Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.mft
File: 3fwxxRjdlxX93slYJSfshEjXhA0.mft (raw, json)
Hash identifier: tyy4ew4WY0ezvQF+NS/Tf9csVPzZsmz8lCNbeqw5EvQ=
Subject key identifier: A0:56:B2:8A:FC:7D:EC:91:85:EB:6D:D0:8E:6A:15:7C:87:7D:11:51
Authority key identifier: DD:FC:31:C5:18:DD:97:15:FD:DE:C9:58:25:27:EC:84:48:D7:84:0D
Certificate issuer: /CN=ddfc31c518dd9715fddec9582527ec8448d7840d
Certificate serial: 01A1A85EC57FEA61242E9C651F240DA87397
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fwxxRjdlxX93slYJSfshEjXhA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.mft
Manifest number: 0155
Signing time: Wed 04 Nov 2026 21:02:25 +0000
Manifest this update: Wed 04 Nov 2026 21:02:25 +0000
Manifest next update: Thu 05 Nov 2026 21:02:25 +0000
Files and hashes: 1: 2rI5z9MKWkWLbN4Ac0mrTh9wI0Q.asa (hash: gEb+fnmGtGeQVf4nv5uRoOoaQszHv4xPq/xVWvjZho4=)
2: 3fwxxRjdlxX93slYJSfshEjXhA0.crl (hash: Z3emMWB0B6WrEF6iuwwtz+lXCqPjIMtFr/jvCpnMwHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3fwxxRjdlxX93slYJSfshEjXhA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 21:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a8:5e:c5:7f:ea:61:24:2e:9c:65:1f:24:0d:a8:73:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddfc31c518dd9715fddec9582527ec8448d7840d
Validity
Not Before: Nov 4 21:02:25 2026 GMT
Not After : Nov 5 21:02:25 2026 GMT
Subject: CN=a056b28afc7dec9185eb6dd08e6a157c877d1151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e8:4b:7b:16:b8:19:09:8c:f2:3f:d8:7c:83:
19:d2:88:3f:f7:3a:b8:6e:11:93:75:51:2c:d3:03:
25:f5:6e:0b:8e:4f:74:c5:d2:aa:70:40:d3:cd:24:
06:47:6e:e5:a7:d2:e4:fb:ee:6b:a1:91:5f:34:83:
c6:b7:00:3a:66:13:ce:7a:bf:a0:6f:40:89:64:31:
62:a0:4b:1c:55:c3:93:f1:f0:75:06:f0:df:0a:70:
24:f7:5c:54:c7:05:a1:34:26:82:e4:21:8c:bc:59:
b5:5d:1d:f3:ed:6c:f5:8c:22:b7:09:38:8a:d1:9f:
a5:1f:b1:96:37:42:a2:df:2a:ef:52:d6:49:83:3c:
36:0d:ab:fb:05:9a:75:88:df:49:9f:43:14:3b:ff:
d5:6f:c8:2f:f4:95:75:f7:fb:c6:46:26:dc:cc:9a:
78:d9:5f:39:f0:e7:35:85:65:40:01:75:f9:8e:64:
79:2a:bd:9e:e2:c6:cd:a0:4e:b1:49:79:9a:94:5b:
2c:9d:b0:c7:e3:2f:5f:56:3e:95:08:b4:72:4d:76:
18:97:e1:eb:7d:1f:b3:57:c7:83:b6:91:cf:9e:c6:
22:98:82:f1:92:d9:b6:f9:ec:4e:04:86:02:1a:eb:
76:70:ba:0f:8d:10:5b:2a:d2:0d:0c:30:bb:6f:fb:
15:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:56:B2:8A:FC:7D:EC:91:85:EB:6D:D0:8E:6A:15:7C:87:7D:11:51
X509v3 Authority Key Identifier:
keyid:DD:FC:31:C5:18:DD:97:15:FD:DE:C9:58:25:27:EC:84:48:D7:84:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fwxxRjdlxX93slYJSfshEjXhA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/949724-8a39-4a04-b5ee-7722a1d9aa41/1/3fwxxRjdlxX93slYJSfshEjXhA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:37:91:d0:cc:5a:f6:af:d7:ed:e7:84:09:9d:8f:c7:4b:08:
f7:01:dc:69:8c:a7:c4:ab:a0:70:56:df:a8:03:0f:b9:1f:5b:
b2:ea:50:d0:83:db:30:9e:96:93:93:07:89:c8:e6:e6:1e:e3:
21:95:e1:d5:51:bd:18:28:dc:92:b3:19:24:d3:97:ff:cb:70:
67:a0:db:1d:d3:99:5a:d8:69:ad:eb:8b:9a:09:44:e3:59:4e:
48:6a:d5:28:e7:39:01:98:1f:6c:81:cd:8e:95:c1:cf:25:0d:
8f:19:36:f0:83:d4:6b:a1:4c:e2:4d:6f:ac:c2:af:3a:56:3b:
7b:a4:3c:6f:40:af:af:6c:63:8e:a4:09:4c:3a:c2:ab:70:50:
81:2c:9c:63:ed:b7:c5:1c:70:78:df:91:d4:24:d1:3b:5e:09:
36:93:c4:62:f3:63:9c:d7:70:9e:b3:fd:df:9c:a4:0d:10:f4:
16:41:62:45:3e:c3:28:be:39:66:f2:8b:71:7b:e8:3c:20:08:
02:6d:dd:41:34:7c:13:5b:d5:34:cd:b4:5f:5a:a2:45:4a:7a:
33:30:b5:98:f1:4c:18:90:11:68:70:01:72:39:07:b4:d7:0d:
ff:40:c4:7d:b7:92:40:c5:e9:12:fd:57:06:74:46:5f:f8:7e:
76:e8:52:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGoXsV/6mEkLpxlHyQNqHOXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZmMzMWM1MThkZDk3MTVmZGRlYzk1ODI1MjdlYzg0NDhk
Nzg0MGQwHhcNMjYxMTA0MjEwMjI1WhcNMjYxMTA1MjEwMjI1WjAzMTEwLwYDVQQD
EyhhMDU2YjI4YWZjN2RlYzkxODVlYjZkZDA4ZTZhMTU3Yzg3N2QxMTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+hLexa4GQmM8j/YfIMZ0og/9zq4
bhGTdVEs0wMl9W4Ljk90xdKqcEDTzSQGR27lp9Lk++5roZFfNIPGtwA6ZhPOer+g
b0CJZDFioEscVcOT8fB1BvDfCnAk91xUxwWhNCaC5CGMvFm1XR3z7Wz1jCK3CTiK
0Z+lH7GWN0Ki3yrvUtZJgzw2Dav7BZp1iN9Jn0MUO//Vb8gv9JV19/vGRibczJp4
2V858Oc1hWVAAXX5jmR5Kr2e4sbNoE6xSXmalFssnbDH4y9fVj6VCLRyTXYYl+Hr
fR+zV8eDtpHPnsYimILxktm2+exOBIYCGut2cLoPjRBbKtINDDC7b/sVKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBWsor8feyRhett0I5qFXyHfRFRMB8GA1UdIwQY
MBaAFN38McUY3ZcV/d7JWCUn7IRI14QNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2Z3eHhSamRseFg5M3NsWUpTZnNoRWpYaEEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS85NDk3MjQtOGEzOS00YTA0LWI1ZWUt
NzcyMmExZDlhYTQxLzEvM2Z3eHhSamRseFg5M3NsWUpTZnNoRWpYaEEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS85NDk3MjQtOGEzOS00YTA0LWI1ZWUtNzcyMmExZDlhYTQx
LzEvM2Z3eHhSamRseFg5M3NsWUpTZnNoRWpYaEEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGDeR0Mxa
9q/X7eeECZ2Px0sI9wHcaYynxKugcFbfqAMPuR9bsupQ0IPbMJ6Wk5MHicjm5h7j
IZXh1VG9GCjckrMZJNOX/8twZ6DbHdOZWthpreuLmglE41lOSGrVKOc5AZgfbIHN
jpXBzyUNjxk28IPUa6FM4k1vrMKvOlY7e6Q8b0Cvr2xjjqQJTDrCq3BQgSycY+23
xRxweN+R1CTRO14JNpPEYvNjnNdwnrP935ykDRD0FkFiRT7DKL45ZvKLcXvoPCAI
Am3dQTR8E1vVNM20X1qiRUp6MzC1mPFMGJARaHABcjkHtNcN/0DEfbeSQMXpEv1X
BnRGX/h+duhSJg==
-----END CERTIFICATE-----
Generated at Thu Nov 5 08:13:59 2026 by rpki-client