Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
File: w3Q8id807HcKZZc_EAUUa_sysPI.mft (raw, json)
Hash identifier: EQBMsBTX3OP6VI0cS6Hl9KzU+LZ2diEQ5oMiiTgtqOg=
Subject key identifier: E8:5A:D0:97:68:C5:31:F5:92:72:4B:B7:22:75:10:87:6D:4C:2B:FC
Authority key identifier: C3:74:3C:89:DF:34:EC:77:0A:65:97:3F:10:05:14:6B:FB:32:B0:F2
Certificate issuer: /CN=c3743c89df34ec770a65973f1005146bfb32b0f2
Certificate serial: 01A0C88FD443FE024E21F7B4940E9456A737
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
Manifest number: 1149
Signing time: Tue 22 Sep 2026 10:01:04 +0000
Manifest this update: Tue 22 Sep 2026 10:01:04 +0000
Manifest next update: Wed 23 Sep 2026 10:01:04 +0000
Files and hashes: 1: w3Q8id807HcKZZc_EAUUa_sysPI.crl (hash: R8QAJ/k71U23icmG76XE+OhTsN8Qn21dOhUwnbXIJgM=)
2: wUc3S_D16XdipknJCTPDOkYeAwY.roa (hash: 0ohTvuZNcLXWt6aaBFxx4qj0TlX4E91Ut4sGjwIPaz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:8f:d4:43:fe:02:4e:21:f7:b4:94:0e:94:56:a7:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3743c89df34ec770a65973f1005146bfb32b0f2
Validity
Not Before: Sep 22 10:01:04 2026 GMT
Not After : Sep 23 10:01:04 2026 GMT
Subject: CN=e85ad09768c531f592724bb7227510876d4c2bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3e:0b:b4:64:19:73:07:0a:f4:77:be:ac:12:
95:c6:65:14:ed:f0:1d:0f:28:f8:88:10:96:be:f8:
c6:95:d7:80:42:da:a3:57:8f:d0:0e:ec:05:b8:ba:
dd:9a:63:df:22:5c:1d:1c:a4:e1:04:96:e2:06:b0:
6e:7a:27:44:f6:a4:9d:9e:a0:f2:d0:a4:cc:a3:fb:
68:0f:2d:ef:33:13:e8:86:c0:c1:4d:8c:c2:b1:55:
d9:d7:b5:2e:ef:2e:34:be:da:b5:98:cd:1d:0d:ff:
55:5a:7c:51:8e:e7:19:4a:73:3c:41:8b:3f:5a:6a:
9b:b3:74:d0:df:29:66:e6:76:09:3a:4d:e0:11:09:
f6:9c:d2:47:42:eb:72:7d:fb:96:dd:95:aa:7a:07:
6b:b4:86:d5:8b:56:d5:de:3b:ae:cf:e9:13:2c:71:
45:21:ad:f2:a7:54:cf:b1:bb:d9:2e:7d:69:86:81:
f2:26:5a:9c:39:4a:b7:a2:1b:53:a4:0f:88:3e:f8:
f8:40:15:94:f6:32:d0:7d:6d:a5:36:e8:e9:51:c8:
96:92:68:51:0f:b1:c4:d5:61:96:62:0d:6a:8c:c6:
e3:9d:b6:fa:3f:ee:d5:36:ea:46:ef:9f:d5:4c:bb:
b8:c3:67:89:6e:dd:86:0c:54:5d:ee:ec:da:dd:af:
b2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5A:D0:97:68:C5:31:F5:92:72:4B:B7:22:75:10:87:6D:4C:2B:FC
X509v3 Authority Key Identifier:
keyid:C3:74:3C:89:DF:34:EC:77:0A:65:97:3F:10:05:14:6B:FB:32:B0:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:84:46:80:96:3c:fb:02:b2:be:e4:a1:d9:2b:4d:90:13:a2:
