Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
File: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft (raw, json)
Hash identifier: 4zjF+WLZkvJqeK3TGOJNgMcL9lK+4cm61XR3c3dsrF0=
Subject key identifier: 9C:0E:01:DE:DE:FA:55:32:B5:0F:CC:C7:71:FD:B4:BA:47:1D:53:36
Authority key identifier: DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95
Certificate issuer: /CN=de0ccd2391fa32c0ade297c5fc883090b3991395
Certificate serial: 01A145A8934FC558B9B5717C80B199533A68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
Manifest number: 1AA9
Signing time: Fri 16 Oct 2026 17:00:37 +0000
Manifest this update: Fri 16 Oct 2026 17:00:37 +0000
Manifest next update: Sat 17 Oct 2026 17:00:37 +0000
Files and hashes: 1: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl (hash: 3rzp/972C67TVKy+LNu0pMYgOSvOHP0/Fa8aMZePwG8=)
2: 9unExc-u2klcvykG9A7nqtJ0jEo.roa (hash: fK53zNSLF8dtN9JmssE7wAYgASom2B/ybWqpgUFg/kU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 17:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:a8:93:4f:c5:58:b9:b5:71:7c:80:b1:99:53:3a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0ccd2391fa32c0ade297c5fc883090b3991395
Validity
Not Before: Oct 16 17:00:37 2026 GMT
Not After : Oct 17 17:00:37 2026 GMT
Subject: CN=9c0e01dedefa5532b50fccc771fdb4ba471d5336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5e:8f:13:a4:13:ac:2f:2a:9d:5e:07:d9:9c:
ec:8b:b4:ce:0d:c0:35:b7:37:d3:44:23:05:92:c6:
62:b4:01:18:c4:44:27:cf:63:2f:b1:6e:6f:cc:dd:
a7:e9:86:71:b0:7e:59:e7:d9:ce:e3:a8:93:83:b2:
b8:f6:97:9e:2f:0d:3d:bb:ac:92:b6:a8:d3:1e:ea:
e2:ff:bd:d6:0a:fe:b7:d3:0c:dc:1c:f9:26:68:f2:
a8:60:4e:89:e2:b5:2d:c8:96:48:66:c8:de:5a:3a:
75:72:89:2d:12:bc:e0:8c:98:cb:25:b3:10:60:e9:
c0:f7:f2:4d:7e:b2:b8:92:33:d2:30:4c:e6:f4:02:
8a:c9:3f:2f:2e:12:1c:41:ab:19:b0:fa:51:45:b3:
87:45:02:b4:96:45:53:b2:a3:db:d4:4f:26:73:7e:
d2:cb:47:00:11:fd:7d:9d:ec:6a:17:a9:ed:e2:64:
05:e9:54:e5:84:30:1f:51:cb:08:f9:e4:fc:5d:dd:
57:8f:3b:cb:65:23:e7:5c:38:0f:3a:09:5d:31:ac:
0b:f5:e5:c5:98:51:49:b4:51:31:1a:d1:d3:94:71:
0a:51:a3:5d:61:36:c7:19:49:3f:e3:09:8f:a2:e7:
e0:04:43:80:5e:76:47:a2:95:49:59:9f:33:c4:e2:
01:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:0E:01:DE:DE:FA:55:32:B5:0F:CC:C7:71:FD:B4:BA:47:1D:53:36
X509v3 Authority Key Identifier:
keyid:DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:16:69:ef:b8:4d:ef:f0:ec:75:a5:46:76:54:5b:96:77:82:
72:4c:e1:bb:42:7e:05:22:49:8e:eb:39:04:cb:b9:3c:7e:28:
32:4a:01:e9:b0:c0:c7:d3:37:9c:e7:27:eb:f9:90:35:f7:6b:
a7:18:36:40:6b:0c:46:cc:15:40:db:35:41:a9:33:52:af:8c:
2b:91:bc:72:cb:75:db:73:21:4f:f1:50:c5:a1:54:57:11:ed:
e7:cd:fc:bb:49:d4:16:c2:de:ed:e3:2c:e6:31:5b:09:ab:e3:
b0:cc:f9:f9:94:de:09:0f:e9:05:f0:f2:ca:09:f5:f8:51:cd:
19:b9:dc:ff:00:2d:02:74:c8:cb:a6:7e:2e:4f:5f:40:1b:78:
e4:7e:31:79:bc:a6:75:65:35:2a:02:4a:92:9a:de:38:d9:d3:
1d:39:18:99:3d:4c:66:13:49:eb:8e:4a:d5:79:76:3d:f4:17:
a5:ff:1c:ba:4a:63:af:cf:14:0b:c9:8a:cc:18:6e:96:a7:6c:
22:e9:88:39:dd:93:4b:3f:41:70:70:c6:07:27:09:a0:30:e8:
0c:02:1e:d5:08:76:51:c3:21:be:8d:8a:a1:9b:36:50:24:77:
2e:0e:4e:34:40:91:63:41:5a:f2:dc:45:00:18:1d:64:5b:82:
41:46:dd:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFFqJNPxVi5tXF8gLGZUzpoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMGNjZDIzOTFmYTMyYzBhZGUyOTdjNWZjODgzMDkwYjM5
OTEzOTUwHhcNMjYxMDE2MTcwMDM3WhcNMjYxMDE3MTcwMDM3WjAzMTEwLwYDVQQD
Eyg5YzBlMDFkZWRlZmE1NTMyYjUwZmNjYzc3MWZkYjRiYTQ3MWQ1MzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyV6PE6QTrC8qnV4H2Zzsi7TODcA1
tzfTRCMFksZitAEYxEQnz2MvsW5vzN2n6YZxsH5Z59nO46iTg7K49peeLw09u6yS
tqjTHuri/73WCv630wzcHPkmaPKoYE6J4rUtyJZIZsjeWjp1coktErzgjJjLJbMQ
YOnA9/JNfrK4kjPSMEzm9AKKyT8vLhIcQasZsPpRRbOHRQK0lkVTsqPb1E8mc37S
y0cAEf19nexqF6nt4mQF6VTlhDAfUcsI+eT8Xd1XjzvLZSPnXDgPOgldMawL9eXF
mFFJtFExGtHTlHEKUaNdYTbHGUk/4wmPoufgBEOAXnZHopVJWZ8zxOIB2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJwOAd7e+lUytQ/Mx3H9tLpHHVM2MB8GA1UdIwQY
MBaAFN4MzSOR+jLAreKXxfyIMJCzmROVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2d6Tkk1SDZNc0N0NHBmRl9JZ3drTE9aRTVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zNTI0ODctYTBjOC00ZDkxLThlOWQt
NjdjMWE2M2M1MTUwLzEvM2d6Tkk1SDZNc0N0NHBmRl9JZ3drTE9aRTVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8zNTI0ODctYTBjOC00ZDkxLThlOWQtNjdjMWE2M2M1MTUw
LzEvM2d6Tkk1SDZNc0N0NHBmRl9JZ3drTE9aRTVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAphZp77hN
7/DsdaVGdlRblneCckzhu0J+BSJJjus5BMu5PH4oMkoB6bDAx9M3nOcn6/mQNfdr
pxg2QGsMRswVQNs1QakzUq+MK5G8cst123MhT/FQxaFUVxHt5838u0nUFsLe7eMs
5jFbCavjsMz5+ZTeCQ/pBfDyygn1+FHNGbnc/wAtAnTIy6Z+Lk9fQBt45H4xebym
dWU1KgJKkpreONnTHTkYmT1MZhNJ645K1Xl2PfQXpf8cukpjr88UC8mKzBhulqds
IumIOd2TSz9BcHDGBycJoDDoDAIe1Qh2UcMhvo2KoZs2UCR3Lg5ONECRY0Fa8txF
ABgdZFuCQUbd2w==
-----END CERTIFICATE-----
Generated at Sat Oct 17 03:06:58 2026 by rpki-client