Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
File: 3erZGbhaEwUdAgi34o3cyzmLFNY.mft (raw, json)
Hash identifier: nRON4DBqy0qNsHm5Ct1JUDh0uGy7cb4D8Ivd9bEesxg=
Subject key identifier: 59:2D:1C:78:FB:19:1A:CF:31:2E:66:83:A0:00:1C:F4:B4:79:D3:FC
Authority key identifier: DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
Certificate issuer: /CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Certificate serial: 01A0C39F8D2926109EB649FDD392C565DB0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
Manifest number: 1A6B
Signing time: Mon 21 Sep 2026 11:00:08 +0000
Manifest this update: Mon 21 Sep 2026 11:00:08 +0000
Manifest next update: Tue 22 Sep 2026 11:00:08 +0000
Files and hashes: 1: 3erZGbhaEwUdAgi34o3cyzmLFNY.crl (hash: MQcE/Oy777ko4hbeMBx3M3zqlBGZtVwt9bwjofWrhrQ=)
2: iKwLG1q1sDs9tvR7rIxpNbBHq4g.roa (hash: 5Al8Pm91tYMp0+j7fJGmguSqWX96C92TH8gJMDHEyyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:9f:8d:29:26:10:9e:b6:49:fd:d3:92:c5:65:db:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddead919b85a13051d0208b7e28ddccb398b14d6
Validity
Not Before: Sep 21 11:00:08 2026 GMT
Not After : Sep 22 11:00:08 2026 GMT
Subject: CN=592d1c78fb191acf312e6683a0001cf4b479d3fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a0:dd:c1:a3:11:40:75:c6:6c:cb:68:16:15:
5c:a5:bf:0b:4e:9b:4c:3f:81:6e:b5:ab:a0:ed:39:
38:66:13:b6:b6:d0:64:6a:8e:fa:8f:6b:78:2c:3f:
a9:18:99:68:48:1d:2a:0e:55:fe:f3:e2:3f:58:dc:
8b:ab:db:74:44:7a:d0:c2:eb:8b:ae:8f:d6:20:7c:
20:dc:fe:74:65:03:f8:b9:ab:0a:c3:f7:46:07:74:
99:37:c7:e9:06:c1:c0:b9:32:1d:4d:17:02:a0:65:
7a:b8:39:dc:9c:db:e6:6e:4a:19:18:fd:aa:1e:f4:
40:44:24:01:b3:08:0e:53:33:a6:7d:0e:bd:7e:f4:
10:42:f1:4b:04:5e:fb:92:75:64:76:de:16:0d:8a:
6d:2c:e8:c2:51:6b:7a:65:9d:74:2d:48:7d:02:4b:
9d:7b:a5:8e:bb:62:02:40:82:12:27:d5:45:88:31:
79:c2:df:b8:76:6a:b1:fc:33:2a:72:af:95:ad:2f:
0c:6b:c8:a7:36:df:6d:82:74:6a:52:32:7a:c1:35:
1c:a7:51:59:13:3f:d2:d9:bb:3c:9a:44:6b:f3:5a:
00:72:36:3c:69:aa:29:a0:8a:fd:d3:45:da:dc:6d:
db:b2:38:33:0b:a0:03:10:77:a9:01:0a:90:74:22:
95:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2D:1C:78:FB:19:1A:CF:31:2E:66:83:A0:00:1C:F4:B4:79:D3:FC
X509v3 Authority Key Identifier:
keyid:DD:EA:D9:19:B8:5A:13:05:1D:02:08:B7:E2:8D:DC:CB:39:8B:14:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3erZGbhaEwUdAgi34o3cyzmLFNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8effe4-edbb-4dd4-85d4-48b8b5a9b411/1/3erZGbhaEwUdAgi34o3cyzmLFNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f0:46:db:cc:3e:70:65:39:d8:6b:73:b6:15:8d:64:d0:87:
