Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
File: CioVfwBRX5W2313A1S6xtdQ_3lw.mft (raw, json)
Hash identifier: yAEFkAjVs2FzXTuxyeAtQ+RpHOCFNokjl/rRhcmEsec=
Subject key identifier: BF:9B:08:74:D4:5F:A9:D5:F2:39:62:18:8D:2B:2F:F9:EB:5C:A1:8C
Authority key identifier: 0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
Certificate issuer: /CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Certificate serial: 01A0DA28A35DB02C9BFF5C5AF5A681D50CCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
Manifest number: 1A70
Signing time: Fri 25 Sep 2026 20:01:31 +0000
Manifest this update: Fri 25 Sep 2026 20:01:31 +0000
Manifest next update: Sat 26 Sep 2026 20:01:31 +0000
Files and hashes: 1: CioVfwBRX5W2313A1S6xtdQ_3lw.crl (hash: /LKNQMpwwrP15AwJql1slBHfp7C/S9xzqNP2kGIg8y8=)
2: I3QKFov--NDtK49UPqV2RMA_ZSs.roa (hash: 5bH+Qg+gTHLwp5S4Kx2BVafx6XVTZnjE39jOohvcHdQ=)
3: fl2pyBnIoQ-VEdTa69hXXV6H5mw.roa (hash: EGcyAF9xhaMQ1ne1hnq1kD386OD8JebtGbSKaTIP2q4=)
4: lLkHxJqkE8fba1rru9i3aJf3RMY.roa (hash: s90wIgzsP8JNTbm6DZweEnvciipAvCOC57+xLPE4UUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:a3:5d:b0:2c:9b:ff:5c:5a:f5:a6:81:d5:0c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a2a157f00515f95b6df5dc0d52eb1b5d43fde5c
Validity
Not Before: Sep 25 20:01:31 2026 GMT
Not After : Sep 26 20:01:31 2026 GMT
Subject: CN=bf9b0874d45fa9d5f23962188d2b2ff9eb5ca18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:43:03:69:83:67:4f:00:0c:4a:9f:54:0c:77:
9d:70:94:8b:ac:0f:4a:2f:55:4c:6c:bb:f1:7d:53:
d5:6f:8d:9c:e6:f2:51:09:a0:7d:5b:7d:de:d9:6f:
4f:fe:a9:93:cf:d9:c2:a1:70:9f:8b:05:89:55:92:
8b:59:62:9e:19:a9:5a:eb:fb:58:ad:b2:05:99:ff:
85:df:92:7e:ae:df:a9:35:c7:c3:25:fb:44:4b:68:
7b:35:f1:2d:32:3b:02:f6:c2:d5:fe:cf:40:8d:b6:
c4:60:39:2f:e9:b4:1a:37:85:96:4b:3c:e7:79:9b:
8e:4b:8f:79:1f:be:b5:ee:26:42:87:03:4a:1f:19:
fc:7d:7b:d2:0b:c9:c0:02:89:ce:d8:17:b1:4b:9b:
2c:66:47:cc:c5:f5:5d:75:0b:2d:eb:9d:ba:dd:94:
91:2e:c6:c6:b1:2b:d1:57:f2:1d:9b:b4:24:37:57:
ae:e4:18:a3:f0:bd:e4:d8:56:9a:d7:f4:bd:a9:d3:
c7:2e:e3:fd:51:45:62:1d:2a:59:53:c3:a1:6d:b2:
18:c0:7e:ee:39:07:e2:f9:9c:42:1d:05:aa:da:aa:
16:81:41:54:31:55:ba:4c:de:8a:a0:50:52:cb:9c:
0b:0a:b9:e9:c3:8d:32:91:23:16:28:6d:21:5a:cb:
37:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9B:08:74:D4:5F:A9:D5:F2:39:62:18:8D:2B:2F:F9:EB:5C:A1:8C
X509v3 Authority Key Identifier:
keyid:0A:2A:15:7F:00:51:5F:95:B6:DF:5D:C0:D5:2E:B1:B5:D4:3F:DE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CioVfwBRX5W2313A1S6xtdQ_3lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/3a39e9-3d40-46f8-bb0f-5ba43b118f75/1/CioVfwBRX5W2313A1S6xtdQ_3lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ce:eb:ca:0b:b0:36:e4:51:e7:a7:db:d4:c0:7e:36:eb:06:
