Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
File: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft (raw, json)
Hash identifier: aredw/NFRJbHZATjAcHDJy+FQ/V2QyeFPI4nolYYr5c=
Subject key identifier: DC:08:90:FF:AE:8C:D0:1E:5E:9F:99:0A:E3:FA:55:10:04:90:FC:52
Authority key identifier: FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
Certificate issuer: /CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Certificate serial: 01A06E02C3A306BF38050190BA020F58E583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
Manifest number: 13DF
Signing time: Fri 04 Sep 2026 20:01:09 +0000
Manifest this update: Fri 04 Sep 2026 20:01:09 +0000
Manifest next update: Sat 05 Sep 2026 20:01:09 +0000
Files and hashes: 1: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl (hash: h+rrGnrvPxok8YGOuitwftCWJ6TTuo+vOSEcF8nQDEY=)
2: QbADnR-7JONR9psZmp25EkZo4_M.roa (hash: 8N891Zzq6DPXhsamgFNwmwRuiKpJQ8ss9kc+k3yiq9U=)
3: kneTFHssdpRkfp917HvR9pp0knM.roa (hash: Q0Z0lTZO2s3Ki+igcl/rjlfo3o507lYeXHkCl1jp7DE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:02:c3:a3:06:bf:38:05:01:90:ba:02:0f:58:e5:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Validity
Not Before: Sep 4 20:01:09 2026 GMT
Not After : Sep 5 20:01:09 2026 GMT
Subject: CN=dc0890ffae8cd01e5e9f990ae3fa55100490fc52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:44:b0:e1:60:c5:f9:08:bc:33:f9:69:2f:ae:
07:99:ac:74:61:80:f2:e5:60:34:1d:02:2a:eb:ff:
84:05:09:69:5d:bf:f1:00:5e:ab:fb:de:28:2c:5b:
d2:a4:8d:7b:bc:24:3d:4a:41:56:0f:66:11:16:11:
c5:69:8a:eb:f9:ac:0e:05:45:47:ed:89:42:36:8b:
9e:a2:ec:b7:80:b7:e8:22:db:bc:ac:b4:9c:09:04:
8e:e1:cf:53:52:cd:93:dc:1f:05:48:58:03:f7:d9:
f9:16:d0:cf:31:66:93:af:f7:03:23:61:10:b7:e8:
af:ae:6c:96:f2:db:d5:c1:3c:6e:8d:3b:04:70:b8:
2f:01:db:dc:bf:f1:78:4e:ec:17:98:c3:ad:e8:24:
f4:fa:15:4e:c2:d5:07:51:52:f0:6e:68:cf:2b:c2:
20:27:ec:50:cf:e4:3a:e8:5f:d5:5f:a6:e6:a8:09:
b9:ff:87:f9:fb:c3:b2:4f:26:ac:d0:b1:86:81:4e:
4b:e2:19:79:62:3f:4d:c6:b6:a1:91:07:b3:4c:f3:
d3:76:52:63:b5:f2:97:43:77:0c:5e:3f:e9:cb:6d:
84:76:a7:4a:e4:9d:83:e9:91:eb:2f:60:1d:80:e8:
aa:c7:76:37:13:30:a5:76:d4:2f:11:b7:61:4d:6b:
93:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:08:90:FF:AE:8C:D0:1E:5E:9F:99:0A:E3:FA:55:10:04:90:FC:52
X509v3 Authority Key Identifier:
keyid:FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:36:43:84:ea:61:a8:56:d0:28:27:07:23:ec:e1:61:8d:78:
2d:dd:2e:1b:f0:07:0c:63:7e:61:40:d8:aa:19:c8:f1:61:dc:
63:93:24:d8:c1:ad:b2:0a:7b:a4:9d:dc:09:7b:63:12:cb:b2:
d7:5b:87:bc:e9:c4:17:ec:91:e5:9a:3c:5d:4d:ca:b0:71:63:
b8:38:ee:ae:48:ed:a7:ca:5d:07:f4:15:7b:58:94:86:f0:ed:
47:62:57:55:ae:38:d2:e3:26:3d:22:2a:0d:25:59:af:7c:f7:
ff:b5:e3:66:ce:77:7f:61:f8:15:c2:fe:c7:07:79:60:02:74:
f1:02:89:e5:d4:ca:66:7b:ce:8f:2c:3b:0f:df:7a:bd:3b:a4:
9c:e7:cb:9a:37:18:60:ab:2e:1f:c7:3a:8f:50:43:99:9b:fc:
7c:90:60:65:e1:9b:5d:0f:39:d0:ce:a5:0f:40:f8:48:0d:6b:
7e:d6:e1:8a:81:c0:c5:24:49:60:a2:ab:92:3e:df:00:2c:76:
87:73:aa:4c:92:3c:75:e8:83:c4:e7:6d:4f:21:8c:6e:8f:5d:
4a:9b:aa:2b:b9:ed:37:da:52:a4:2b:7d:21:c2:eb:d8:4b:9e:
d3:f6:0f:53:e9:4c:ff:f4:c7:13:eb:3a:00:ba:9b:1e:b5:51:
be:df:8d:75
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaBuAsOjBr84BQGQugIPWOWDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNzBkZTg0MGZkNmJmNGIwYWZkMTI3NGU0NGVmZDFiODY2
NTc2MmMwHhcNMjYwOTA0MjAwMTA5WhcNMjYwOTA1MjAwMTA5WjAzMTEwLwYDVQQD
EyhkYzA4OTBmZmFlOGNkMDFlNWU5Zjk5MGFlM2ZhNTUxMDA0OTBmYzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/USw4WDF+Qi8M/lpL64Hmax0YYDy
5WA0HQIq6/+EBQlpXb/xAF6r+94oLFvSpI17vCQ9SkFWD2YRFhHFaYrr+awOBUVH
7YlCNoueouy3gLfoItu8rLScCQSO4c9TUs2T3B8FSFgD99n5FtDPMWaTr/cDI2EQ
t+ivrmyW8tvVwTxujTsEcLgvAdvcv/F4TuwXmMOt6CT0+hVOwtUHUVLwbmjPK8Ig
J+xQz+Q66F/VX6bmqAm5/4f5+8OyTyas0LGGgU5L4hl5Yj9NxrahkQezTPPTdlJj
tfKXQ3cMXj/py22EdqdK5J2D6ZHrL2AdgOiqx3Y3EzCldtQvEbdhTWuT9wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNwIkP+ujNAeXp+ZCuP6VRAEkPxSMB8GA1UdIwQY
MBaAFPtw3oQP1r9LCv0SdORO/RuGZXYsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0zRGVoQV9XdjBzS19SSjA1RTc5RzRabGRpdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEvOWEzZWFjLWY4NjItNDc4OS1hYzIx
LWQ5NDQ0YTNkMGNlMC8xLzEtM0RlaEFfV3Ywc0tfUkowNUU3OUc0WmxkaXcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzRhLzlhM2VhYy1mODYyLTQ3ODktYWMyMS1kOTQ0NGEzZDBj
ZTAvMS8xLTNEZWhBX1d2MHNLX1JKMDVFNzlHNFpsZGl3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUzZD
hOphqFbQKCcHI+zhYY14Ld0uG/AHDGN+YUDYqhnI8WHcY5Mk2MGtsgp7pJ3cCXtj
Esuy11uHvOnEF+yR5Zo8XU3KsHFjuDjurkjtp8pdB/QVe1iUhvDtR2JXVa440uMm
PSIqDSVZr3z3/7XjZs53f2H4FcL+xwd5YAJ08QKJ5dTKZnvOjyw7D996vTuknOfL
mjcYYKsuH8c6j1BDmZv8fJBgZeGbXQ850M6lD0D4SA1rftbhioHAxSRJYKKrkj7f
ACx2h3OqTJI8deiDxOdtTyGMbo9dSpuqK7ntN9pSpCt9IcLr2Eue0/YPU+lM//TH
E+s6ALqbHrVRvt+NdQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 02:44:43 2026 by rpki-client