Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
File: 3_xJGVpDnVudcRKzNgFe7iyUTYk.mft (raw, json)
Hash identifier: 0/lHDUKF2VLoWfEGYRf0EQabMvDymW9JAogxSdM0NEI=
Subject key identifier: 93:EE:60:3D:9A:54:DD:7F:16:4F:47:D7:97:3D:6B:E7:A7:87:82:23
Authority key identifier: DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
Certificate issuer: /CN=dffc49195a439d5b9d7112b336015eee2c944d89
Certificate serial: 01A06E7116DFA318A4984A7EC234BD3161FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
Manifest number: 1A3A
Signing time: Fri 04 Sep 2026 22:01:40 +0000
Manifest this update: Fri 04 Sep 2026 22:01:40 +0000
Manifest next update: Sat 05 Sep 2026 22:01:40 +0000
Files and hashes: 1: 3_xJGVpDnVudcRKzNgFe7iyUTYk.crl (hash: otTmfv1LTZ7OROLXa0Bzfns5Ek9EszuOAStCSsQG5U4=)
2: 6rPz8igkyZRlNFZsutLMqabI34I.roa (hash: Z2BW3rAqZoeVlHqBJzAMivNjITmnHOwFnbfJtV0fFqY=)
3: LuIPpCoB4V31cK2p5DsLz4qIQtI.roa (hash: HA29gUkPA7e326XQjVW4UCnX3LAB35fhH3vTvc7GqnM=)
4: iC10497tJji-WYhWTVtTKPnCEBA.roa (hash: 6xbmmivHgxTXa78A2SNCDzZGkpnLAKBTJU2rllnxUng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:71:16:df:a3:18:a4:98:4a:7e:c2:34:bd:31:61:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dffc49195a439d5b9d7112b336015eee2c944d89
Validity
Not Before: Sep 4 22:01:40 2026 GMT
Not After : Sep 5 22:01:40 2026 GMT
Subject: CN=93ee603d9a54dd7f164f47d7973d6be7a7878223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9d:62:ca:6a:36:c1:a8:db:64:a9:ec:e2:e0:
99:3a:62:0d:31:71:e9:68:4c:50:98:ad:0a:db:99:
56:62:34:0e:56:46:d2:cf:2a:1b:8a:7e:9e:d6:c4:
56:3e:05:29:54:1d:d6:03:fe:b0:cf:15:94:06:b4:
fd:63:6d:46:14:75:47:2b:f5:a5:86:5a:82:ec:13:
ab:9e:27:86:f3:e7:ac:d5:d5:ca:c5:50:df:71:8b:
f2:14:a4:62:6a:52:60:98:39:b9:72:eb:b6:39:52:
aa:12:bc:23:23:02:0a:38:aa:ce:53:7c:a7:c7:d2:
aa:e7:64:fd:5c:01:9c:d9:57:a1:29:14:75:36:82:
aa:14:eb:6b:61:70:4d:af:f9:9c:e4:89:20:9c:83:
4f:f7:2a:14:92:92:2a:ae:06:74:6e:72:8e:08:6b:
55:21:82:89:21:05:b4:45:47:cd:4c:94:03:c9:2e:
62:d5:d9:20:f2:9a:e3:11:a1:78:2f:82:1d:b2:32:
46:bf:dc:c8:c5:3c:6d:56:fb:88:f3:c2:49:92:b4:
63:cf:13:8b:a3:61:c8:72:d8:a3:e9:f3:42:f2:f3:
d6:8c:72:8e:40:bc:03:1b:81:16:29:3f:5e:ed:be:
08:15:7b:42:db:91:bd:ec:26:b1:6d:44:a1:37:78:
92:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:EE:60:3D:9A:54:DD:7F:16:4F:47:D7:97:3D:6B:E7:A7:87:82:23
X509v3 Authority Key Identifier:
keyid:DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:07:2b:f3:88:a5:b0:9f:5a:64:52:12:d4:4f:56:96:54:71:
71:d4:9b:4a:b7:74:b3:34:6d:f1:7b:ab:13:5d:fb:e3:b8:1d:
79:5a:ea:df:8c:19:3d:e3:83:99:a6:2a:e6:86:96:98:1b:fe:
2e:b6:11:4c:25:02:59:34:45:be:58:21:d6:ab:72:21:2b:4a:
24:6f:84:76:03:5f:59:77:42:95:e0:17:51:52:72:81:0b:0c:
c1:a3:05:20:a0:02:8c:32:04:12:f6:e0:43:e0:ba:3d:fb:a5:
19:91:03:4e:90:6b:e2:1f:bf:7c:ec:3f:81:16:13:d1:41:0d:
07:ff:22:a1:24:2f:4c:90:c0:bf:92:57:fa:71:23:73:f1:f8:
75:39:2a:27:a4:9e:25:19:42:61:b0:57:c2:1c:e7:21:7b:d0:
ff:09:1e:bd:15:d0:18:44:b5:ec:e4:62:bd:4e:a0:8c:0b:cb:
db:38:98:a5:fd:42:d4:7c:9c:ba:87:94:e2:ac:00:8a:63:34:
68:b8:6c:5a:a9:5e:78:41:17:0a:09:14:40:a3:57:28:78:1d:
a5:96:99:f7:17:a5:91:ab:88:82:bf:52:dc:3a:ca:1c:ea:69:
73:c6:4b:d8:7a:5a:a8:8f:74:61:fc:92:f4:df:20:59:95:1f:
21:3e:29:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBucRbfoxikmEp+wjS9MWH9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZmM0OTE5NWE0MzlkNWI5ZDcxMTJiMzM2MDE1ZWVlMmM5
NDRkODkwHhcNMjYwOTA0MjIwMTQwWhcNMjYwOTA1MjIwMTQwWjAzMTEwLwYDVQQD
Eyg5M2VlNjAzZDlhNTRkZDdmMTY0ZjQ3ZDc5NzNkNmJlN2E3ODc4MjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJ1iymo2wajbZKns4uCZOmINMXHp
aExQmK0K25lWYjQOVkbSzyobin6e1sRWPgUpVB3WA/6wzxWUBrT9Y21GFHVHK/Wl
hlqC7BOrnieG8+es1dXKxVDfcYvyFKRialJgmDm5cuu2OVKqErwjIwIKOKrOU3yn
x9Kq52T9XAGc2VehKRR1NoKqFOtrYXBNr/mc5IkgnINP9yoUkpIqrgZ0bnKOCGtV
IYKJIQW0RUfNTJQDyS5i1dkg8prjEaF4L4IdsjJGv9zIxTxtVvuI88JJkrRjzxOL
o2HIctij6fNC8vPWjHKOQLwDG4EWKT9e7b4IFXtC25G97CaxbUShN3iSTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJPuYD2aVN1/Fk9H15c9a+enh4IjMB8GA1UdIwQY
MBaAFN/8SRlaQ51bnXESszYBXu4slE2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM194SkdWcERuVnVkY1JLek5nRmU3aXlVVFlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9iMjhkODktYjg5Yi00NjgyLWI4Yzct
N2ViYjZiOWUzNjlkLzEvM194SkdWcERuVnVkY1JLek5nRmU3aXlVVFlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9iMjhkODktYjg5Yi00NjgyLWI4YzctN2ViYjZiOWUzNjlk
LzEvM194SkdWcERuVnVkY1JLek5nRmU3aXlVVFlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhQcr84il
sJ9aZFIS1E9WllRxcdSbSrd0szRt8XurE13747gdeVrq34wZPeODmaYq5oaWmBv+
LrYRTCUCWTRFvlgh1qtyIStKJG+EdgNfWXdCleAXUVJygQsMwaMFIKACjDIEEvbg
Q+C6PfulGZEDTpBr4h+/fOw/gRYT0UENB/8ioSQvTJDAv5JX+nEjc/H4dTkqJ6Se
JRlCYbBXwhznIXvQ/wkevRXQGES17ORivU6gjAvL2ziYpf1C1HycuoeU4qwAimM0
aLhsWqleeEEXCgkUQKNXKHgdpZaZ9xelkauIgr9S3DrKHOppc8ZL2HpaqI90YfyS
9N8gWZUfIT4png==
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:57:18 2026 by rpki-client