Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft
File: 3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft (raw, json)
Hash identifier: 0zylO5r06cp/7MFk2Z8suIv6K7kl3Q9scGXqWIvuPRc=
Subject key identifier: 07:40:A2:35:31:CD:40:9D:44:60:D4:4A:D4:6D:FA:3E:C9:E1:FF:E0
Authority key identifier: DC:07:C9:51:40:F0:BF:0A:6D:91:4F:28:87:8F:87:3C:A7:3E:CA:F4
Certificate issuer: /CN=dc07c95140f0bf0a6d914f28878f873ca73ecaf4
Certificate serial: 01A152F678D9FFFF59DC9DD941E608315DE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AfJUUDwvwptkU8oh4-HPKc-yvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft
Manifest number: 0297
Signing time: Mon 19 Oct 2026 07:00:46 +0000
Manifest this update: Mon 19 Oct 2026 07:00:46 +0000
Manifest next update: Tue 20 Oct 2026 07:00:46 +0000
Files and hashes: 1: 3AfJUUDwvwptkU8oh4-HPKc-yvQ.crl (hash: wpBty4CjegOSG6OCmMlwRdRkBRv6qaOh1RsTV3+wCTQ=)
2: FiJY_f6GKm6veDvPVDNX9LWOSRU.roa (hash: SMTBlb+NpQPNeXGuJJJYcwSp8wfNIzukvM7Bw3VT8hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AfJUUDwvwptkU8oh4-HPKc-yvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:f6:78:d9:ff:ff:59:dc:9d:d9:41:e6:08:31:5d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc07c95140f0bf0a6d914f28878f873ca73ecaf4
Validity
Not Before: Oct 19 07:00:46 2026 GMT
Not After : Oct 20 07:00:46 2026 GMT
Subject: CN=0740a23531cd409d4460d44ad46dfa3ec9e1ffe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b3:94:5c:a5:b9:45:d9:c2:41:9a:83:1d:81:
50:9d:f7:52:e4:c5:35:55:7b:97:bc:18:47:65:37:
fe:7b:99:a0:2d:a3:14:78:47:e9:d5:6c:54:6b:5b:
de:d5:f2:db:69:7a:94:cf:cb:1d:20:54:5e:14:e5:
1f:82:93:34:a9:af:71:8e:67:30:4f:13:74:50:6c:
36:0b:12:68:97:2a:1e:13:dd:76:3e:34:58:a3:e3:
92:38:d9:c0:d8:b0:9c:d3:77:e8:48:9b:b0:99:08:
a1:97:01:ca:e9:58:e0:2d:18:8e:10:63:21:73:25:
38:0d:4d:61:1a:53:48:1c:2f:b9:c9:7d:ea:b1:d4:
f6:e4:1a:1b:2d:bd:27:2f:7f:09:5b:94:e3:1c:21:
9f:72:74:22:55:34:b4:f4:f6:7a:97:7b:b6:2c:f0:
16:bc:a8:87:a2:d8:53:da:33:2a:ff:15:95:14:00:
e5:5c:ca:57:84:85:a1:ab:cd:ca:b6:18:ac:a3:fe:
c0:70:04:86:d0:5b:60:d5:19:4d:27:03:ca:e0:3f:
92:45:75:b9:b6:07:8e:29:fa:49:7c:c8:7a:37:75:
41:1f:a4:e9:49:d6:b4:5b:6e:fa:35:0b:de:a2:ce:
b8:82:b9:ab:d9:c4:e8:aa:32:fe:80:72:a1:e9:d1:
89:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:40:A2:35:31:CD:40:9D:44:60:D4:4A:D4:6D:FA:3E:C9:E1:FF:E0
X509v3 Authority Key Identifier:
keyid:DC:07:C9:51:40:F0:BF:0A:6D:91:4F:28:87:8F:87:3C:A7:3E:CA:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AfJUUDwvwptkU8oh4-HPKc-yvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/552b83-5b63-4923-b566-e6dcdf02aed1/1/3AfJUUDwvwptkU8oh4-HPKc-yvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b7:75:00:bd:61:0c:b7:7c:8e:a5:51:75:6b:09:86:3a:83:
53:c2:bb:40:80:f9:4e:bc:44:39:99:e0:fb:c0:88:8b:0d:63:
85:c6:e3:67:21:62:c2:d1:e0:eb:59:58:f1:7c:5b:f3:ca:64:
58:e1:f3:53:5f:eb:ea:0b:0c:fa:3c:c9:8c:7b:58:2b:85:88:
25:86:6d:ed:7c:9b:3b:1e:af:12:ba:5a:71:0c:e2:d0:2c:4b:
07:12:da:2a:47:85:df:96:9b:9b:44:4c:b8:f2:72:79:f8:51:
f5:d7:8d:e4:e6:03:ac:28:d5:11:45:5c:3f:8f:7f:76:9c:cf:
c0:61:a4:9e:04:6f:c2:5d:5d:f4:5d:7b:ce:b6:89:c4:cd:27:
7a:f8:e5:62:d3:d5:2a:a6:59:2e:e8:4d:98:ba:7b:cb:7c:b6:
93:bd:7b:2a:67:c4:20:ce:e9:8d:e1:b7:0c:98:d1:f2:9b:1b:
34:e4:16:d2:53:fd:c3:5e:d5:59:9e:1c:85:64:bc:bf:ad:6f:
43:3e:f2:77:b1:76:97:00:29:6a:63:29:cf:ad:f4:c1:e2:2c:
4f:d1:c1:cd:2b:61:68:cf:86:ce:51:05:a8:4c:4e:74:bd:5d:
a3:6f:ed:e1:bf:a3:5a:5d:21:0a:93:9e:51:9c:11:2f:78:21:
ee:94:f6:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFS9njZ//9Z3J3ZQeYIMV3jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMDdjOTUxNDBmMGJmMGE2ZDkxNGYyODg3OGY4NzNjYTcz
ZWNhZjQwHhcNMjYxMDE5MDcwMDQ2WhcNMjYxMDIwMDcwMDQ2WjAzMTEwLwYDVQQD
EygwNzQwYTIzNTMxY2Q0MDlkNDQ2MGQ0NGFkNDZkZmEzZWM5ZTFmZmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLOUXKW5RdnCQZqDHYFQnfdS5MU1
VXuXvBhHZTf+e5mgLaMUeEfp1WxUa1ve1fLbaXqUz8sdIFReFOUfgpM0qa9xjmcw
TxN0UGw2CxJolyoeE912PjRYo+OSONnA2LCc03foSJuwmQihlwHK6VjgLRiOEGMh
cyU4DU1hGlNIHC+5yX3qsdT25BobLb0nL38JW5TjHCGfcnQiVTS09PZ6l3u2LPAW
vKiHothT2jMq/xWVFADlXMpXhIWhq83Kthiso/7AcASG0Ftg1RlNJwPK4D+SRXW5
tgeOKfpJfMh6N3VBH6TpSda0W276NQveos64grmr2cToqjL+gHKh6dGJ9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdAojUxzUCdRGDUStRt+j7J4f/gMB8GA1UdIwQY
MBaAFNwHyVFA8L8KbZFPKIePhzynPsr0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0FmSlVVRHd2d3B0a1U4b2g0LUhQS2MteXZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi81NTJiODMtNWI2My00OTIzLWI1NjYt
ZTZkY2RmMDJhZWQxLzEvM0FmSlVVRHd2d3B0a1U4b2g0LUhQS2MteXZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi81NTJiODMtNWI2My00OTIzLWI1NjYtZTZkY2RmMDJhZWQx
LzEvM0FmSlVVRHd2d3B0a1U4b2g0LUhQS2MteXZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ7d1AL1h
DLd8jqVRdWsJhjqDU8K7QID5TrxEOZng+8CIiw1jhcbjZyFiwtHg61lY8Xxb88pk
WOHzU1/r6gsM+jzJjHtYK4WIJYZt7XybOx6vErpacQzi0CxLBxLaKkeF35abm0RM
uPJyefhR9deN5OYDrCjVEUVcP49/dpzPwGGkngRvwl1d9F17zraJxM0nevjlYtPV
KqZZLuhNmLp7y3y2k717KmfEIM7pjeG3DJjR8psbNOQW0lP9w17VWZ4chWS8v61v
Qz7yd7F2lwApamMpz630weIsT9HBzSthaM+GzlEFqExOdL1do2/t4b+jWl0hCpOe
UZwRL3gh7pT2Zg==
-----END CERTIFICATE-----
Generated at Mon Oct 19 17:29:31 2026 by rpki-client