJNQ.mft (raw, json)
Hash identifier: Fh+lc4FSUTWO8fAgIFFC3b+b3a6+GnnJpuapggo01iw=
Subject key identifier: C2:D7:BD:46:95:33:BA:C2:99:84:34:3B:E3:26:A0:C4:FB:DF:22:17
Authority key identifier: DC:98:98:EC:BA:C7:DD:B3:9B:20:EA:99:B0:38:D2:6C:46:A8:24:D4
Certificate issuer: /CN=dc9898ecbac7ddb39b20ea99b038d26c46a824d4
Certificate serial: 01A0BEB13E9CA6186ED158A03681AB886307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JiY7LrH3bObIOqZsDjSbEaoJNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3JiY7LrH3bObIOqZsDjSbEaoJNQ.mft
Manifest number: DC
Signing time: Sun 20 Sep 2026 12:01:21 +0000
Manifest this update: Sun 20 Sep 2026 12:01:21 +0000
Manifest next update: Mon 21 Sep 2026 12:01:21 +0000
Files and hashes: 1: 3JiY7LrH3bObIOqZsDjSbEaoJNQ.crl (hash: 1ahM5XqUb7b4caLbCEfHC7aQzgDcA0Db/MEtOgbPTfw=)
2: lGfDr1-zqft5sxdN3ZBuxYLpJQ8.roa (hash: HUobi3hV3dki/qkxRm+DIA0moIcySUJXJvx1G//m6cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3JiY7LrH3bObIOqZsDjSbEaoJNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3JiY7LrH3bObIOqZsDjSbEaoJNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JiY7LrH3bObIOqZsDjSbEaoJNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:b1:3e:9c:a6:18:6e:d1:58:a0:36:81:ab:88:63:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc9898ecbac7ddb39b20ea99b038d26c46a824d4
Validity
Not Before: Sep 20 12:01:21 2026 GMT
Not After : Sep 21 12:01:21 2026 GMT
Subject: CN=c2d7bd469533bac29984343be326a0c4fbdf2217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:97:5b:5a:de:66:f9:43:04:9c:5f:0e:cc:d7:
57:46:90:e5:98:ce:71:91:82:41:3a:a5:10:9d:00:
c0:a8:a5:d7:b3:7b:ec:1f:14:6e:5d:58:08:a1:ca:
f0:8f:80:ff:7f:97:31:9d:c6:ce:11:77:78:54:e3:
c5:d9:39:12:46:49:1d:0b:58:08:97:a2:d9:90:4c:
fb:2a:77:19:19:f4:c7:cf:1e:38:a6:69:35:2a:b0:
9b:1f:57:06:6e:a3:5e:de:0e:1c:a5:03:ad:a3:47:
be:83:79:54:73:f7:d6:bb:8a:1c:28:f2:10:b4:bd:
fd:65:e6:d1:4e:2d:f7:26:22:b9:63:ca:08:c3:05:
e8:03:79:1f:54:b1:a1:89:99:3c:bb:72:2e:cb:72:
89:ad:60:53:38:33:09:a4:fd:e3:3c:71:f9:cd:27:
8b:d4:35:11:df:75:36:1f:7a:cf:dc:b1:d2:56:04:
19:bc:d9:16:4b:31:91:1b:dc:b1:a9:14:32:af:1a:
3a:8e:e6:1e:61:17:87:8e:a1:3d:75:00:bc:e3:89:
34:56:2c:ff:f4:08:d4:72:54:5a:91:63:ea:5b:6f:
76:19:c5:d9:b8:e2:26:f5:00:04:8b:df:37:c8:36:
6d:eb:ef:bb:ce:c2:cc:0c:2f:9b:d6:e7:de:7b:58:
24:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D7:BD:46:95:33:BA:C2:99:84:34:3B:E3:26:A0:C4:FB:DF:22:17
X509v3 Authority Key Identifier:
keyid:DC:98:98:EC:BA:C7:DD:B3:9B:20:EA:99:B0:38:D2:6C:46:A8:24:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JiY7LrH3bObIOqZsDjSbEaoJNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3JiY7LrH3bObIOqZsDjSbEaoJNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/3JiY7LrH3bObIOqZsDjSbEaoJNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:65:ad:3e:1b:0a:c6:94:27:06:fe:90:12:0a:8d:72:85:e9:
d4:3d:ce:99:18:78:75:74:83:b2:6e:65:a5:6e:0a:fd:1d:fc:
55:48:b4:78:ec:12:10:4a:c2:76:86:da:4f:95:0b:86:36:81:
45:73:e8:29:22:cc:49:48:e4:5a:be:5c:85:28:1e:3e:85:d1:
10:0c:32:70:3f:c9:05:f1:4c:c9:be:44:64:07:2a:8f:47:66:
36:10:56:43:c0:13:10:e7:e4:25:bd:e2:90:5e:0d:ef:44:b2:
c3:36:8e:1d:91:e6:13:a7:c5:c4:4e:e7:3f:1a:c1:fe:5d:2a:
75:68:76:b8:9e:11:f1:05:de:df:0c:01:c8:17:72:83:3f:e4:
bc:cd:93:2e:72:31:54:db:ca:bd:a9:8b:9b:ec:1d:ed:75:4b:
97:01:5c:9b:e5:98:b1:65:cb:7c:e1:9c:0d:92:be:17:93:4d:
6c:39:74:e8:90:08:f0:2c:0e:e5:1c:4c:9b:39:86:11:3a:98:
95:d5:c3:c1:dc:06:46:49:14:16:49:ad:c2:1e:a4:52:fb:30:
53:d9:2f:d9:17:bf:ea:51:91:3d:60:68:0d:50:b6:f1:3c:db:
b2:6d:35:29:27:d9:e8:69:fe:3a:db:6f:96:8a:7a:fb:ec:3e:
b6:7e:3e:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC+sT6cphhu0VigNoGriGMHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjOTg5OGVjYmFjN2RkYjM5YjIwZWE5OWIwMzhkMjZjNDZh
ODI0ZDQwHhcNMjYwOTIwMTIwMTIxWhcNMjYwOTIxMTIwMTIxWjAzMTEwLwYDVQQD
EyhjMmQ3YmQ0Njk1MzNiYWMyOTk4NDM0M2JlMzI2YTBjNGZiZGYyMjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZdbWt5m+UMEnF8OzNdXRpDlmM5x
kYJBOqUQnQDAqKXXs3vsHxRuXVgIocrwj4D/f5cxncbOEXd4VOPF2TkSRkkdC1gI
l6LZkEz7KncZGfTHzx44pmk1KrCbH1cGbqNe3g4cpQOto0e+g3lUc/fWu4ocKPIQ
tL39ZebRTi33JiK5Y8oIwwXoA3kfVLGhiZk8u3Iuy3KJrWBTODMJpP3jPHH5zSeL
1DUR33U2H3rP3LHSVgQZvNkWSzGRG9yxqRQyrxo6juYeYReHjqE9dQC844k0Viz/
9AjUclRakWPqW292GcXZuOIm9QAEi983yDZt6++7zsLMDC+b1ufee1gk5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLXvUaVM7rCmYQ0O+MmoMT73yIXMB8GA1UdIwQY
MBaAFNyYmOy6x92zmyDqmbA40mxGqCTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0ppWTdMckgzYk9iSU9xWnNEalNiRWFvSk5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9lZGFlYjUtNWU2ZS00MTFiLTk5Y2It
M2M1MDE4MDc4MGIwLzEvM0ppWTdMckgzYk9iSU9xWnNEalNiRWFvSk5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9lZGFlYjUtNWU2ZS00MTFiLTk5Y2ItM2M1MDE4MDc4MGIw
LzEvM0ppWTdMckgzYk9iSU9xWnNEalNiRWFvSk5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlmWtPhsK
xpQnBv6QEgqNcoXp1D3OmRh4dXSDsm5lpW4K/R38VUi0eOwSEErCdobaT5ULhjaB
RXPoKSLMSUjkWr5chSgePoXREAwycD/JBfFMyb5EZAcqj0dmNhBWQ8ATEOfkJb3i
kF4N70SywzaOHZHmE6fFxE7nPxrB/l0qdWh2uJ4R8QXe3wwByBdygz/kvM2TLnIx
VNvKvamLm+wd7XVLlwFcm+WYsWXLfOGcDZK+F5NNbDl06JAI8CwO5RxMmzmGETqY
ldXDwdwGRkkUFkmtwh6kUvswU9kv2Re/6lGRPWBoDVC28Tzbsm01KSfZ6Gn+Ottv
lop6++w+tn4+0Q==
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:44:08 2026 by rpki-client