9a:a2:19:4b:c1:93:be:e8:94:09:45:67:3f:e6:ab:bb:6f:2e:
74:3f:8b:8c:f4:58:59:51:04:2b:35:75:13:ac:39:2b:37:9d:
64:e9:d9:d2:7a:21:26:3f:ea:75:da:aa:5d:9c:17:96:e0:e3:
1a:ee:77:f1:86:f5:81:5b:08:0c:0c:a5:32:c6:e5:f1:d1:e5:
a0:84:72:a7:04:2c:a0:9e:e1:81:e3:83:86:a8:5b:5f:67:05:
20:59:07:ff:41:0d:18:42:8f:ab:67:b0:5d:9d:6a:82:a9:06:
ee:70:75:a1:2f:60:56:66:b2:fb:75:2b:61:62:ed:06:ed:fa:
53:57:ac:99:b7:d0:a8:19:78:b3:2a:67:2c:73:8a:8b:d5:d5:
ce:6e:24:44:50:1a:1d:8e:a3:5e:57:ae:ca:ab:ec:fb:ba:f6:
e5:4d:9e:bc:ed:f8:86:c7:f2:81:92:b5:7b:e6:24:27:3d:05:
e8:89:d9:ae:ee:31:da:ec:02:34:bd:33:0c:bf:75:07:ca:42:
62:eb:c3:76:e2:c9:fa:cf:02:4b:03:3c:53:bf:3f:bf:df:a1:
94:5b:7f:7c:b7:4d:eb:d8:e0:56:eb:93:79:17:fe:38:90:00:
10:d9:c5:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDn40pJhCetkn905LFZdsOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZWFkOTE5Yjg1YTEzMDUxZDAyMDhiN2UyOGRkY2NiMzk4
YjE0ZDYwHhcNMjYwOTIxMTEwMDA4WhcNMjYwOTIyMTEwMDA4WjAzMTEwLwYDVQQD
Eyg1OTJkMWM3OGZiMTkxYWNmMzEyZTY2ODNhMDAwMWNmNGI0NzlkM2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qDdwaMRQHXGbMtoFhVcpb8LTptM
P4Futaug7Tk4ZhO2ttBkao76j2t4LD+pGJloSB0qDlX+8+I/WNyLq9t0RHrQwuuL
ro/WIHwg3P50ZQP4uasKw/dGB3SZN8fpBsHAuTIdTRcCoGV6uDncnNvmbkoZGP2q
HvRARCQBswgOUzOmfQ69fvQQQvFLBF77knVkdt4WDYptLOjCUWt6ZZ10LUh9Akud
e6WOu2ICQIISJ9VFiDF5wt+4dmqx/DMqcq+VrS8Ma8inNt9tgnRqUjJ6wTUcp1FZ
Ez/S2bs8mkRr81oAcjY8aaopoIr900Xa3G3bsjgzC6ADEHepAQqQdCKV5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFktHHj7GRrPMS5mg6AAHPS0edP8MB8GA1UdIwQY
MBaAFN3q2Rm4WhMFHQIIt+KN3Ms5ixTWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2VyWkdiaGFFd1VkQWdpMzRvM2N5em1MRk5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS84ZWZmZTQtZWRiYi00ZGQ0LTg1ZDQt
NDhiOGI1YTliNDExLzEvM2VyWkdiaGFFd1VkQWdpMzRvM2N5em1MRk5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS84ZWZmZTQtZWRiYi00ZGQ0LTg1ZDQtNDhiOGI1YTliNDEx
LzEvM2VyWkdiaGFFd1VkQWdpMzRvM2N5em1MRk5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkPBG28w+
cGU52GtzthWNZNCHmqIZS8GTvuiUCUVnP+aru28udD+LjPRYWVEEKzV1E6w5Kzed
ZOnZ0nohJj/qddqqXZwXluDjGu538Yb1gVsIDAylMsbl8dHloIRypwQsoJ7hgeOD
hqhbX2cFIFkH/0ENGEKPq2ewXZ1qgqkG7nB1oS9gVmay+3UrYWLtBu36U1esmbfQ
qBl4sypnLHOKi9XVzm4kRFAaHY6jXleuyqvs+7r25U2evO34hsfygZK1e+YkJz0F
6InZru4x2uwCNL0zDL91B8pCYuvDduLJ+s8CSwM8U78/v9+hlFt/fLdN69jgVuuT
eRf+OJAAENnFVQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:42:30 2026 by rpki-client