21:13:86:8f:88:5c:d6:9e:3e:b3:a6:fc:2d:67:03:2d:24:90:
13:b1:6d:c9:fd:5e:c5:54:58:7b:1e:cb:9e:c6:a4:f5:30:d0:
43:37:99:e6:f3:14:a5:0c:32:51:65:92:2c:dd:4e:9b:2a:ec:
53:8d:64:4b:ef:1c:8f:d3:50:6d:d2:b6:dc:44:52:30:33:54:
c1:d5:d8:2e:ad:ee:46:82:a3:dd:c7:95:b4:af:da:b4:7f:fc:
e3:52:3a:23:bd:ac:2a:d1:13:11:7b:ae:e5:6f:61:bb:56:11:
82:44:1f:24:6b:e5:4c:de:84:88:4a:c9:91:b2:73:14:e3:48:
c7:4d:5a:e1:cd:a6:b5:61:d4:aa:b3:16:40:75:87:4c:3b:39:
ec:40:8d:13:b1:ac:34:49:98:75:d8:f9:db:5d:98:4e:f7:15:
9c:b7:72:d3:36:10:3b:a7:d1:83:ff:03:40:02:77:f3:90:74:
17:6a:74:cd:91:00:d6:e6:3a:41:7e:4c:d7:19:ef:84:2e:10:
ab:4f:e1:51:8a:e5:ed:4a:8e:67:1c:81:d6:bb:e1:1a:d8:dd:
12:c1:7b:24:08:91:3c:17:aa:44:00:36:d4:47:7d:14:35:67:
79:10:71:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIj9RD/gJOIfe0lA6UVqc3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNzQzYzg5ZGYzNGVjNzcwYTY1OTczZjEwMDUxNDZiZmIz
MmIwZjIwHhcNMjYwOTIyMTAwMTA0WhcNMjYwOTIzMTAwMTA0WjAzMTEwLwYDVQQD
EyhlODVhZDA5NzY4YzUzMWY1OTI3MjRiYjcyMjc1MTA4NzZkNGMyYmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD4LtGQZcwcK9He+rBKVxmUU7fAd
Dyj4iBCWvvjGldeAQtqjV4/QDuwFuLrdmmPfIlwdHKThBJbiBrBueidE9qSdnqDy
0KTMo/toDy3vMxPohsDBTYzCsVXZ17Uu7y40vtq1mM0dDf9VWnxRjucZSnM8QYs/
Wmqbs3TQ3ylm5nYJOk3gEQn2nNJHQutyffuW3ZWqegdrtIbVi1bV3juuz+kTLHFF
Ia3yp1TPsbvZLn1phoHyJlqcOUq3ohtTpA+IPvj4QBWU9jLQfW2lNujpUciWkmhR
D7HE1WGWYg1qjMbjnbb6P+7VNupG75/VTLu4w2eJbt2GDFRd7uza3a+y9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOha0JdoxTH1knJLtyJ1EIdtTCv8MB8GA1UdIwQY
MBaAFMN0PInfNOx3CmWXPxAFFGv7MrDyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzNROGlkODA3SGNLWlpjX0VBVVVhX3N5c1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mOTlkYjQtOTg3ZS00M2IxLWEwY2Et
MjBmMjdlODcwZDAxLzEvdzNROGlkODA3SGNLWlpjX0VBVVVhX3N5c1BJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9mOTlkYjQtOTg3ZS00M2IxLWEwY2EtMjBmMjdlODcwZDAx
LzEvdzNROGlkODA3SGNLWlpjX0VBVVVhX3N5c1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYRGgJY8
+wKyvuSh2StNkBOiIROGj4hc1p4+s6b8LWcDLSSQE7Ftyf1exVRYex7Lnsak9TDQ
QzeZ5vMUpQwyUWWSLN1OmyrsU41kS+8cj9NQbdK23ERSMDNUwdXYLq3uRoKj3ceV
tK/atH/841I6I72sKtETEXuu5W9hu1YRgkQfJGvlTN6EiErJkbJzFONIx01a4c2m
tWHUqrMWQHWHTDs57ECNE7GsNEmYddj5212YTvcVnLdy0zYQO6fRg/8DQAJ385B0
F2p0zZEA1uY6QX5M1xnvhC4Qq0/hUYrl7UqOZxyB1rvhGtjdEsF7JAiRPBeqRAA2
1Ed9FDVneRBxVw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 16:36:06 2026 by rpki-client