Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
File: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft (raw, json)
Hash identifier: 2UhBhcWGY7jdQZrg4NFDo9bedl7Eu4svyt3z3WTIOEM=
Subject key identifier: F2:75:8C:DF:E1:9E:2C:B6:45:50:37:F1:45:4C:63:C1:92:BB:02:B2
Authority key identifier: DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB
Certificate issuer: /CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
Certificate serial: 01A0DDCE5B3464BE380320AC653BEE0F6579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
Manifest number: 1717
Signing time: Sat 26 Sep 2026 13:01:23 +0000
Manifest this update: Sat 26 Sep 2026 13:01:23 +0000
Manifest next update: Sun 27 Sep 2026 13:01:23 +0000
Files and hashes: 1: 3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl (hash: jVLpdZaH0awGvdSLwVbWkrikV6sbP48lnYY1LQq7hmQ=)
2: INE61DSnT0byRQAlBRacyXpwM4M.roa (hash: ZjFf2bVbEAR4MMNRtk1mizzAeZIxKBJHJE2Ioiflxw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:ce:5b:34:64:be:38:03:20:ac:65:3b:ee:0f:65:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab
Validity
Not Before: Sep 26 13:01:23 2026 GMT
Not After : Sep 27 13:01:23 2026 GMT
Subject: CN=f2758cdfe19e2cb6455037f1454c63c192bb02b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:01:ac:29:a7:ce:6f:eb:88:11:dc:8f:c2:6a:
2b:b2:84:c6:77:f4:88:6c:30:fb:be:42:8a:b0:d9:
14:8e:f8:7b:96:26:5d:dd:6d:eb:8b:6b:8f:ff:75:
2d:1f:2b:93:23:2b:54:c7:ec:85:4b:80:3d:47:87:
4e:73:ef:6b:c9:d9:18:a6:52:70:76:d3:d1:54:44:
65:08:8a:ee:2d:da:e6:10:86:97:a9:50:2b:89:60:
c7:0b:13:e1:01:91:3c:b8:46:37:cf:61:04:fb:42:
bd:89:67:f9:76:5c:34:76:c5:7c:90:ad:1a:df:f2:
d5:17:4a:2d:7a:b3:d2:d3:23:7c:82:8a:34:f9:31:
eb:58:ef:53:68:88:a4:13:cb:32:e7:1a:10:6b:82:
83:b9:c7:ee:49:4a:9e:ad:9f:07:fc:45:ff:73:42:
75:e2:75:4c:4a:2b:97:34:3a:7c:91:90:50:2f:5c:
d7:20:30:b3:77:80:a0:de:e5:c5:48:97:39:da:b6:
0a:7b:f8:e5:45:7f:43:df:e0:2c:ac:35:3d:b4:4c:
60:f4:4d:1a:81:d7:4f:5f:33:3a:4d:54:9e:2d:5f:
0a:fa:57:7f:7c:a4:0c:61:40:b5:51:a8:9f:34:50:
ab:c1:b6:8d:bf:d6:d1:2f:cf:74:57:44:91:a3:17:
e2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:75:8C:DF:E1:9E:2C:B6:45:50:37:F1:45:4C:63:C1:92:BB:02:B2
X509v3 Authority Key Identifier:
keyid:DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:8b:ff:01:b6:9e:d8:93:68:2b:32:e9:1c:90:13:1a:14:09:
5e:f9:57:89:a4:3f:4e:68:fd:a1:2e:bb:b5:20:32:c6:d0:82:
79:db:14:69:29:73:8c:b5:9b:35:42:1a:7a:d7:bf:4b:6c:d7:
c5:7b:94:e7:43:9b:fd:ad:13:b3:1e:4c:63:0f:b3:8f:2f:06:
86:f7:d2:90:a3:39:14:82:4e:48:2a:2a:0c:bb:e4:75:2b:5e:
76:4b:1c:79:27:b2:f2:da:5c:4a:9b:05:84:d9:9c:85:ed:91:
29:32:1a:6f:3b:9f:08:99:67:91:ef:1d:c2:43:d4:6f:c1:cb:
8b:c0:8a:37:01:23:24:68:10:08:9d:eb:49:cd:77:0d:5c:44:
43:c7:c2:2e:01:d1:73:34:60:af:04:b3:88:2e:69:76:b0:6e:
bc:33:e6:c3:1d:ac:d1:7b:91:71:1c:b5:1a:ea:f7:40:3a:52:
55:c1:55:46:75:a2:b4:54:5f:48:6e:fb:8c:30:5a:52:06:31:
b3:7c:9a:6c:45:93:08:20:cc:37:c8:11:39:58:c0:c6:90:53:
43:86:45:61:a1:a2:89:2c:2f:8e:64:58:8a:4e:f9:f3:bb:d0:
b9:62:78:53:5d:ff:1d:71:bf:7c:2b:da:2e:5e:d3:74:b5:f5:
39:a5:16:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdzls0ZL44AyCsZTvuD2V5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNTFjM2M1ZGRjNGZiNjEzODFjM2JlYTI0YzFiYTRmNzQ5
OThlYWIwHhcNMjYwOTI2MTMwMTIzWhcNMjYwOTI3MTMwMTIzWjAzMTEwLwYDVQQD
EyhmMjc1OGNkZmUxOWUyY2I2NDU1MDM3ZjE0NTRjNjNjMTkyYmIwMmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+AGsKafOb+uIEdyPwmorsoTGd/SI
bDD7vkKKsNkUjvh7liZd3W3ri2uP/3UtHyuTIytUx+yFS4A9R4dOc+9rydkYplJw
dtPRVERlCIruLdrmEIaXqVAriWDHCxPhAZE8uEY3z2EE+0K9iWf5dlw0dsV8kK0a
3/LVF0oterPS0yN8goo0+THrWO9TaIikE8sy5xoQa4KDucfuSUqerZ8H/EX/c0J1
4nVMSiuXNDp8kZBQL1zXIDCzd4Cg3uXFSJc52rYKe/jlRX9D3+AsrDU9tExg9E0a
gddPXzM6TVSeLV8K+ld/fKQMYUC1UaifNFCrwbaNv9bRL890V0SRoxfiywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJ1jN/hniy2RVA38UVMY8GSuwKyMB8GA1UdIwQY
MBaAFN5Rw8XdxPthOBw76iTBuk90mY6rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2xIRHhkM0UtMkU0SER2cUpNRzZUM1NaanFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82ZGU2NWUtMDRiZC00MzQ2LTg1YjEt
YTUzMjVkNDQxNzAyLzEvM2xIRHhkM0UtMkU0SER2cUpNRzZUM1NaanFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS82ZGU2NWUtMDRiZC00MzQ2LTg1YjEtYTUzMjVkNDQxNzAy
LzEvM2xIRHhkM0UtMkU0SER2cUpNRzZUM1NaanFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfIv/Abae
2JNoKzLpHJATGhQJXvlXiaQ/Tmj9oS67tSAyxtCCedsUaSlzjLWbNUIaete/S2zX
xXuU50Ob/a0Tsx5MYw+zjy8GhvfSkKM5FIJOSCoqDLvkdStedksceSey8tpcSpsF
hNmche2RKTIabzufCJlnke8dwkPUb8HLi8CKNwEjJGgQCJ3rSc13DVxEQ8fCLgHR
czRgrwSziC5pdrBuvDPmwx2s0XuRcRy1Gur3QDpSVcFVRnWitFRfSG77jDBaUgYx
s3yabEWTCCDMN8gROVjAxpBTQ4ZFYaGiiSwvjmRYik7587vQuWJ4U13/HXG/fCva
Ll7TdLX1OaUWPA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 15:35:25 2026 by rpki-client