Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.mft
File: 3fwxxRjdlxX93slYJSfshEjXhA0.mft (raw, json)
Hash identifier: DlWGYE9xrV0xiyaeAG08PMt9maO6SSEK/0uU6BoIbuo=
Subject key identifier: 14:0C:ED:AE:71:5E:64:82:40:E4:0E:4C:6D:1C:4E:DA:22:C7:4E:5A
Authority key identifier: DD:FC:31:C5:18:DD:97:15:FD:DE:C9:58:25:27:EC:84:48:D7:84:0D
Certificate issuer: /CN=ddfc31c518dd9715fddec9582527ec8448d7840d
Certificate serial: 01A0BEB0F567ADD0D6F260E39923D3C55CC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fwxxRjdlxX93slYJSfshEjXhA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.mft
Manifest number: DC
Signing time: Sun 20 Sep 2026 12:01:03 +0000
Manifest this update: Sun 20 Sep 2026 12:01:03 +0000
Manifest next update: Mon 21 Sep 2026 12:01:03 +0000
Files and hashes: 1: 2rI5z9MKWkWLbN4Ac0mrTh9wI0Q.asa (hash: gEb+fnmGtGeQVf4nv5uRoOoaQszHv4xPq/xVWvjZho4=)
2: 3fwxxRjdlxX93slYJSfshEjXhA0.crl (hash: vLh62QDmjVzplE/TY6KedG+YsqOUS/Hj0vUq5betQC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fwxxRjdlxX93slYJSfshEjXhA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:b0:f5:67:ad:d0:d6:f2:60:e3:99:23:d3:c5:5c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfc31c518dd9715fddec9582527ec8448d7840d
Validity
Not Before: Sep 20 12:01:03 2026 GMT
Not After : Sep 21 12:01:03 2026 GMT
Subject: CN=140cedae715e648240e40e4c6d1c4eda22c74e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3d:5e:7a:ab:89:30:79:0c:85:24:de:09:4d:
b6:da:61:bb:1b:ae:42:c5:5f:2a:0c:3e:22:c5:b1:
1a:d1:6f:55:1a:76:ee:7a:ea:7f:e9:45:1d:7b:58:
50:66:b8:2e:20:1c:a6:3c:bb:a5:e4:5b:3d:0f:52:
d9:32:01:1b:d4:55:c6:5c:03:72:93:35:8e:0b:29:
a9:da:42:75:81:db:ee:18:0c:3f:66:24:22:f9:27:
9a:cd:e4:ae:e6:52:e5:5c:88:bb:88:6a:eb:6e:bb:
a7:57:22:99:b1:91:48:5a:75:16:0e:62:d8:5e:22:
56:bc:4e:6e:97:aa:59:71:28:90:21:8a:cf:f3:e2:
08:ca:40:9c:ae:55:66:1e:12:0d:11:c7:ed:33:3f:
93:7f:11:c5:b3:6e:eb:12:41:ee:27:f3:12:bb:0a:
13:85:eb:cf:48:60:e6:6f:02:a2:dc:1a:30:67:6b:
d3:c8:29:20:70:0c:42:d3:ae:73:a0:53:47:fc:b1:
d8:e2:98:1f:46:a2:1f:aa:e3:85:5d:81:ae:5b:8d:
6e:45:c6:7b:86:eb:1a:7f:4d:a4:14:ba:8a:0a:a4:
66:7a:28:a1:c0:14:92:93:14:55:fb:89:26:0c:ec:
85:18:c2:e6:be:5d:ac:74:f9:b5:df:47:e3:14:c9:
8a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0C:ED:AE:71:5E:64:82:40:E4:0E:4C:6D:1C:4E:DA:22:C7:4E:5A
X509v3 Authority Key Identifier:
keyid:DD:FC:31:C5:18:DD:97:15:FD:DE:C9:58:25:27:EC:84:48:D7:84:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fwxxRjdlxX93slYJSfshEjXhA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:c5:70:ed:e8:cb:ce:33:d7:88:a8:94:ae:2d:d0:58:a7:36:
9c:ae:74:a0:5b:ae:b3:7e:ad:89:fd:bb:84:6a:52:fd:83:f4:
50:2d:f4:db:12:d3:70:ac:95:7e:0a:4e:22:4c:fb:a0:af:b2:
29:15:65:02:0f:5f:86:ef:d3:3d:18:e1:72:53:b0:27:b0:c0:
15:61:ef:8b:49:4e:b2:dd:fb:56:30:d9:65:1d:52:84:b7:33:
15:ef:c9:41:7c:be:b4:4c:91:c6:ee:23:99:4d:6e:98:f4:01:
dc:b0:cc:ad:f3:5b:6f:26:a1:8d:7f:f2:88:d5:0a:59:41:f9:
43:3b:59:8e:d4:92:f0:d3:ac:d2:50:69:1d:94:33:06:b7:88:
fa:c1:e2:9e:ab:36:86:a2:7a:5a:01:b8:f8:62:9e:2e:13:61:
72:25:e7:d0:e4:a6:12:a5:4b:97:2b:b0:49:6f:f0:1e:a1:1f:
74:a1:12:73:8a:5c:4b:29:e9:cd:df:a1:19:c2:a7:03:df:da:
4a:a3:73:52:12:da:16:89:95:24:4b:54:de:13:29:1e:8b:08:
84:91:8a:74:fe:27:eb:8e:70:d4:9e:b2:de:a3:2b:e1:6b:aa:
cf:8c:e1:1d:13:3d:b9:9f:7f:1b:b2:4d:6d:4c:f1:0d:74:8f:
af:bd:82:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC+sPVnrdDW8mDjmSPTxVzAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZmMzMWM1MThkZDk3MTVmZGRlYzk1ODI1MjdlYzg0NDhk
Nzg0MGQwHhcNMjYwOTIwMTIwMTAzWhcNMjYwOTIxMTIwMTAzWjAzMTEwLwYDVQQD
EygxNDBjZWRhZTcxNWU2NDgyNDBlNDBlNGM2ZDFjNGVkYTIyYzc0ZTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj1eequJMHkMhSTeCU222mG7G65C
xV8qDD4ixbEa0W9VGnbueup/6UUde1hQZrguIBymPLul5Fs9D1LZMgEb1FXGXANy
kzWOCymp2kJ1gdvuGAw/ZiQi+SeazeSu5lLlXIi7iGrrbrunVyKZsZFIWnUWDmLY
XiJWvE5ul6pZcSiQIYrP8+IIykCcrlVmHhINEcftMz+TfxHFs27rEkHuJ/MSuwoT
hevPSGDmbwKi3BowZ2vTyCkgcAxC065zoFNH/LHY4pgfRqIfquOFXYGuW41uRcZ7
husaf02kFLqKCqRmeiihwBSSkxRV+4kmDOyFGMLmvl2sdPm130fjFMmKVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQM7a5xXmSCQOQOTG0cTtoix05aMB8GA1UdIwQY
MBaAFN38McUY3ZcV/d7JWCUn7IRI14QNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2Z3eHhSamRseFg5M3NsWUpTZnNoRWpYaEEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS85NDk3MjQtOGEzOS00YTA0LWI1ZWUt
NzcyMmExZDlhYTQxLzEvM2Z3eHhSamRseFg5M3NsWUpTZnNoRWpYaEEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS85NDk3MjQtOGEzOS00YTA0LWI1ZWUtNzcyMmExZDlhYTQx
LzEvM2Z3eHhSamRseFg5M3NsWUpTZnNoRWpYaEEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwsVw7ejL
zjPXiKiUri3QWKc2nK50oFuus36tif27hGpS/YP0UC302xLTcKyVfgpOIkz7oK+y
KRVlAg9fhu/TPRjhclOwJ7DAFWHvi0lOst37VjDZZR1ShLczFe/JQXy+tEyRxu4j
mU1umPQB3LDMrfNbbyahjX/yiNUKWUH5QztZjtSS8NOs0lBpHZQzBreI+sHinqs2
hqJ6WgG4+GKeLhNhciXn0OSmEqVLlyuwSW/wHqEfdKESc4pcSynpzd+hGcKnA9/a
SqNzUhLaFomVJEtU3hMpHosIhJGKdP4n645w1J6y3qMr4Wuqz4zhHRM9uZ9/G7JN
bUzxDXSPr72Cpg==
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:54:40 2026 by rpki-client