Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
File: 3rFFdWCAr_G7APX5D9ny8nzFcyo.mft (raw, json)
Hash identifier: JWei1mV0C8+gVt4690gGxyGewWtefL9goza8KyWxRiE=
Subject key identifier: E1:D7:62:01:88:7B:2E:AB:06:28:DD:FB:54:B6:59:CA:9B:3F:98:7D
Authority key identifier: DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
Certificate issuer: /CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Certificate serial: 01A0C6A160D7D3EEA0A4169DB6037DA2EF6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
Manifest number: 13A7
Signing time: Tue 22 Sep 2026 01:00:59 +0000
Manifest this update: Tue 22 Sep 2026 01:00:59 +0000
Manifest next update: Wed 23 Sep 2026 01:00:59 +0000
Files and hashes: 1: 3rFFdWCAr_G7APX5D9ny8nzFcyo.crl (hash: /Uvo6EZOIWmGDOevtdSy7sfHt+IA7d6FBJj+Ds9RzME=)
2: TLDEMG13z099E9PPUlaFNgJGWNU.roa (hash: BuMLwHcrQNiLmPqXzsk/lZgeQTDappKSAbyz8iHf5NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a1:60:d7:d3:ee:a0:a4:16:9d:b6:03:7d:a2:ef:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Validity
Not Before: Sep 22 01:00:59 2026 GMT
Not After : Sep 23 01:00:59 2026 GMT
Subject: CN=e1d76201887b2eab0628ddfb54b659ca9b3f987d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8b:81:cc:56:13:12:49:98:62:a3:97:eb:f0:
04:21:00:4b:36:f4:07:6a:7f:03:90:d0:6e:dc:69:
0b:04:4d:a8:c2:ff:a2:31:df:37:8f:0d:65:4d:46:
02:2f:11:ef:38:17:b0:1f:5e:7e:6f:ca:13:83:a0:
87:4a:2c:ae:f1:0c:73:9e:35:f5:07:33:98:d7:42:
05:7a:d7:f5:78:b8:82:5e:a0:36:bb:c2:3b:0e:00:
ca:0a:91:8e:b8:ce:cf:e1:37:8d:6c:53:e0:a5:79:
e8:36:bb:b4:ac:3d:2c:17:54:33:9a:c5:b1:70:e0:
ed:bc:18:fd:7d:7f:b7:38:ed:12:ed:0a:02:ed:77:
c1:e0:d8:06:aa:94:cf:d0:d3:13:c9:04:29:70:80:
c8:e8:70:b8:ce:f9:25:6e:cd:ad:7a:fc:23:77:b1:
e5:66:61:98:d6:63:40:2b:4f:8c:7c:c6:77:aa:b2:
86:36:47:69:57:8a:9c:5b:9a:68:db:07:71:53:83:
53:96:29:b9:d2:8a:e0:26:76:f7:07:59:49:f3:f1:
f4:87:47:20:21:1d:b4:23:35:be:46:7e:7c:73:16:
6d:89:fb:1a:b7:13:a2:d5:99:05:4d:64:1c:92:2c:
39:20:a4:f5:82:0b:30:1d:b4:00:22:fc:41:9e:1d:
df:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D7:62:01:88:7B:2E:AB:06:28:DD:FB:54:B6:59:CA:9B:3F:98:7D
X509v3 Authority Key Identifier:
keyid:DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:b0:83:9c:96:57:87:4b:b2:95:4f:14:2e:0d:70:90:54:2a:
bb:fd:03:68:bc:43:33:02:72:4a:34:f1:e2:8f:4b:95:e6:d7:
