Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/b1d560-9fb2-48f2-b4c3-f1687e4194eb/1/2e3pdPhi_-AFcBn_NEqYK5JsIuI.mft
File: 2e3pdPhi_-AFcBn_NEqYK5JsIuI.mft (raw, json)
Hash identifier: 5JIQLE4pBethPTrlOSwJdZhdA1qJiWxFTmDQukVp9P4=
Subject key identifier: 45:74:BC:A5:84:99:FE:67:77:1B:2C:8F:FB:E5:CE:6A:8E:3B:5E:1B
Authority key identifier: D9:ED:E9:74:F8:62:FF:E0:05:70:19:FF:34:4A:98:2B:92:6C:22:E2
Certificate issuer: /CN=d9ede974f862ffe0057019ff344a982b926c22e2
Certificate serial: 01A166473AA1444A65AE7D829B185CC19640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e3pdPhi_-AFcBn_NEqYK5JsIuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/b1d560-9fb2-48f2-b4c3-f1687e4194eb/1/2e3pdPhi_-AFcBn_NEqYK5JsIuI.mft
Manifest number: 3C
Signing time: Fri 23 Oct 2026 01:01:46 +0000
Manifest this update: Fri 23 Oct 2026 01:01:46 +0000
Manifest next update: Sat 24 Oct 2026 01:01:46 +0000
Files and hashes: 1: 2e3pdPhi_-AFcBn_NEqYK5JsIuI.crl (hash: kHJdf9lH0BrtKpADxflcUnwWGegpDuO179HWR5Bv02A=)
2: dgGpe3ZvG5go1dHWsS_4SNwug0A.asa (hash: 5Db9D+k7z0/W2lW8wzDWCDVNEqvSKYz/TlJwTpT6L6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/b1d560-9fb2-48f2-b4c3-f1687e4194eb/1/2e3pdPhi_-AFcBn_NEqYK5JsIuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/b1d560-9fb2-48f2-b4c3-f1687e4194eb/1/2e3pdPhi_-AFcBn_NEqYK5JsIuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2e3pdPhi_-AFcBn_NEqYK5JsIuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 19:43:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:66:47:3a:a1:44:4a:65:ae:7d:82:9b:18:5c:c1:96:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9ede974f862ffe0057019ff344a982b926c22e2
Validity
Not Before: Oct 23 01:01:46 2026 GMT
Not After : Oct 24 01:01:46 2026 GMT
Subject: CN=4574bca58499fe67771b2c8ffbe5ce6a8e3b5e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2b:d9:3d:81:8b:3f:13:fb:74:c8:06:36:17:
c0:08:7a:2d:6b:01:8c:88:80:bb:32:45:34:70:b8:
5a:f4:c7:0a:d7:8c:20:d0:3f:7d:52:e9:6d:5d:b2:
21:3b:62:ff:d2:f4:5b:ca:58:c4:86:5d:24:2a:7f:
39:ae:f3:5d:4b:17:86:c6:b5:e0:95:6d:22:74:90:
e1:d2:19:c8:eb:33:c8:40:3c:66:27:86:66:67:54:
43:cf:14:bf:b8:6d:5f:fd:86:4c:36:ff:0e:0b:8a:
36:65:56:e6:23:1b:c5:94:cb:75:44:78:9a:6c:49:
8a:8d:b7:fe:c7:3b:99:c7:ef:36:9d:cd:7c:1d:7c:
09:1c:e8:b4:03:e7:f5:ad:ee:dd:be:01:c6:9b:ed:
34:5b:64:66:13:0a:e4:8a:05:38:e5:df:74:9d:05:
23:d8:35:36:8a:bc:79:9e:0b:c2:eb:cf:43:41:bb:
85:26:47:21:fb:c1:6a:2a:35:d1:ad:81:81:92:aa:
07:a7:bf:ed:8c:44:19:b5:19:d9:a6:98:87:2d:49:
b5:df:6b:72:39:9f:d7:bc:f6:fe:6a:a2:b5:76:5a:
11:6f:f4:c0:75:e7:5f:a3:3b:6f:8d:01:be:8c:c2:
5f:7f:d6:1f:dc:05:8c:21:bb:4a:31:78:a9:0b:2d:
31:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:74:BC:A5:84:99:FE:67:77:1B:2C:8F:FB:E5:CE:6A:8E:3B:5E:1B
X509v3 Authority Key Identifier:
keyid:D9:ED:E9:74:F8:62:FF:E0:05:70:19:FF:34:4A:98:2B:92:6C:22:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e3pdPhi_-AFcBn_NEqYK5JsIuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b1d560-9fb2-48f2-b4c3-f1687e4194eb/1/2e3pdPhi_-AFcBn_NEqYK5JsIuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b1d560-9fb2-48f2-b4c3-f1687e4194eb/1/2e3pdPhi_-AFcBn_NEqYK5JsIuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a6:b6:2a:5f:e2:72:c6:d7:a0:de:7f:d6:5b:5a:08:77:1e:
7a:82:2a:bf:a0:49:94:ef:6f:90:16:5f:09:11:22:d7:5a:3e:
48:81:52:8d:15:41:66:b0:49:fa:39:42:49:de:53:de:38:28:
c8:95:2f:d1:26:8e:a5:24:0d:fa:16:a8:d8:a4:8d:da:24:f8:
33:65:54:7c:f8:bb:21:2e:55:d3:31:b3:d7:d5:2c:93:f2:8c:
5f:8d:dd:40:43:d2:78:e2:21:07:77:ed:8e:21:91:2b:c5:da:
46:22:38:d1:7e:0f:f7:ac:ae:4d:fc:dd:11:46:06:40:c2:8e:
f7:a7:84:03:8c:21:85:c2:45:7d:19:5c:93:7c:ab:1d:6d:b9:
6e:7f:5a:c9:22:9b:d5:36:1c:96:e1:c1:ff:21:0a:66:1a:17:
86:9a:cc:f0:8c:8e:aa:0f:11:c2:bb:34:e2:52:a2:7f:05:8b:
17:3b:59:02:fe:c7:a9:d7:1e:a9:52:66:8d:b8:88:76:6b:56:
54:ff:fd:79:90:f7:3e:11:05:1f:b3:96:73:e0:0a:7b:8a:d3:
07:f1:c1:08:94:5e:e6:72:f0:71:de:c3:6b:ba:a5:51:af:f9:
74:b2:48:a7:0a:f6:32:86:19:81:8e:2f:f6:ec:83:ed:b8:78:
d8:0c:6d:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFmRzqhREplrn2CmxhcwZZAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZWRlOTc0Zjg2MmZmZTAwNTcwMTlmZjM0NGE5ODJiOTI2
YzIyZTIwHhcNMjYxMDIzMDEwMTQ2WhcNMjYxMDI0MDEwMTQ2WjAzMTEwLwYDVQQD
Eyg0NTc0YmNhNTg0OTlmZTY3NzcxYjJjOGZmYmU1Y2U2YThlM2I1ZTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yvZPYGLPxP7dMgGNhfACHotawGM
iIC7MkU0cLha9McK14wg0D99UultXbIhO2L/0vRbyljEhl0kKn85rvNdSxeGxrXg
lW0idJDh0hnI6zPIQDxmJ4ZmZ1RDzxS/uG1f/YZMNv8OC4o2ZVbmIxvFlMt1RHia
bEmKjbf+xzuZx+82nc18HXwJHOi0A+f1re7dvgHGm+00W2RmEwrkigU45d90nQUj
2DU2irx5ngvC689DQbuFJkch+8FqKjXRrYGBkqoHp7/tjEQZtRnZppiHLUm132ty
OZ/XvPb+aqK1dloRb/TAdedfoztvjQG+jMJff9Yf3AWMIbtKMXipCy0xXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEV0vKWEmf5ndxssj/vlzmqOO14bMB8GA1UdIwQY
MBaAFNnt6XT4Yv/gBXAZ/zRKmCuSbCLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmUzcGRQaGlfLUFGY0JuX05FcVlLNUpzSXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9iMWQ1NjAtOWZiMi00OGYyLWI0YzMt
ZjE2ODdlNDE5NGViLzEvMmUzcGRQaGlfLUFGY0JuX05FcVlLNUpzSXVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9iMWQ1NjAtOWZiMi00OGYyLWI0YzMtZjE2ODdlNDE5NGVi
LzEvMmUzcGRQaGlfLUFGY0JuX05FcVlLNUpzSXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhaa2Kl/i
csbXoN5/1ltaCHceeoIqv6BJlO9vkBZfCREi11o+SIFSjRVBZrBJ+jlCSd5T3jgo
yJUv0SaOpSQN+hao2KSN2iT4M2VUfPi7IS5V0zGz19Usk/KMX43dQEPSeOIhB3ft
jiGRK8XaRiI40X4P96yuTfzdEUYGQMKO96eEA4whhcJFfRlck3yrHW25bn9aySKb
1TYcluHB/yEKZhoXhprM8IyOqg8Rwrs04lKifwWLFztZAv7HqdceqVJmjbiIdmtW
VP/9eZD3PhEFH7OWc+AKe4rTB/HBCJRe5nLwcd7Da7qlUa/5dLJIpwr2MoYZgY4v
9uyD7bh42AxtRA==
-----END CERTIFICATE-----
Generated at Fri Oct 23 06:07:58 2026 by rpki-client