Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
File: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft (raw, json)
Hash identifier: B3lzUHa0x9yV/XvDNLBGlVQug/dKLYtRLOHZhEDmVEE=
Subject key identifier: F6:25:23:79:B1:D5:23:18:B9:77:F9:A0:92:C0:34:9D:EB:1A:C7:A9
Authority key identifier: DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
Certificate issuer: /CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Certificate serial: 01A0C39FFE3775415D251D7E6E44D46C6308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
Manifest number: 19A6
Signing time: Mon 21 Sep 2026 11:00:37 +0000
Manifest this update: Mon 21 Sep 2026 11:00:37 +0000
Manifest next update: Tue 22 Sep 2026 11:00:37 +0000
Files and hashes: 1: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl (hash: SmhYZb7OpSZ6GnalDTHycHApRdlZ9j+gHYLXHSzQ/vw=)
2: 6xKBRhcPGOW0-ef_87nk8nPvflA.roa (hash: ljMD+xiZ4YQ7UeRE1RQr2u8g+4zja/CKtgOQ244SoZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:9f:fe:37:75:41:5d:25:1d:7e:6e:44:d4:6c:63:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Validity
Not Before: Sep 21 11:00:37 2026 GMT
Not After : Sep 22 11:00:37 2026 GMT
Subject: CN=f6252379b1d52318b977f9a092c0349deb1ac7a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:94:a7:0f:ac:8c:50:7d:a8:42:40:44:01:df:
d0:36:3a:f9:27:cb:fb:c3:6b:05:e8:3f:84:f3:96:
42:72:67:a1:25:2d:40:6f:bc:b9:39:fe:19:f6:58:
ab:5c:44:46:ed:fb:fb:a0:f9:d3:ef:2a:9a:4e:1c:
49:bc:19:e7:67:dc:8b:41:0e:12:7d:36:58:c1:89:
7d:86:03:da:5f:b3:82:d2:87:ed:83:e0:4e:da:2f:
48:8b:66:88:cb:67:cb:9f:be:25:4a:2b:8b:87:33:
f2:83:49:3b:13:66:5e:4a:0b:28:00:d5:ab:af:52:
0b:38:4c:ba:e3:3d:0c:06:54:93:6e:60:c1:b8:2a:
58:a0:dd:ce:5d:3a:99:7d:b0:88:b0:88:8a:9f:1b:
89:8f:f2:02:42:9f:6a:9f:03:7d:f5:72:f6:32:06:
de:aa:9c:4d:37:65:07:e1:79:5d:80:1f:73:01:f7:
b6:14:24:35:36:74:19:31:5c:23:9b:c9:99:ca:7c:
a2:b8:76:dd:94:a7:4e:4d:50:70:85:b1:fb:1c:d8:
7b:57:90:e6:da:af:79:fb:24:0b:d2:92:1b:bd:12:
dc:f6:29:0e:af:85:10:2f:ce:70:ee:b6:16:ea:41:
00:15:99:91:60:86:47:7f:fc:b0:86:a4:f9:15:6f:
97:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:25:23:79:B1:D5:23:18:B9:77:F9:A0:92:C0:34:9D:EB:1A:C7:A9
X509v3 Authority Key Identifier:
keyid:DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:8e:05:6b:ac:bd:b4:be:49:50:9c:f1:e3:ca:ca:b8:d2:b4:
79:89:12:8b:b6:ef:ea:0a:21:79:4d:45:1c:b6:89:0e:7c:c8:
14:81:eb:04:6d:12:eb:29:d6:5d:22:5c:99:ec:ef:8a:17:cc:
6c:34:c0:a9:24:50:f2:d8:9c:ea:3e:2b:55:0e:7c:1a:52:39:
8f:c4:84:51:c9:82:fd:93:e9:da:09:7a:58:52:be:2f:63:50:
59:57:56:c7:a7:f8:cd:20:1d:5c:a3:08:5a:02:76:69:3a:ba:
ff:7d:78:e4:e2:a7:9d:55:db:fa:39:0d:6f:a4:96:96:70:e6:
2c:fa:41:4c:d8:71:bc:2d:26:cb:e2:6b:fb:ff:ef:00:66:77:
4a:7a:da:29:11:f5:4c:8e:75:a9:63:c5:4e:28:07:68:ec:ab:
0c:57:02:68:44:a2:17:51:4a:e2:20:ba:2a:ce:80:86:fd:14:
82:62:1f:4f:2a:3a:06:02:a2:de:0c:94:1a:b5:0e:27:8d:70:
58:48:67:d6:cf:44:08:c8:56:e4:a7:6c:f5:28:47:42:f2:df:
63:cc:3e:df:6e:38:02:06:fc:fb:78:67:de:1c:15:fb:7f:af:
25:0c:f6:10:7f:f5:23:89:ac:49:d8:ad:44:27:a0:b7:b7:b8:
7e:18:e2:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDn/43dUFdJR1+bkTUbGMIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZmY4NWJiOGEzNzU5NTIzZTBjYzlmOGE5MWRiZGFmNDc0
ZDZiN2MwHhcNMjYwOTIxMTEwMDM3WhcNMjYwOTIyMTEwMDM3WjAzMTEwLwYDVQQD
EyhmNjI1MjM3OWIxZDUyMzE4Yjk3N2Y5YTA5MmMwMzQ5ZGViMWFjN2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpSnD6yMUH2oQkBEAd/QNjr5J8v7
w2sF6D+E85ZCcmehJS1Ab7y5Of4Z9lirXERG7fv7oPnT7yqaThxJvBnnZ9yLQQ4S
fTZYwYl9hgPaX7OC0oftg+BO2i9Ii2aIy2fLn74lSiuLhzPyg0k7E2ZeSgsoANWr
r1ILOEy64z0MBlSTbmDBuCpYoN3OXTqZfbCIsIiKnxuJj/ICQp9qnwN99XL2Mgbe
qpxNN2UH4XldgB9zAfe2FCQ1NnQZMVwjm8mZynyiuHbdlKdOTVBwhbH7HNh7V5Dm
2q95+yQL0pIbvRLc9ikOr4UQL85w7rYW6kEAFZmRYIZHf/ywhqT5FW+XOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYlI3mx1SMYuXf5oJLANJ3rGsepMB8GA1UdIwQY
MBaAFNz/hbuKN1lSPgzJ+Kkdva9HTWt8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1AtRnU0bzNXVkktRE1uNHFSMjlyMGROYTN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9lY2Q3ZmMtM2VmNy00MzI2LWE0ZWYt
NWJjMzAyYjRiNWZjLzEvM1AtRnU0bzNXVkktRE1uNHFSMjlyMGROYTN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9lY2Q3ZmMtM2VmNy00MzI2LWE0ZWYtNWJjMzAyYjRiNWZj
LzEvM1AtRnU0bzNXVkktRE1uNHFSMjlyMGROYTN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsY4Fa6y9
tL5JUJzx48rKuNK0eYkSi7bv6goheU1FHLaJDnzIFIHrBG0S6ynWXSJcmezvihfM
bDTAqSRQ8tic6j4rVQ58GlI5j8SEUcmC/ZPp2gl6WFK+L2NQWVdWx6f4zSAdXKMI
WgJ2aTq6/3145OKnnVXb+jkNb6SWlnDmLPpBTNhxvC0my+Jr+//vAGZ3SnraKRH1
TI51qWPFTigHaOyrDFcCaESiF1FK4iC6Ks6Ahv0UgmIfTyo6BgKi3gyUGrUOJ41w
WEhn1s9ECMhW5Kds9ShHQvLfY8w+3244Agb8+3hn3hwV+3+vJQz2EH/1I4msSdit
RCegt7e4fhjiaA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:32:29 2026 by rpki-client