Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
File: 3Feh-cEhycK2-U04p1-_3MVN8Fs.mft (raw, json)
Hash identifier: 7pReKALiltQcKGXNbdfRTpBP4ht+nx6Unnwrn8+PAj4=
Subject key identifier: 3D:06:95:61:5D:03:F6:07:5A:99:F1:7D:8F:1A:51:17:51:C1:C2:85
Authority key identifier: DC:57:A1:F9:C1:21:C9:C2:B6:F9:4D:38:A7:5F:BF:DC:C5:4D:F0:5B
Certificate issuer: /CN=dc57a1f9c121c9c2b6f94d38a75fbfdcc54df05b
Certificate serial: 01A0CA478A198C16201569793963B208E79A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
Manifest number: 0EDE
Signing time: Tue 22 Sep 2026 18:01:21 +0000
Manifest this update: Tue 22 Sep 2026 18:01:21 +0000
Manifest next update: Wed 23 Sep 2026 18:01:21 +0000
Files and hashes: 1: 3Feh-cEhycK2-U04p1-_3MVN8Fs.crl (hash: r9cFms0HlDg/K+TUAHjwnIDmnovfih+MtsLGzw9Yg+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:8a:19:8c:16:20:15:69:79:39:63:b2:08:e7:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc57a1f9c121c9c2b6f94d38a75fbfdcc54df05b
Validity
Not Before: Sep 22 18:01:21 2026 GMT
Not After : Sep 23 18:01:21 2026 GMT
Subject: CN=3d0695615d03f6075a99f17d8f1a511751c1c285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6b:ed:d1:02:54:2f:e5:29:b3:1a:a5:c4:dd:
2f:e3:84:16:10:ba:c2:72:a9:4c:aa:3e:26:9d:47:
47:25:a3:61:73:3a:43:6c:29:94:29:d0:dd:9d:20:
32:2d:22:ce:63:1f:27:dc:e8:bd:5e:e0:aa:f3:33:
d0:60:d8:46:f5:f2:83:b9:5a:b2:1f:1f:d8:d7:fd:
e0:9a:c9:19:f6:de:0b:4d:fc:18:ea:a1:13:3a:eb:
12:ce:55:8b:6b:c5:6f:0c:f6:79:3f:f1:8e:83:16:
2a:6c:ac:e2:ef:47:de:e1:e9:58:94:30:0a:5b:bc:
89:fe:2b:8a:be:77:49:57:76:ab:f9:1c:dc:01:af:
d6:c5:16:a1:68:a1:95:6a:95:46:db:c1:6f:d1:83:
49:e3:dc:ea:4e:fd:ee:8d:dc:66:89:d1:73:2c:f0:
c8:e2:20:e0:b2:66:48:b3:34:82:5a:be:d0:c0:e7:
24:3d:42:03:87:bb:12:f0:e7:1c:5f:83:85:0d:f6:
bd:df:ca:65:35:2c:7e:e8:22:57:e8:c8:94:97:1c:
59:ac:af:d7:fe:a6:38:a5:2a:f1:a2:74:a7:ad:7f:
57:e2:9d:e1:c6:15:09:89:d5:96:27:f3:37:78:90:
6d:12:30:dc:3e:1e:ef:d9:f1:3b:ca:4e:6c:e8:f0:
5d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:06:95:61:5D:03:F6:07:5A:99:F1:7D:8F:1A:51:17:51:C1:C2:85
X509v3 Authority Key Identifier:
keyid:DC:57:A1:F9:C1:21:C9:C2:B6:F9:4D:38:A7:5F:BF:DC:C5:4D:F0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Feh-cEhycK2-U04p1-_3MVN8Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0e6765-86e2-4010-8f8e-dd113c698d12/1/3Feh-cEhycK2-U04p1-_3MVN8Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a3:e7:95:70:a7:13:b4:2c:21:4c:68:a3:aa:9e:a7:a7:84:
f4:a9:7d:df:b3:7a:52:ee:61:20:d1:e3:71:1e:92:50:78:4b:
5f:b1:c4:b3:c0:a9:0a:25:c8:a2:fc:db:9d:a3:fa:29:5f:01:
ac:8d:08:d7:0d:bb:70:ce:32:03:02:68:76:5b:cf:f9:93:1f:
1d:a8:e7:ad:55:fb:9a:3c:6e:1f:ed:3a:bd:4c:30:2a:4c:8a:
2c:51:fb:04:ea:c8:1f:9a:0f:c0:5e:7d:34:ab:20:1c:cc:46:
4c:0a:ea:5d:70:87:3c:99:7b:a5:fa:75:66:db:b7:b1:48:2f:
55:b8:2c:73:06:cb:2f:6c:dd:e2:ab:2c:16:1f:29:7f:fd:c9:
01:4c:04:69:d5:09:07:cb:3a:24:3b:04:bd:e1:e6:5f:bd:ee:
23:c9:1e:87:86:a7:03:9d:38:d5:2a:7c:9c:98:a1:03:20:a5:
fe:d3:78:59:38:a2:05:27:7a:2f:d9:f0:ef:05:4f:26:ed:5d:
e9:13:f2:ea:79:2f:39:3d:5c:e5:a8:bc:82:b8:f4:29:6d:4c:
37:9c:b9:10:00:ac:da:0b:4b:00:78:91:56:10:5d:af:08:01:
8a:84:9f:c0:62:a7:95:f4:d9:59:e4:f3:8c:87:82:7c:14:4e:
23:ff:61:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKR4oZjBYgFWl5OWOyCOeaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNTdhMWY5YzEyMWM5YzJiNmY5NGQzOGE3NWZiZmRjYzU0
ZGYwNWIwHhcNMjYwOTIyMTgwMTIxWhcNMjYwOTIzMTgwMTIxWjAzMTEwLwYDVQQD
EygzZDA2OTU2MTVkMDNmNjA3NWE5OWYxN2Q4ZjFhNTExNzUxYzFjMjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWvt0QJUL+UpsxqlxN0v44QWELrC
cqlMqj4mnUdHJaNhczpDbCmUKdDdnSAyLSLOYx8n3Oi9XuCq8zPQYNhG9fKDuVqy
Hx/Y1/3gmskZ9t4LTfwY6qETOusSzlWLa8VvDPZ5P/GOgxYqbKzi70fe4elYlDAK
W7yJ/iuKvndJV3ar+RzcAa/WxRahaKGVapVG28Fv0YNJ49zqTv3ujdxmidFzLPDI
4iDgsmZIszSCWr7QwOckPUIDh7sS8OccX4OFDfa938plNSx+6CJX6MiUlxxZrK/X
/qY4pSrxonSnrX9X4p3hxhUJidWWJ/M3eJBtEjDcPh7v2fE7yk5s6PBdowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0GlWFdA/YHWpnxfY8aURdRwcKFMB8GA1UdIwQY
MBaAFNxXofnBIcnCtvlNOKdfv9zFTfBbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0ZlaC1jRWh5Y0syLVUwNHAxLV8zTVZOOEZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wZTY3NjUtODZlMi00MDEwLThmOGUt
ZGQxMTNjNjk4ZDEyLzEvM0ZlaC1jRWh5Y0syLVUwNHAxLV8zTVZOOEZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wZTY3NjUtODZlMi00MDEwLThmOGUtZGQxMTNjNjk4ZDEy
LzEvM0ZlaC1jRWh5Y0syLVUwNHAxLV8zTVZOOEZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXaPnlXCn
E7QsIUxoo6qep6eE9Kl937N6Uu5hINHjcR6SUHhLX7HEs8CpCiXIovzbnaP6KV8B
rI0I1w27cM4yAwJodlvP+ZMfHajnrVX7mjxuH+06vUwwKkyKLFH7BOrIH5oPwF59
NKsgHMxGTArqXXCHPJl7pfp1Ztu3sUgvVbgscwbLL2zd4qssFh8pf/3JAUwEadUJ
B8s6JDsEveHmX73uI8keh4anA5041Sp8nJihAyCl/tN4WTiiBSd6L9nw7wVPJu1d
6RPy6nkvOT1c5ai8grj0KW1MN5y5EACs2gtLAHiRVhBdrwgBioSfwGKnlfTZWeTz
jIeCfBROI/9h2w==
-----END CERTIFICATE-----
Generated at Wed Sep 23 02:58:07 2026 by rpki-client