Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
File: 3DiEAh0bAujBa1VXQ9_rnajkjjE.mft (raw, json)
Hash identifier: W/zifyw+t8MKM1TAo8Law6qo41DE9uqGIpN8IujwE2I=
Subject key identifier: 5A:77:88:1B:A6:D3:02:09:C7:58:CC:07:16:8D:DD:2F:48:3C:C6:EE
Authority key identifier: DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31
Certificate issuer: /CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
Certificate serial: 01A0BFFA5CCC1C5164F3C391852828FA9366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
Manifest number: 1A6A
Signing time: Sun 20 Sep 2026 18:00:50 +0000
Manifest this update: Sun 20 Sep 2026 18:00:50 +0000
Manifest next update: Mon 21 Sep 2026 18:00:50 +0000
Files and hashes: 1: 3DiEAh0bAujBa1VXQ9_rnajkjjE.crl (hash: P2axCTtr0d9xXqbg4igXhQzJm5xVnkzCUNdz8h92eOY=)
2: MkXamkMit0DUCscCJeOeai_2BUE.roa (hash: WMrPqELHvgkrdxREhlBpsAdq+q/gtttubRFmvCN11rs=)
3: WVFWsnDyURdYEX6Y48O_tzjkAoE.roa (hash: vDQgxFeJsm3RaP7KUS8Geu388WUgzUBm4NzCZDCx6Hk=)
4: jIASpROSIV_qZhR1JMZmDWlpQjE.roa (hash: fhdz/8TRPnLedG78rrZ+dqgOjuSc/WvPYigkuKXyrVM=)
5: vEJs2SnUIIpadefjvWpVjOcdWIo.roa (hash: B4tVC7LpTfki/9dpUMetUexqLXQn7ZVvuYAjP6iDSEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 18:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:fa:5c:cc:1c:51:64:f3:c3:91:85:28:28:fa:93:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
Validity
Not Before: Sep 20 18:00:50 2026 GMT
Not After : Sep 21 18:00:50 2026 GMT
Subject: CN=5a77881ba6d30209c758cc07168ddd2f483cc6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:69:d6:87:fe:e4:9d:89:3e:70:bb:9b:89:d0:
0e:10:0c:ff:c5:bf:1a:71:05:3c:00:09:16:d7:98:
5d:e5:ff:4c:96:12:de:80:d9:41:c1:bb:15:d7:12:
7a:db:f3:de:27:bc:7f:43:5a:b9:e7:0f:8d:ec:fc:
89:f2:45:d7:32:37:67:45:aa:5c:de:62:9f:8a:5f:
3e:fd:97:8d:cd:44:2e:5b:6b:0d:92:ac:7e:b5:89:
7a:bd:48:95:78:3a:ee:72:1d:3a:0d:46:5e:45:75:
ef:5e:d2:d4:55:18:cb:ba:e9:45:99:90:f9:ac:8f:
17:c3:ab:2e:ae:2e:b5:64:c7:3f:40:a6:88:32:be:
19:e2:67:51:f3:b7:3d:79:7f:f5:db:3b:5e:68:02:
27:cf:ff:8c:a8:0f:dc:05:5d:a6:b7:90:ed:94:16:
2b:c5:52:95:7e:61:bf:f2:46:a0:e7:bf:f8:9a:01:
2e:8d:60:f5:01:6d:57:d1:f9:35:39:78:65:85:08:
96:48:7e:26:e2:f5:b5:77:6c:10:de:e5:c8:c5:84:
72:4e:79:8e:19:41:76:dc:ae:75:b1:b4:1e:46:17:
84:d1:b7:5c:f4:4e:6e:87:a8:01:41:7a:7b:7d:9f:
1f:ef:fd:e1:5f:1f:42:8a:71:ac:7e:2c:53:1e:7f:
70:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:77:88:1B:A6:D3:02:09:C7:58:CC:07:16:8D:DD:2F:48:3C:C6:EE
X509v3 Authority Key Identifier:
keyid:DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:36:aa:3e:f3:37:d4:a8:fe:fc:9d:1b:de:6e:06:29:6c:6c:
d3:e9:cd:6d:65:40:45:41:84:89:ed:5d:40:e0:20:92:7e:c8:
b4:0e:07:b8:47:a7:99:b2:aa:6e:c7:b3:a6:48:e2:73:a4:9b:
4a:ad:e8:0e:b4:a2:0e:d9:37:c3:c8:02:b3:f2:c4:c7:f3:ca:
95:9e:5c:f5:97:e2:2b:55:46:ee:be:bd:b0:8f:20:20:77:0f:
02:8e:9f:ca:d0:e3:42:7c:6c:06:60:11:f6:e0:e0:bc:d8:09:
7d:81:b8:a8:ae:38:ea:b5:6e:63:e5:fb:88:40:ce:3f:90:14:
21:5d:c5:e4:57:f0:9e:7d:55:29:1e:13:3d:cf:d2:ef:49:c1:
6e:67:d4:00:6b:51:ea:dc:1d:ee:d7:f7:dd:80:90:d0:39:ee:
40:07:dd:40:d8:b7:6f:30:8b:33:a3:3d:2a:31:8c:70:62:65:
59:fa:1b:fc:7f:03:0d:e2:dd:61:01:31:9e:01:a1:3a:27:25:
8b:c0:cb:13:46:56:ed:e6:81:50:e2:5c:b3:fa:ac:f2:93:77:
9f:72:bc:b0:a2:bd:66:a2:07:09:0a:b7:5e:ab:30:b6:07:f5:
55:e7:66:2e:75:36:80:82:59:ba:35:e7:73:5f:81:c4:70:95:
3a:ae:76:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC/+lzMHFFk88ORhSgo+pNmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMzg4NDAyMWQxYjAyZThjMTZiNTU1NzQzZGZlYjlkYThl
NDhlMzEwHhcNMjYwOTIwMTgwMDUwWhcNMjYwOTIxMTgwMDUwWjAzMTEwLwYDVQQD
Eyg1YTc3ODgxYmE2ZDMwMjA5Yzc1OGNjMDcxNjhkZGQyZjQ4M2NjNmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWnWh/7knYk+cLubidAOEAz/xb8a
cQU8AAkW15hd5f9MlhLegNlBwbsV1xJ62/PeJ7x/Q1q55w+N7PyJ8kXXMjdnRapc
3mKfil8+/ZeNzUQuW2sNkqx+tYl6vUiVeDruch06DUZeRXXvXtLUVRjLuulFmZD5
rI8Xw6suri61ZMc/QKaIMr4Z4mdR87c9eX/12zteaAInz/+MqA/cBV2mt5DtlBYr
xVKVfmG/8kag57/4mgEujWD1AW1X0fk1OXhlhQiWSH4m4vW1d2wQ3uXIxYRyTnmO
GUF23K51sbQeRheE0bdc9E5uh6gBQXp7fZ8f7/3hXx9CinGsfixTHn9wwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFp3iBum0wIJx1jMBxaN3S9IPMbuMB8GA1UdIwQY
MBaAFNw4hAIdGwLowWtVV0Pf652o5I4xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0RpRUFoMGJBdWpCYTFWWFE5X3JuYWprampFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wY2IyZjktOGVmOS00ZWViLTk2MmEt
ZDhiNGUwZDBkNmQ1LzEvM0RpRUFoMGJBdWpCYTFWWFE5X3JuYWprampFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8wY2IyZjktOGVmOS00ZWViLTk2MmEtZDhiNGUwZDBkNmQ1
LzEvM0RpRUFoMGJBdWpCYTFWWFE5X3JuYWprampFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGTaqPvM3
1Kj+/J0b3m4GKWxs0+nNbWVARUGEie1dQOAgkn7ItA4HuEenmbKqbsezpkjic6Sb
Sq3oDrSiDtk3w8gCs/LEx/PKlZ5c9ZfiK1VG7r69sI8gIHcPAo6fytDjQnxsBmAR
9uDgvNgJfYG4qK446rVuY+X7iEDOP5AUIV3F5Ffwnn1VKR4TPc/S70nBbmfUAGtR
6twd7tf33YCQ0DnuQAfdQNi3bzCLM6M9KjGMcGJlWfob/H8DDeLdYQExngGhOicl
i8DLE0ZW7eaBUOJcs/qs8pN3n3K8sKK9ZqIHCQq3Xqswtgf1VedmLnU2gIJZujXn
c1+BxHCVOq521w==
-----END CERTIFICATE-----
Generated at Mon Sep 21 05:22:10 2026 by rpki-client