29:f6:ad:b6:72:1a:ad:46:3b:b5:7c:b3:7b:54:72:13:4c:ca:
e4:12:66:c9:7f:4f:7e:d0:79:f0:74:ba:27:80:0c:23:bc:d5:
b0:ff:a2:ff:0e:90:02:33:22:73:99:e4:4c:2c:d6:02:b1:45:
8f:7d:bd:52:fa:06:df:8a:48:0a:a5:0c:22:a7:05:4e:73:37:
7a:a4:15:e2:c1:f5:2d:7e:29:c6:f6:e6:cc:1b:33:b6:86:8e:
57:12:2a:5d:1d:f8:48:14:97:f5:e2:da:3d:85:b8:84:10:1b:
3e:cd:46:24:17:5d:bc:9a:d2:85:64:7b:da:a5:d7:58:27:ff:
22:92:74:16:2a:6b:8e:33:ee:b1:74:7a:a7:9f:ee:49:61:d2:
36:2f:56:01:a3:0c:68:1a:79:26:0b:bd:a7:24:5c:72:0b:3b:
a3:50:53:28:d5:ed:5b:e3:99:88:81:00:09:3e:d7:86:23:92:
9c:e4:ec:b6:1c:d3:cc:04:46:32:d9:b5:4d:67:d0:c0:b7:a5:
42:23:87:7a:20:85:3e:e6:2b:3b:47:b7:f1:bc:29:b0:ca:32:
4b:f1:74:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGoWDX0+6gpBadtgN9ou9vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYjE0NTc1NjA4MGFmZjFiYjAwZjVmOTBmZDlmMmYyN2Nj
NTczMmEwHhcNMjYwOTIyMDEwMDU5WhcNMjYwOTIzMDEwMDU5WjAzMTEwLwYDVQQD
EyhlMWQ3NjIwMTg4N2IyZWFiMDYyOGRkZmI1NGI2NTljYTliM2Y5ODdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04uBzFYTEkmYYqOX6/AEIQBLNvQH
an8DkNBu3GkLBE2owv+iMd83jw1lTUYCLxHvOBewH15+b8oTg6CHSiyu8QxznjX1
BzOY10IFetf1eLiCXqA2u8I7DgDKCpGOuM7P4TeNbFPgpXnoNru0rD0sF1QzmsWx
cODtvBj9fX+3OO0S7QoC7XfB4NgGqpTP0NMTyQQpcIDI6HC4zvklbs2tevwjd7Hl
ZmGY1mNAK0+MfMZ3qrKGNkdpV4qcW5po2wdxU4NTlim50orgJnb3B1lJ8/H0h0cg
IR20IzW+Rn58cxZtifsatxOi1ZkFTWQckiw5IKT1ggswHbQAIvxBnh3fXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHXYgGIey6rBijd+1S2WcqbP5h9MB8GA1UdIwQY
MBaAFN6xRXVggK/xuwD1+Q/Z8vJ8xXMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3JGRmRXQ0FyX0c3QVBYNUQ5bnk4bnpGY3lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9hNjVkMTQtOTM2NS00MGM5LWE1Njgt
M2ZmOTY0NTUwM2U5LzEvM3JGRmRXQ0FyX0c3QVBYNUQ5bnk4bnpGY3lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9hNjVkMTQtOTM2NS00MGM5LWE1NjgtM2ZmOTY0NTUwM2U5
LzEvM3JGRmRXQ0FyX0c3QVBYNUQ5bnk4bnpGY3lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn7CDnJZX
h0uylU8ULg1wkFQqu/0DaLxDMwJySjTx4o9LlebXKfattnIarUY7tXyze1RyE0zK
5BJmyX9PftB58HS6J4AMI7zVsP+i/w6QAjMic5nkTCzWArFFj329UvoG34pICqUM
IqcFTnM3eqQV4sH1LX4pxvbmzBsztoaOVxIqXR34SBSX9eLaPYW4hBAbPs1GJBdd
vJrShWR72qXXWCf/IpJ0FiprjjPusXR6p5/uSWHSNi9WAaMMaBp5Jgu9pyRccgs7
o1BTKNXtW+OZiIEACT7XhiOSnOTsthzTzARGMtm1TWfQwLelQiOHeiCFPuYrO0e3
8bwpsMoyS/F06w==
-----END CERTIFICATE-----
Generated at Tue Sep 22 06:19:31 2026 by rpki-client