Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft
File: 3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft (raw, json)
Hash identifier: +P30xqeV4zwPdu6TjT1RpCeWPOCbsuTwfauZaKgI86A=
Subject key identifier: 8C:D2:5B:D8:16:A9:DC:E5:36:3D:47:80:B5:FC:4E:09:E5:58:C6:1F
Authority key identifier: DF:15:8D:CB:29:0E:C5:AE:7F:66:C1:FA:0F:8D:96:32:11:DE:EA:54
Certificate issuer: /CN=df158dcb290ec5ae7f66c1fa0f8d963211deea54
Certificate serial: 01A0CAB470BE7D918E972077268946E5D0A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft
Manifest number: 057C
Signing time: Tue 22 Sep 2026 20:00:17 +0000
Manifest this update: Tue 22 Sep 2026 20:00:17 +0000
Manifest next update: Wed 23 Sep 2026 20:00:17 +0000
Files and hashes: 1: 3xWNyykOxa5_ZsH6D42WMhHe6lQ.crl (hash: cSbzyjmp/wHGDCydZ+No4urst2NMJmxevvPPMC8xVBA=)
2: jMWE95cdXToEzGHRnrJGNVd_shY.roa (hash: ggn3Fl2wZwmOiQ6vfdHYpUj0Mg0aJO8O6vjWtwjQjkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b4:70:be:7d:91:8e:97:20:77:26:89:46:e5:d0:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df158dcb290ec5ae7f66c1fa0f8d963211deea54
Validity
Not Before: Sep 22 20:00:17 2026 GMT
Not After : Sep 23 20:00:17 2026 GMT
Subject: CN=8cd25bd816a9dce5363d4780b5fc4e09e558c61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:84:67:9f:ab:35:05:03:93:e6:6f:c1:92:17:
96:34:e0:3f:a9:a6:ee:d8:cf:b8:c8:4a:8b:01:f2:
07:da:a4:78:9c:06:f6:24:80:28:b4:6f:be:aa:d9:
6a:fc:9d:01:b0:29:51:4a:89:5a:ee:fa:8b:40:b9:
28:52:fb:fd:88:1b:a8:c6:2f:0b:34:fe:66:76:8b:
aa:56:b8:55:27:dd:ca:1c:0a:46:b1:84:8b:15:89:
dd:1a:cb:36:6d:4b:c1:58:fa:5a:8c:2e:c8:d2:a8:
3d:cb:11:b5:af:35:dc:c6:36:18:5d:d2:b2:b9:10:
2a:d1:42:82:c5:84:cc:35:44:ac:1d:04:9f:3f:91:
0b:ca:68:8b:d9:12:77:7c:41:96:bf:dd:2b:b5:95:
a6:f7:87:63:20:08:20:c8:72:c5:d0:ad:bf:0f:be:
d9:54:8a:f0:5b:1e:f2:88:11:03:c7:7b:ab:44:ef:
57:57:0b:af:d6:fb:69:5a:0c:ad:e8:1a:8b:5e:d0:
15:a2:d3:80:67:35:9d:33:08:7f:0a:b6:eb:c6:38:
15:75:07:23:6e:0b:82:ae:65:38:96:e6:10:4f:07:
2f:1b:53:11:0b:d4:93:40:a7:ba:20:d9:da:16:b9:
73:7c:36:9d:39:50:3f:99:45:ad:72:f6:77:66:cf:
67:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D2:5B:D8:16:A9:DC:E5:36:3D:47:80:B5:FC:4E:09:E5:58:C6:1F
X509v3 Authority Key Identifier:
keyid:DF:15:8D:CB:29:0E:C5:AE:7F:66:C1:FA:0F:8D:96:32:11:DE:EA:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xWNyykOxa5_ZsH6D42WMhHe6lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a54b85-af3e-47c6-80e7-c4142df35cc3/1/3xWNyykOxa5_ZsH6D42WMhHe6lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:59:6b:cc:0b:a4:1d:1c:b0:e0:c5:a3:e8:16:b1:40:7c:03:
a2:89:ee:9b:81:fb:9a:35:9f:9c:85:0f:b9:24:5c:9f:d9:8e:
66:37:75:6a:e8:b5:b6:4a:32:a4:cb:43:80:78:15:5a:91:94:
30:34:b5:87:ae:cf:b2:99:61:18:29:6f:ca:dc:2d:85:96:c1:
44:b5:6c:a7:fa:c6:cc:d0:1e:5f:b6:93:3a:06:21:80:44:6d:
2e:63:0a:d7:2a:40:ab:33:46:3e:e9:fc:db:ef:61:30:6d:27:
bf:59:69:29:b0:b8:24:06:40:94:25:68:18:c5:50:49:2a:3c:
c7:dd:3b:eb:a7:7b:7c:bf:5b:31:3f:03:cf:fb:64:bb:d2:ef:
04:fb:a9:34:69:a5:b7:a9:45:8c:d2:5d:c7:8e:da:51:fc:e2:
90:7a:90:ac:41:c1:4a:b9:ed:5c:32:97:15:af:dc:13:f4:e0:
c9:d8:ba:0f:a5:24:59:bf:88:36:40:0f:a6:b4:23:db:b7:b2:
34:c0:06:1b:5e:52:ac:b2:67:7d:93:0a:96:08:fc:a6:76:71:
18:55:da:89:2f:36:37:5c:46:99:fe:c0:53:87:59:45:ae:f6:
75:4c:87:b9:d5:52:2c:a6:6b:1c:c1:ca:15:7f:46:89:ef:46:
9d:0f:0c:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKtHC+fZGOlyB3JolG5dCpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMTU4ZGNiMjkwZWM1YWU3ZjY2YzFmYTBmOGQ5NjMyMTFk
ZWVhNTQwHhcNMjYwOTIyMjAwMDE3WhcNMjYwOTIzMjAwMDE3WjAzMTEwLwYDVQQD
Eyg4Y2QyNWJkODE2YTlkY2U1MzYzZDQ3ODBiNWZjNGUwOWU1NThjNjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IRnn6s1BQOT5m/BkheWNOA/qabu
2M+4yEqLAfIH2qR4nAb2JIAotG++qtlq/J0BsClRSola7vqLQLkoUvv9iBuoxi8L
NP5mdouqVrhVJ93KHApGsYSLFYndGss2bUvBWPpajC7I0qg9yxG1rzXcxjYYXdKy
uRAq0UKCxYTMNUSsHQSfP5ELymiL2RJ3fEGWv90rtZWm94djIAggyHLF0K2/D77Z
VIrwWx7yiBEDx3urRO9XVwuv1vtpWgyt6BqLXtAVotOAZzWdMwh/CrbrxjgVdQcj
bguCrmU4luYQTwcvG1MRC9STQKe6INnaFrlzfDadOVA/mUWtcvZ3Zs9nJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzSW9gWqdzlNj1HgLX8TgnlWMYfMB8GA1UdIwQY
MBaAFN8VjcspDsWuf2bB+g+NljIR3upUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3hXTnl5a094YTVfWnNINkQ0MldNaEhlNmxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9hNTRiODUtYWYzZS00N2M2LTgwZTct
YzQxNDJkZjM1Y2MzLzEvM3hXTnl5a094YTVfWnNINkQ0MldNaEhlNmxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9hNTRiODUtYWYzZS00N2M2LTgwZTctYzQxNDJkZjM1Y2Mz
LzEvM3hXTnl5a094YTVfWnNINkQ0MldNaEhlNmxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI1lrzAuk
HRyw4MWj6BaxQHwDoonum4H7mjWfnIUPuSRcn9mOZjd1aui1tkoypMtDgHgVWpGU
MDS1h67PsplhGClvytwthZbBRLVsp/rGzNAeX7aTOgYhgERtLmMK1ypAqzNGPun8
2+9hMG0nv1lpKbC4JAZAlCVoGMVQSSo8x90766d7fL9bMT8Dz/tku9LvBPupNGml
t6lFjNJdx47aUfzikHqQrEHBSrntXDKXFa/cE/Tgydi6D6UkWb+INkAPprQj27ey
NMAGG15SrLJnfZMKlgj8pnZxGFXaiS82N1xGmf7AU4dZRa72dUyHudVSLKZrHMHK
FX9Gie9GnQ8MhQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:37:47 2026 by rpki-client