
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
File: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft (raw, json)
Hash identifier: 0flRDJWgz60DwPQV2sBNM/MOIHwfspKWkC5I88msHK8=
Subject key identifier: CF:9B:50:D5:A2:F6:22:27:95:D5:85:A1:18:88:29:15:14:E6:04:89
Authority key identifier: DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1
Certificate issuer: /CN=dc422c24147ec79fa906464ab143fd47e3beb3a1
Certificate serial: 01A0C8C6707721A73CB427EE7417F70D727F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
Manifest number: 19C2
Signing time: Tue 22 Sep 2026 11:00:43 +0000
Manifest this update: Tue 22 Sep 2026 11:00:43 +0000
Manifest next update: Wed 23 Sep 2026 11:00:43 +0000
Files and hashes: 1: 3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl (hash: AUv6IcGL20lbwDzOhDxWAqUVJcDeH1d+QV2KoK202hA=)
2: lEBvXs4u3OpbEZMx5XwLH2hQlKs.roa (hash: 9m0BkgzH4gSyZI57npmc+BY5iSf+kkTcUVRRsTUd1zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:70:77:21:a7:3c:b4:27:ee:74:17:f7:0d:72:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc422c24147ec79fa906464ab143fd47e3beb3a1
Validity
Not Before: Sep 22 11:00:43 2026 GMT
Not After : Sep 23 11:00:43 2026 GMT
Subject: CN=cf9b50d5a2f6222795d585a11888291514e60489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:57:c7:99:7f:8b:82:5a:00:2a:00:77:4a:a8:
7a:77:5c:ea:3e:02:cf:f3:5a:dc:cd:68:f6:1b:1f:
12:f5:dd:c8:10:f7:64:e0:b2:2a:98:4b:47:f9:af:
f9:01:e6:5b:f8:2c:3b:8e:cd:82:dd:e3:2a:2c:01:
37:1f:86:8a:3f:cb:e2:fc:54:5b:99:fd:83:b8:fc:
3b:02:e5:f7:43:8e:91:e7:fc:0d:d8:36:d6:92:8b:
72:a8:7c:f6:a8:8a:e8:18:a8:0b:a8:bd:18:aa:1b:
ff:a1:ab:7e:5b:a7:8e:b2:2b:7c:57:70:57:4b:99:
90:9d:95:a7:b7:52:81:b0:c4:9b:86:37:ae:22:b6:
58:b8:86:3b:fd:c0:3d:a5:7a:44:bd:6d:6c:b5:e3:
05:fb:8c:cc:bb:3a:99:f7:4c:15:54:47:ed:61:36:
e4:49:5f:03:22:bc:4c:e6:f5:61:f9:ac:a9:32:06:
62:cc:e9:5f:fc:50:9f:24:8e:e0:b6:dd:3b:73:32:
7d:6f:8b:e9:ae:1d:83:c3:51:9e:ca:49:07:ec:cb:
17:05:98:7d:42:4c:1a:18:3a:5d:b6:c5:01:d5:c7:
8a:3e:86:68:ac:61:60:96:44:00:e5:9b:8a:71:e9:
ff:22:e0:15:5a:77:1e:ea:9a:97:8a:bf:5c:26:21:
6c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9B:50:D5:A2:F6:22:27:95:D5:85:A1:18:88:29:15:14:E6:04:89
X509v3 Authority Key Identifier:
keyid:DC:42:2C:24:14:7E:C7:9F:A9:06:46:4A:B1:43:FD:47:E3:BE:B3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EIsJBR-x5-pBkZKsUP9R-O-s6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a66566-7e32-4976-86ec-2165136c9d9a/1/3EIsJBR-x5-pBkZKsUP9R-O-s6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c7:03:00:85:e2:34:b5:2b:9b:a0:ce:83:3f:72:af:66:63:
9e:51:a7:9b:53:fc:0d:39:73:17:2a:0f:56:68:8c:39:e9:95:
ee:02:7c:e1:e1:f5:50:22:a6:be:d3:d3:4b:8b:da:6f:9b:1a:
41:8a:8b:b8:ae:52:14:b6:3c:bf:84:5b:8e:0d:2d:e2:85:a1:
ae:68:95:2f:d5:a8:fb:5f:63:cd:e2:2d:b2:7f:bf:4f:c6:94:
4e:e1:85:0e:38:7d:c0:08:62:25:a4:4d:64:cc:1b:c8:99:d8:
a0:e0:07:b8:9d:27:08:56:bc:e3:5f:05:da:9a:93:53:5c:79:
9c:79:40:ba:c2:16:29:58:a2:be:34:02:c7:44:0d:b3:0b:6f:
56:ef:7e:8f:b0:4c:86:48:a0:90:3d:3e:ce:ed:41:c8:15:8a:
10:18:1b:83:53:10:c1:d4:2c:fd:f1:d7:43:0f:e1:c1:07:f4:
51:8c:09:43:d0:c2:32:7d:0b:5c:7e:37:b4:0b:0c:37:62:11:
1c:09:bb:e8:8e:58:20:9f:9c:01:3f:cf:f3:13:36:d4:04:1a:
4b:ae:aa:ef:cd:5a:40:b7:8e:3c:ee:28:7a:12:83:91:9a:7b:
04:0a:06:04:aa:f4:2f:40:01:6a:9c:a6:73:62:61:0f:9d:21:
a9:a9:97:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIxnB3Iac8tCfudBf3DXJ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNDIyYzI0MTQ3ZWM3OWZhOTA2NDY0YWIxNDNmZDQ3ZTNi
ZWIzYTEwHhcNMjYwOTIyMTEwMDQzWhcNMjYwOTIzMTEwMDQzWjAzMTEwLwYDVQQD
EyhjZjliNTBkNWEyZjYyMjI3OTVkNTg1YTExODg4MjkxNTE0ZTYwNDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylfHmX+LgloAKgB3Sqh6d1zqPgLP
81rczWj2Gx8S9d3IEPdk4LIqmEtH+a/5AeZb+Cw7js2C3eMqLAE3H4aKP8vi/FRb
mf2DuPw7AuX3Q46R5/wN2DbWkotyqHz2qIroGKgLqL0Yqhv/oat+W6eOsit8V3BX
S5mQnZWnt1KBsMSbhjeuIrZYuIY7/cA9pXpEvW1steMF+4zMuzqZ90wVVEftYTbk
SV8DIrxM5vVh+aypMgZizOlf/FCfJI7gtt07czJ9b4vprh2Dw1GeykkH7MsXBZh9
QkwaGDpdtsUB1ceKPoZorGFglkQA5ZuKcen/IuAVWnce6pqXir9cJiFsgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+bUNWi9iInldWFoRiIKRUU5gSJMB8GA1UdIwQY
MBaAFNxCLCQUfsefqQZGSrFD/UfjvrOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0VJc0pCUi14NS1wQmtaS3NVUDlSLU8tczZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hNjY1NjYtN2UzMi00OTc2LTg2ZWMt
MjE2NTEzNmM5ZDlhLzEvM0VJc0pCUi14NS1wQmtaS3NVUDlSLU8tczZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9hNjY1NjYtN2UzMi00OTc2LTg2ZWMtMjE2NTEzNmM5ZDlh
LzEvM0VJc0pCUi14NS1wQmtaS3NVUDlSLU8tczZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVscDAIXi
NLUrm6DOgz9yr2ZjnlGnm1P8DTlzFyoPVmiMOemV7gJ84eH1UCKmvtPTS4vab5sa
QYqLuK5SFLY8v4Rbjg0t4oWhrmiVL9Wo+19jzeItsn+/T8aUTuGFDjh9wAhiJaRN
ZMwbyJnYoOAHuJ0nCFa8418F2pqTU1x5nHlAusIWKViivjQCx0QNswtvVu9+j7BM
hkigkD0+zu1ByBWKEBgbg1MQwdQs/fHXQw/hwQf0UYwJQ9DCMn0LXH43tAsMN2IR
HAm76I5YIJ+cAT/P8xM21AQaS66q781aQLeOPO4oehKDkZp7BAoGBKr0L0ABapym
c2JhD50hqamX0A==
-----END CERTIFICATE-----
Generated at Tue Sep 22 21:12:19 2026 by rpki-client