76:8c:e3:3c:0c:81:d2:8d:2d:10:9e:bf:bc:e3:3b:9a:77:e1:
87:04:23:65:3d:a3:51:20:a2:cd:68:0d:4c:24:c7:57:6f:4d:
13:99:fa:74:57:b9:02:ad:62:2f:44:29:5c:6c:99:4f:13:61:
f2:e9:94:8f:3d:b2:de:73:fc:8b:b7:8d:c0:25:49:14:94:88:
2c:0a:63:fc:c5:bc:50:ce:91:40:34:a8:0b:ab:d7:ce:b7:8c:
a0:bd:56:b6:8b:fd:76:92:16:7e:ae:cf:d1:c0:29:99:06:b7:
c9:2b:87:1d:3e:73:53:dc:ed:96:32:61:88:5f:d9:7a:a6:fd:
e6:e0:fe:40:07:ff:55:81:b1:ac:ca:1e:85:36:36:d5:b7:73:
de:c8:e2:12:b5:0c:3c:d3:2a:62:41:60:7d:8f:bb:9d:c5:38:
0b:30:f7:1a:3a:c6:9a:45:b9:81:2e:42:b2:2a:ba:b6:c9:a5:
80:67:c9:69:c7:09:08:84:a2:67:91:75:2e:e5:7d:15:c1:58:
7c:d4:e7:5b:70:84:ce:c2:83:04:d2:cc:c5:b4:86:f6:3b:4c:
c5:e9:ad:85:17:99:cd:53:8b:0d:0b:5e:84:53:0b:b8:e4:21:
fd:50:d3:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDaKKNdsCyb/1xa9aaB1QzLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMmExNTdmMDA1MTVmOTViNmRmNWRjMGQ1MmViMWI1ZDQz
ZmRlNWMwHhcNMjYwOTI1MjAwMTMxWhcNMjYwOTI2MjAwMTMxWjAzMTEwLwYDVQQD
EyhiZjliMDg3NGQ0NWZhOWQ1ZjIzOTYyMTg4ZDJiMmZmOWViNWNhMThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUMDaYNnTwAMSp9UDHedcJSLrA9K
L1VMbLvxfVPVb42c5vJRCaB9W33e2W9P/qmTz9nCoXCfiwWJVZKLWWKeGala6/tY
rbIFmf+F35J+rt+pNcfDJftES2h7NfEtMjsC9sLV/s9AjbbEYDkv6bQaN4WWSzzn
eZuOS495H7617iZChwNKHxn8fXvSC8nAAonO2BexS5ssZkfMxfVddQst65263ZSR
LsbGsSvRV/Idm7QkN1eu5Bij8L3k2Faa1/S9qdPHLuP9UUViHSpZU8OhbbIYwH7u
OQfi+ZxCHQWq2qoWgUFUMVW6TN6KoFBSy5wLCrnpw40ykSMWKG0hWss32QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+bCHTUX6nV8jliGI0rL/nrXKGMMB8GA1UdIwQY
MBaAFAoqFX8AUV+Vtt9dwNUusbXUP95cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2lvVmZ3QlJYNVcyMzEzQTFTNnh0ZFFfM2x3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8zYTM5ZTktM2Q0MC00NmY4LWJiMGYt
NWJhNDNiMTE4Zjc1LzEvQ2lvVmZ3QlJYNVcyMzEzQTFTNnh0ZFFfM2x3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8zYTM5ZTktM2Q0MC00NmY4LWJiMGYtNWJhNDNiMTE4Zjc1
LzEvQ2lvVmZ3QlJYNVcyMzEzQTFTNnh0ZFFfM2x3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASc7ryguw
NuRR56fb1MB+NusGdozjPAyB0o0tEJ6/vOM7mnfhhwQjZT2jUSCizWgNTCTHV29N
E5n6dFe5Aq1iL0QpXGyZTxNh8umUjz2y3nP8i7eNwCVJFJSILApj/MW8UM6RQDSo
C6vXzreMoL1Wtov9dpIWfq7P0cApmQa3ySuHHT5zU9ztljJhiF/Zeqb95uD+QAf/
VYGxrMoehTY21bdz3sjiErUMPNMqYkFgfY+7ncU4CzD3GjrGmkW5gS5Csiq6tsml
gGfJaccJCISiZ5F1LuV9FcFYfNTnW3CEzsKDBNLMxbSG9jtMxemthReZzVOLDQte
hFMLuOQh/VDTgQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:33:32 2026 by rpki-client