Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
File: 3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft (raw, json)
Hash identifier: gHxrThOnqxjgREglNpXktpx7JtC51fQFfc8P7Xr9ZyU=
Subject key identifier: 29:89:0A:0B:1E:BA:AC:9F:D5:D2:41:17:45:E0:25:C4:97:15:29:6D
Authority key identifier: DE:37:81:2B:D4:52:73:EA:3B:2A:53:D9:E9:6F:6D:BA:21:58:26:F3
Certificate issuer: /CN=de37812bd45273ea3b2a53d9e96f6dba215826f3
Certificate serial: 01A0C2C4629B3D077AC610DF4C541B927B41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 07:00:45 +0000
Manifest this update: Mon 21 Sep 2026 07:00:45 +0000
Manifest next update: Tue 22 Sep 2026 07:00:45 +0000
Files and hashes: 1: 3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl (hash: OHyLvYaCfkmOEUVxoOctACuxOlC0GLFGrsmEz0RxqYs=)
2: O3DthDNJHTkW6CaCtq4iGTN0kKk.roa (hash: fTCVbDqUmnvXfBttOJTrF2Z8Jv/5afPtRQV2ebBHPFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:62:9b:3d:07:7a:c6:10:df:4c:54:1b:92:7b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de37812bd45273ea3b2a53d9e96f6dba215826f3
Validity
Not Before: Sep 21 07:00:45 2026 GMT
Not After : Sep 22 07:00:45 2026 GMT
Subject: CN=29890a0b1ebaac9fd5d2411745e025c49715296d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:62:dd:69:11:4f:d0:82:b7:9e:20:27:b7:8e:
5b:f1:07:49:21:ec:16:f6:96:a4:a7:b8:cf:79:f2:
73:34:aa:b0:1b:a6:29:dc:71:c8:90:fa:a5:21:ce:
18:23:cf:33:72:56:db:82:fe:92:35:5b:70:76:d3:
5d:a1:e4:f2:f3:ca:87:44:eb:2b:3b:ba:ba:58:b3:
73:3f:dd:05:41:a2:9f:f9:c5:21:39:dc:67:dd:29:
8d:c0:e3:4f:72:41:a0:e7:48:40:38:e2:37:28:b4:
48:0b:30:87:53:07:54:27:33:bd:87:94:dd:2b:f3:
e2:11:c3:83:68:3a:b0:2b:4e:12:a9:2d:aa:ec:7f:
ff:24:ba:c3:30:53:87:9b:db:8f:58:6b:05:66:6b:
ef:5f:36:02:af:39:b2:61:33:14:50:1b:32:63:1c:
52:9d:55:94:88:3e:04:c2:e6:9b:49:56:c2:6a:17:
25:31:1d:79:d1:39:cf:a5:d9:45:fd:d2:3d:a6:02:
78:72:62:9f:a7:e1:f4:f8:a3:04:8d:aa:e2:49:9e:
13:76:8c:5e:bf:0c:8b:ac:51:44:ac:f9:4c:18:f5:
8d:a9:72:40:25:69:7d:aa:f4:7b:e2:f8:f0:4d:83:
40:ae:d1:7d:3d:18:cc:0c:18:22:a4:49:5f:50:97:
cd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:89:0A:0B:1E:BA:AC:9F:D5:D2:41:17:45:E0:25:C4:97:15:29:6D
X509v3 Authority Key Identifier:
keyid:DE:37:81:2B:D4:52:73:EA:3B:2A:53:D9:E9:6F:6D:BA:21:58:26:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:00:0d:18:36:a9:07:a5:cd:8f:f2:c9:3f:e1:7d:72:e2:5c:
c4:d0:c2:f1:14:09:75:17:1d:62:83:38:d6:5c:03:32:90:25:
5e:09:b7:f0:c5:5f:1a:c8:58:02:06:be:01:ef:cf:d0:36:7c:
e5:2a:b7:f1:28:27:35:49:27:6f:8e:c7:52:60:c3:c4:94:34:
41:44:5a:5f:d0:15:bb:bb:3e:9d:87:77:16:ec:7c:e7:3a:98:
2a:f2:60:de:0d:82:52:7c:70:03:00:56:b3:54:c1:17:cf:6a:
fd:76:5f:3e:b2:ba:71:ad:5f:63:7b:d2:67:41:98:f4:bd:8b:
5b:80:84:05:4d:51:f8:39:6f:99:7e:6d:ee:65:0f:e6:b1:d7:
37:7f:71:c6:11:39:a6:cd:e4:43:97:e0:94:68:90:41:ce:52:
bb:bc:7b:54:88:9c:3d:61:87:21:e0:96:45:28:10:e2:a2:76:
4c:c6:21:70:a4:a2:5b:64:be:2e:2d:d7:eb:92:58:ce:88:f6:
a3:9f:22:15:6b:a9:1d:1f:21:7c:46:08:58:6e:3c:0b:84:5b:
6a:b4:83:37:e6:42:57:17:2a:d4:0c:09:e2:cd:ed:22:0a:ed:
ab:f4:70:52:97:be:62:18:13:a7:69:87:36:c3:6f:eb:68:41:
e2:01:4b:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCxGKbPQd6xhDfTFQbkntBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMzc4MTJiZDQ1MjczZWEzYjJhNTNkOWU5NmY2ZGJhMjE1
ODI2ZjMwHhcNMjYwOTIxMDcwMDQ1WhcNMjYwOTIyMDcwMDQ1WjAzMTEwLwYDVQQD
EygyOTg5MGEwYjFlYmFhYzlmZDVkMjQxMTc0NWUwMjVjNDk3MTUyOTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GLdaRFP0IK3niAnt45b8QdJIewW
9pakp7jPefJzNKqwG6Yp3HHIkPqlIc4YI88zclbbgv6SNVtwdtNdoeTy88qHROsr
O7q6WLNzP90FQaKf+cUhOdxn3SmNwONPckGg50hAOOI3KLRICzCHUwdUJzO9h5Td
K/PiEcODaDqwK04SqS2q7H//JLrDMFOHm9uPWGsFZmvvXzYCrzmyYTMUUBsyYxxS
nVWUiD4EwuabSVbCahclMR150TnPpdlF/dI9pgJ4cmKfp+H0+KMEjariSZ4Tdoxe
vwyLrFFErPlMGPWNqXJAJWl9qvR74vjwTYNArtF9PRjMDBgipElfUJfN5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCmJCgseuqyf1dJBF0XgJcSXFSltMB8GA1UdIwQY
MBaAFN43gSvUUnPqOypT2elvbbohWCbzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2plQks5UlNjLW83S2xQWjZXOXR1aUZZSnZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iMjZjNDQtOWQxNi00YzNkLTlmMWQt
YWY2NDZjOGY0YWY2LzEvM2plQks5UlNjLW83S2xQWjZXOXR1aUZZSnZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9iMjZjNDQtOWQxNi00YzNkLTlmMWQtYWY2NDZjOGY0YWY2
LzEvM2plQks5UlNjLW83S2xQWjZXOXR1aUZZSnZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiAANGDap
B6XNj/LJP+F9cuJcxNDC8RQJdRcdYoM41lwDMpAlXgm38MVfGshYAga+Ae/P0DZ8
5Sq38SgnNUknb47HUmDDxJQ0QURaX9AVu7s+nYd3Fux85zqYKvJg3g2CUnxwAwBW
s1TBF89q/XZfPrK6ca1fY3vSZ0GY9L2LW4CEBU1R+DlvmX5t7mUP5rHXN39xxhE5
ps3kQ5fglGiQQc5Su7x7VIicPWGHIeCWRSgQ4qJ2TMYhcKSiW2S+Li3X65JYzoj2
o58iFWupHR8hfEYIWG48C4RbarSDN+ZCVxcq1AwJ4s3tIgrtq/RwUpe+YhgTp2mH
NsNv62hB4gFLag==
-----END CERTIFICATE-----
Generated at Mon Sep 21 15:40:49 2026 by rpki-client