Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
File: 3hm6qMiAqUWdxfRNZ13qTvltve8.mft (raw, json)
Hash identifier: +OX6w98V+8Sfn+netlTd2wiuO7GEQhdxNlZcV31/nM8=
Subject key identifier: 6A:C1:28:CC:A2:AE:CF:E0:05:0D:9C:46:01:B7:37:D1:A1:41:0A:63
Authority key identifier: DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
Certificate issuer: /CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Certificate serial: 01A0F30CFAFB0E932CA8FE8FE6CE46B49168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
Manifest number: 1A7E
Signing time: Wed 30 Sep 2026 16:01:49 +0000
Manifest this update: Wed 30 Sep 2026 16:01:49 +0000
Manifest next update: Thu 01 Oct 2026 16:01:49 +0000
Files and hashes: 1: 0ifdoRqftjKZH8a-6jD9Ep0-QxI.roa (hash: RzDAQWUlUC2j8WOaVbsFRmGBNqRpbLHgJHxSpxsXf7Q=)
2: 3hm6qMiAqUWdxfRNZ13qTvltve8.crl (hash: uIyqeZX6cKJehPrSxtmBRjFs17L4XgqD83yA/gwSCM0=)
3: lg-osn9EUdIDJV3HpKBV7GEVZBA.roa (hash: R0yIGLDbtgAEX53dIyQ8T0aPBUwbUP+tfVSTJU5okAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:0c:fa:fb:0e:93:2c:a8:fe:8f:e6:ce:46:b4:91:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de19baa8c880a9459dc5f44d675dea4ef96dbdef
Validity
Not Before: Sep 30 16:01:49 2026 GMT
Not After : Oct 1 16:01:49 2026 GMT
Subject: CN=6ac128cca2aecfe0050d9c4601b737d1a1410a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:92:bf:a3:53:32:81:c5:53:fd:4b:66:dc:e7:
19:11:87:40:4b:dd:3b:0d:cf:fb:45:ae:d7:b2:18:
3c:6c:be:ce:c6:5f:28:6b:ce:f6:8f:1c:b6:de:d6:
94:94:de:df:07:f4:d3:f5:8d:0c:d4:06:98:2b:6c:
54:f0:3e:f8:3d:60:c1:88:62:44:63:c8:3a:19:00:
cb:8b:35:8c:c1:32:17:9a:25:47:e5:ac:31:b1:f9:
45:1c:97:92:d4:ad:7c:0f:ec:3c:69:6c:49:fd:92:
aa:95:b0:3b:cb:81:37:16:c2:11:32:4e:39:27:9b:
fa:c5:6c:b8:f0:f7:98:bd:88:9f:ec:ac:36:b2:24:
22:f0:ec:ed:bc:f4:57:87:28:84:a6:14:11:22:cf:
fe:bd:48:3e:51:f9:00:ce:4c:9f:72:52:79:94:69:
87:56:38:00:96:a0:02:dd:a2:79:d7:75:79:c5:5d:
42:3c:35:08:bb:78:19:10:a6:84:1b:c2:87:6d:33:
99:a9:b9:b2:eb:be:5f:f8:ce:c7:4e:0e:7e:f6:a4:
41:d4:d8:1f:c1:d5:79:55:ea:ad:3c:be:f6:63:3f:
3c:70:01:ef:e8:ee:3d:73:05:8a:91:10:59:9b:4e:
1e:fe:b3:ac:7f:ca:11:cf:ee:e2:7d:29:0a:60:af:
ee:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C1:28:CC:A2:AE:CF:E0:05:0D:9C:46:01:B7:37:D1:A1:41:0A:63
X509v3 Authority Key Identifier:
keyid:DE:19:BA:A8:C8:80:A9:45:9D:C5:F4:4D:67:5D:EA:4E:F9:6D:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hm6qMiAqUWdxfRNZ13qTvltve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9fc14c-c366-46ff-aaf7-8949e751b219/1/3hm6qMiAqUWdxfRNZ13qTvltve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c5:44:98:93:04:bc:9d:b2:3f:85:ee:d5:85:55:f7:03:af:
86:e5:66:ad:a7:70:a1:fc:f1:28:fd:e4:f5:2e:ff:6b:a4:14:
62:ce:61:9f:fa:44:c4:07:91:be:3a:d6:03:5a:01:70:27:3e:
78:ee:a7:8b:4a:08:6b:a3:59:cd:98:62:ff:ee:90:88:ed:33:
a1:3b:5d:16:91:61:7b:42:b5:e5:b9:5f:ff:66:93:36:be:d7:
7c:1a:3e:83:ba:72:0d:67:0e:fe:7d:e7:30:0b:40:69:d3:06:
c0:db:1e:0e:7a:af:8e:0a:9d:20:30:af:37:a2:e8:3f:c9:45:
6d:59:aa:14:8f:17:73:7f:48:aa:d0:4c:61:78:f2:cc:b9:a5:
81:d4:8c:f5:ae:b5:8c:16:ac:ae:83:d6:86:22:79:c8:b9:21:
54:86:df:1c:f9:6a:97:db:42:e5:8f:98:d4:3e:1d:69:54:c6:
bc:d7:9d:32:c9:41:48:20:83:1f:1e:eb:7a:7a:f5:f1:47:a1:
73:3d:81:27:95:a9:cf:1b:de:72:92:1d:21:f0:74:f5:9a:38:
ac:0b:d5:ab:b4:59:f5:a4:f5:f8:e6:1f:89:97:79:56:82:b5:
3e:03:a2:ea:b0:ec:23:ab:3d:e7:cd:a0:1a:57:9f:64:53:2c:
19:79:ac:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDzDPr7DpMsqP6P5s5GtJFoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMTliYWE4Yzg4MGE5NDU5ZGM1ZjQ0ZDY3NWRlYTRlZjk2
ZGJkZWYwHhcNMjYwOTMwMTYwMTQ5WhcNMjYxMDAxMTYwMTQ5WjAzMTEwLwYDVQQD
Eyg2YWMxMjhjY2EyYWVjZmUwMDUwZDljNDYwMWI3MzdkMWExNDEwYTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65K/o1MygcVT/Utm3OcZEYdAS907
Dc/7Ra7Xshg8bL7Oxl8oa872jxy23taUlN7fB/TT9Y0M1AaYK2xU8D74PWDBiGJE
Y8g6GQDLizWMwTIXmiVH5awxsflFHJeS1K18D+w8aWxJ/ZKqlbA7y4E3FsIRMk45
J5v6xWy48PeYvYif7Kw2siQi8OztvPRXhyiEphQRIs/+vUg+UfkAzkyfclJ5lGmH
VjgAlqAC3aJ513V5xV1CPDUIu3gZEKaEG8KHbTOZqbmy675f+M7HTg5+9qRB1Ngf
wdV5VeqtPL72Yz88cAHv6O49cwWKkRBZm04e/rOsf8oRz+7ifSkKYK/uyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGrBKMyirs/gBQ2cRgG3N9GhQQpjMB8GA1UdIwQY
MBaAFN4ZuqjIgKlFncX0TWdd6k75bb3vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2htNnFNaUFxVVdkeGZSTloxM3FUdmx0dmU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85ZmMxNGMtYzM2Ni00NmZmLWFhZjct
ODk0OWU3NTFiMjE5LzEvM2htNnFNaUFxVVdkeGZSTloxM3FUdmx0dmU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85ZmMxNGMtYzM2Ni00NmZmLWFhZjctODk0OWU3NTFiMjE5
LzEvM2htNnFNaUFxVVdkeGZSTloxM3FUdmx0dmU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABsVEmJME
vJ2yP4Xu1YVV9wOvhuVmradwofzxKP3k9S7/a6QUYs5hn/pExAeRvjrWA1oBcCc+
eO6ni0oIa6NZzZhi/+6QiO0zoTtdFpFhe0K15blf/2aTNr7XfBo+g7pyDWcO/n3n
MAtAadMGwNseDnqvjgqdIDCvN6LoP8lFbVmqFI8Xc39IqtBMYXjyzLmlgdSM9a61
jBasroPWhiJ5yLkhVIbfHPlql9tC5Y+Y1D4daVTGvNedMslBSCCDHx7renr18Ueh
cz2BJ5WpzxvecpIdIfB09Zo4rAvVq7RZ9aT1+OYfiZd5VoK1PgOi6rDsI6s9582g
GlefZFMsGXmsbw==
-----END CERTIFICATE-----
Generated at Wed Sep 30 21:04:13 2026 by rpki-client