Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
File: 3y3kqfK8Uj318Kf15DJJikLFX3A.mft (raw, json)
Hash identifier: n8FBrz71qtCE9v1mqSYnMMFAkXSdPanIU43n4+PfyG4=
Subject key identifier: F2:E0:3C:9D:B4:18:DE:EF:5D:54:C3:F7:83:20:97:36:95:55:B0:B4
Authority key identifier: DF:2D:E4:A9:F2:BC:52:3D:F5:F0:A7:F5:E4:32:49:8A:42:C5:5F:70
Certificate issuer: /CN=df2de4a9f2bc523df5f0a7f5e432498a42c55f70
Certificate serial: 01A08942C9F8C2FD4282E8F916206DB4E059
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3y3kqfK8Uj318Kf15DJJikLFX3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
Manifest number: 019D
Signing time: Thu 10 Sep 2026 03:00:50 +0000
Manifest this update: Thu 10 Sep 2026 03:00:50 +0000
Manifest next update: Fri 11 Sep 2026 03:00:50 +0000
Files and hashes: 1: 3y3kqfK8Uj318Kf15DJJikLFX3A.crl (hash: hVTN3aBQ5Qb8lOurmjUZ5dPUH9PWPTUWux6fRYXHRvQ=)
2: 8XebNTiumaUWcLbgsrPRqEK7yJk.roa (hash: wIkMYGUwRkloiGV8zcV817/8WXtvc8qz+eDzExEQl48=)
3: SU9_tB5lwfHPL_4Kt4ROwFHlUMI.asa (hash: wN65KwAJllI0kxcg5tgjkk0Y4QH9uf/hvRTzQ2pTovk=)
4: xtsoV3YrVhm4MKDjfu3IvjG7q1g.roa (hash: qMRfu2o1bzSJ1p0UvgBKjKi65ckvS8nI12aCVQ8a6vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3y3kqfK8Uj318Kf15DJJikLFX3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:42:c9:f8:c2:fd:42:82:e8:f9:16:20:6d:b4:e0:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df2de4a9f2bc523df5f0a7f5e432498a42c55f70
Validity
Not Before: Sep 10 03:00:50 2026 GMT
Not After : Sep 11 03:00:50 2026 GMT
Subject: CN=f2e03c9db418deef5d54c3f7832097369555b0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:54:01:6c:4b:b8:5f:44:80:3c:69:64:b5:ee:
b1:46:b1:ad:c1:d6:7b:92:1a:55:f2:dc:f6:68:66:
8a:6e:70:7d:ea:b8:54:ac:ca:ba:4e:7c:f1:80:ee:
a1:ae:12:48:fb:6e:28:b4:22:cf:1c:5e:60:43:d8:
a4:57:23:e7:21:26:4a:9f:6a:46:c6:cc:89:1b:4b:
bf:fe:27:ae:e5:5a:2a:4f:c9:20:3d:f0:f3:97:bb:
1a:83:08:29:f3:0d:9d:0a:47:e9:43:e6:eb:fb:3f:
bc:f3:64:42:34:6f:1d:3c:74:d2:cf:f5:73:32:e8:
da:27:aa:36:74:6a:0e:31:ea:8c:8e:7f:13:2e:b9:
e5:a8:f6:c9:c0:f3:58:ca:e5:c5:b3:3c:ba:47:c8:
f8:a3:ab:11:54:6b:25:61:af:d5:11:ee:61:7c:2d:
0f:09:1d:da:a9:67:09:e3:b7:69:69:10:6d:9c:2b:
d2:64:38:55:ce:ae:23:4a:d3:68:ae:ee:7f:53:3c:
48:05:f7:20:e5:bc:dc:01:6d:ee:8c:55:f1:3c:48:
c7:2c:93:96:10:3d:36:fa:04:7e:3f:d2:09:06:dc:
a3:50:63:f0:b3:a0:ea:ff:80:e2:cd:93:a5:eb:54:
dc:a8:fb:60:75:6c:26:c5:23:e9:28:26:37:24:cd:
55:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E0:3C:9D:B4:18:DE:EF:5D:54:C3:F7:83:20:97:36:95:55:B0:B4
X509v3 Authority Key Identifier:
keyid:DF:2D:E4:A9:F2:BC:52:3D:F5:F0:A7:F5:E4:32:49:8A:42:C5:5F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3y3kqfK8Uj318Kf15DJJikLFX3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/af3667-e393-4cf8-94bb-ecc806775031/1/3y3kqfK8Uj318Kf15DJJikLFX3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e9:a8:30:d5:f3:dd:d1:23:fe:f7:ef:fc:33:e6:ee:86:ce:
a3:5c:aa:5b:7f:ce:0e:cb:c4:a1:bb:ae:b0:aa:5b:db:17:3f:
3f:93:b2:be:c9:3a:3e:e0:b2:a0:f2:19:c0:73:b0:4e:a2:61:
59:a8:ce:3c:6a:0f:9c:8c:9a:39:8b:29:34:98:fc:00:13:77:
31:3f:15:d5:6f:5b:f6:de:c2:0a:76:ed:1f:d1:a7:5f:3e:6b:
81:1b:39:54:88:9d:3c:ec:6c:5a:ce:b5:cd:1a:a7:9f:52:4f:
d9:ef:cc:b3:d5:27:66:9f:18:fe:bc:ec:d0:34:94:f6:bd:20:
05:35:94:8b:db:b6:5c:2c:d4:1a:a9:57:ff:19:86:c1:5a:6a:
a8:ef:65:c5:f9:57:9a:0b:01:1b:49:94:64:ab:c4:e8:6f:00:
ff:b6:17:5d:cd:f2:1b:46:f6:0b:59:e4:3e:5a:61:a7:62:e5:
37:d1:27:91:70:fd:00:11:cf:28:19:44:56:7e:f5:b3:b9:81:
3b:fe:08:fe:c9:34:a7:58:b7:fb:0b:c2:cc:99:cb:8b:ec:23:
1f:33:88:12:c6:a0:df:e3:79:4f:08:d1:42:c1:a2:f9:a4:37:
2d:de:74:f9:56:6a:b9:f1:31:70:68:d0:e1:1a:3d:cc:de:8b:
bd:9a:6d:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCJQsn4wv1Cguj5FiBttOBZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMmRlNGE5ZjJiYzUyM2RmNWYwYTdmNWU0MzI0OThhNDJj
NTVmNzAwHhcNMjYwOTEwMDMwMDUwWhcNMjYwOTExMDMwMDUwWjAzMTEwLwYDVQQD
EyhmMmUwM2M5ZGI0MThkZWVmNWQ1NGMzZjc4MzIwOTczNjk1NTViMGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VQBbEu4X0SAPGlkte6xRrGtwdZ7
khpV8tz2aGaKbnB96rhUrMq6TnzxgO6hrhJI+24otCLPHF5gQ9ikVyPnISZKn2pG
xsyJG0u//ieu5VoqT8kgPfDzl7sagwgp8w2dCkfpQ+br+z+882RCNG8dPHTSz/Vz
MujaJ6o2dGoOMeqMjn8TLrnlqPbJwPNYyuXFszy6R8j4o6sRVGslYa/VEe5hfC0P
CR3aqWcJ47dpaRBtnCvSZDhVzq4jStNoru5/UzxIBfcg5bzcAW3ujFXxPEjHLJOW
ED02+gR+P9IJBtyjUGPws6Dq/4DizZOl61TcqPtgdWwmxSPpKCY3JM1V/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLgPJ20GN7vXVTD94MglzaVVbC0MB8GA1UdIwQY
MBaAFN8t5KnyvFI99fCn9eQySYpCxV9wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3kza3FmSzhVajMxOEtmMTVESkppa0xGWDNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9hZjM2NjctZTM5My00Y2Y4LTk0YmIt
ZWNjODA2Nzc1MDMxLzEvM3kza3FmSzhVajMxOEtmMTVESkppa0xGWDNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9hZjM2NjctZTM5My00Y2Y4LTk0YmItZWNjODA2Nzc1MDMx
LzEvM3kza3FmSzhVajMxOEtmMTVESkppa0xGWDNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU+moMNXz
3dEj/vfv/DPm7obOo1yqW3/ODsvEobuusKpb2xc/P5Oyvsk6PuCyoPIZwHOwTqJh
WajOPGoPnIyaOYspNJj8ABN3MT8V1W9b9t7CCnbtH9GnXz5rgRs5VIidPOxsWs61
zRqnn1JP2e/Ms9UnZp8Y/rzs0DSU9r0gBTWUi9u2XCzUGqlX/xmGwVpqqO9lxflX
mgsBG0mUZKvE6G8A/7YXXc3yG0b2C1nkPlphp2LlN9EnkXD9ABHPKBlEVn71s7mB
O/4I/sk0p1i3+wvCzJnLi+wjHzOIEsag3+N5TwjRQsGi+aQ3Ld50+VZqufExcGjQ
4Ro9zN6LvZptGA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 13:15:12 2026 by rpki-client