Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
File: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft (raw, json)
Hash identifier: hzMyFD4pWLb8hnxx/3CRAPFk5nXkwmj1YFtnbnyZdi8=
Subject key identifier: 09:3D:93:E0:E6:58:57:A6:EE:50:74:1A:A8:35:90:17:27:8D:97:73
Authority key identifier: DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
Certificate issuer: /CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
Certificate serial: 01A0D4CBE7F15F4935D863BEFADF4C587745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 19:02:07 +0000
Manifest this update: Thu 24 Sep 2026 19:02:07 +0000
Manifest next update: Fri 25 Sep 2026 19:02:07 +0000
Files and hashes: 1: 3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl (hash: BwxSm7ww+iIw5iMxbpeYEubOcyfZsVvxkTOvYaTGfOk=)
2: SIrHAW8-wlZDKzvy2I8a6ATw1Os.roa (hash: J87HrMwqHtHS9Z8HI1NmmjUGTf0po2q7EzVGTEZtP5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:e7:f1:5f:49:35:d8:63:be:fa:df:4c:58:77:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de1139218c52e8fe7f7c314b6639e7f87e5679c8
Validity
Not Before: Sep 24 19:02:07 2026 GMT
Not After : Sep 25 19:02:07 2026 GMT
Subject: CN=093d93e0e65857a6ee50741aa8359017278d9773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fa:24:bd:01:89:d8:5e:c2:a0:cc:b5:62:dd:
cb:bc:d5:19:86:0f:94:fb:9a:72:32:e4:05:e4:a7:
00:38:1c:83:7d:28:99:4e:cb:c2:6c:6f:f4:77:d7:
59:31:ea:42:4e:c1:8f:a3:87:d6:01:9a:07:15:c3:
f1:81:66:5f:fb:6c:e1:cb:e7:a3:7f:75:3b:b6:62:
f0:c8:36:f0:47:43:7f:f2:e6:d6:01:5e:89:14:fb:
8f:26:a3:fa:f4:1c:af:64:c1:66:cf:c2:47:d0:4b:
48:6c:ce:dc:5d:dd:bb:1f:38:75:26:92:71:e3:0d:
f2:88:5e:4c:99:c5:4d:60:f0:25:ba:28:57:a5:3d:
a4:8a:c5:60:c2:b6:50:5a:87:55:bf:5a:17:cb:7c:
b7:f0:a5:ff:46:47:e0:e1:eb:19:9b:ba:f3:f9:0d:
b4:48:37:86:88:5c:d7:c6:05:b0:7e:c9:d8:b8:d1:
10:b8:d9:8b:0e:aa:08:04:ee:ad:9b:c5:76:71:9f:
63:bc:38:a0:9d:03:75:29:28:42:68:83:70:7e:c1:
d1:0a:69:69:c3:38:9a:13:8a:f6:7a:9c:2f:c1:ad:
7d:c3:d2:34:76:cc:ca:61:51:5d:35:8f:4c:4a:06:
07:c7:f6:ba:16:47:8b:25:eb:3c:99:a3:02:86:60:
cf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3D:93:E0:E6:58:57:A6:EE:50:74:1A:A8:35:90:17:27:8D:97:73
X509v3 Authority Key Identifier:
keyid:DE:11:39:21:8C:52:E8:FE:7F:7C:31:4B:66:39:E7:F8:7E:56:79:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hE5IYxS6P5_fDFLZjnn-H5Wecg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deb903-26da-47a8-9b05-38a385f35e3b/1/3hE5IYxS6P5_fDFLZjnn-H5Wecg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:21:6d:9c:79:86:52:37:78:e3:51:2b:9d:fa:52:68:05:83:
84:a4:eb:bd:27:16:12:e6:7e:44:b7:fb:88:6e:33:ab:0e:2a:
f3:be:fa:5b:6f:69:dc:72:b5:90:91:3e:7f:e1:cc:f2:69:09:
b4:47:00:03:49:9e:92:27:ed:c3:dc:38:1c:b6:08:5d:ad:13:
08:42:d8:11:c0:a9:3e:07:c1:1d:3a:be:74:88:7d:59:4e:bb:
b6:c0:67:08:8a:88:8a:bb:9c:ab:6c:54:75:32:11:b7:06:e3:
40:70:24:20:c2:06:63:2e:f3:b3:ff:45:df:a2:71:90:f3:6f:
af:99:3b:2d:14:72:cb:03:91:4a:30:62:2e:dc:0a:f0:5e:c9:
fa:97:65:14:7a:8e:07:46:c3:8f:74:b2:62:38:cc:c5:ad:e9:
3c:7c:02:e3:75:78:00:b6:7f:85:df:29:a2:53:c7:a2:e7:d6:
80:87:75:81:31:f7:72:e1:94:1b:df:b5:78:1a:1d:cc:68:91:
53:dc:cb:14:9e:e1:1f:f4:51:2b:39:80:eb:90:0a:1e:9a:2e:
d4:1f:04:b1:96:6f:a8:15:02:e9:21:85:01:49:6e:a8:b7:ba:
c4:c9:4f:33:73:76:b0:dd:11:b4:1c:49:ec:19:4e:e1:f7:58:
2e:35:72:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUy+fxX0k12GO++t9MWHdFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMTEzOTIxOGM1MmU4ZmU3ZjdjMzE0YjY2MzllN2Y4N2U1
Njc5YzgwHhcNMjYwOTI0MTkwMjA3WhcNMjYwOTI1MTkwMjA3WjAzMTEwLwYDVQQD
EygwOTNkOTNlMGU2NTg1N2E2ZWU1MDc0MWFhODM1OTAxNzI3OGQ5NzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPokvQGJ2F7CoMy1Yt3LvNUZhg+U
+5pyMuQF5KcAOByDfSiZTsvCbG/0d9dZMepCTsGPo4fWAZoHFcPxgWZf+2zhy+ej
f3U7tmLwyDbwR0N/8ubWAV6JFPuPJqP69ByvZMFmz8JH0EtIbM7cXd27Hzh1JpJx
4w3yiF5MmcVNYPAluihXpT2kisVgwrZQWodVv1oXy3y38KX/Rkfg4esZm7rz+Q20
SDeGiFzXxgWwfsnYuNEQuNmLDqoIBO6tm8V2cZ9jvDignQN1KShCaINwfsHRCmlp
wziaE4r2epwvwa19w9I0dszKYVFdNY9MSgYHx/a6FkeLJes8maMChmDPwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAk9k+DmWFem7lB0Gqg1kBcnjZdzMB8GA1UdIwQY
MBaAFN4ROSGMUuj+f3wxS2Y55/h+VnnIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2hFNUlZeFM2UDVfZkRGTFpqbm4tSDVXZWNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kZWI5MDMtMjZkYS00N2E4LTliMDUt
MzhhMzg1ZjM1ZTNiLzEvM2hFNUlZeFM2UDVfZkRGTFpqbm4tSDVXZWNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9kZWI5MDMtMjZkYS00N2E4LTliMDUtMzhhMzg1ZjM1ZTNi
LzEvM2hFNUlZeFM2UDVfZkRGTFpqbm4tSDVXZWNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALyFtnHmG
Ujd441ErnfpSaAWDhKTrvScWEuZ+RLf7iG4zqw4q8776W29p3HK1kJE+f+HM8mkJ
tEcAA0mekiftw9w4HLYIXa0TCELYEcCpPgfBHTq+dIh9WU67tsBnCIqIirucq2xU
dTIRtwbjQHAkIMIGYy7zs/9F36JxkPNvr5k7LRRyywORSjBiLtwK8F7J+pdlFHqO
B0bDj3SyYjjMxa3pPHwC43V4ALZ/hd8polPHoufWgId1gTH3cuGUG9+1eBodzGiR
U9zLFJ7hH/RRKzmA65AKHpou1B8EsZZvqBUC6SGFAUluqLe6xMlPM3N2sN0RtBxJ
7BlO4fdYLjVy+w==
-----END CERTIFICATE-----
Generated at Thu Sep 24 21:13:14 2026 by rpki-client