Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/553de1-0ee5-4b25-a520-d42768c84df7/1/3jCrARAqrvMOvUyJHAOAm6rQOeA.mft
File: 3jCrARAqrvMOvUyJHAOAm6rQOeA.mft (raw, json)
Hash identifier: vuIPnziiiT9bnAMVqmHTiOsXNeHQbmidyNE0f8c9TXU=
Subject key identifier: 7A:EE:BA:49:84:6B:B7:D9:84:B6:DF:D2:AF:9C:EA:05:87:B8:92:EC
Authority key identifier: DE:30:AB:01:10:2A:AE:F3:0E:BD:4C:89:1C:03:80:9B:AA:D0:39:E0
Certificate issuer: /CN=de30ab01102aaef30ebd4c891c03809baad039e0
Certificate serial: 01A04017B5052AB234BB66817532B2370F5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3jCrARAqrvMOvUyJHAOAm6rQOeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/553de1-0ee5-4b25-a520-d42768c84df7/1/3jCrARAqrvMOvUyJHAOAm6rQOeA.mft
Manifest number: 03E5
Signing time: Wed 26 Aug 2026 22:01:30 +0000
Manifest this update: Wed 26 Aug 2026 22:01:30 +0000
Manifest next update: Thu 27 Aug 2026 22:01:30 +0000
Files and hashes: 1: 3jCrARAqrvMOvUyJHAOAm6rQOeA.crl (hash: 6aL0JN2yMnwQyJwFZbrVBalFo+mCxRoOmFWx59iYG9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/553de1-0ee5-4b25-a520-d42768c84df7/1/3jCrARAqrvMOvUyJHAOAm6rQOeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/553de1-0ee5-4b25-a520-d42768c84df7/1/3jCrARAqrvMOvUyJHAOAm6rQOeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3jCrARAqrvMOvUyJHAOAm6rQOeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:17:b5:05:2a:b2:34:bb:66:81:75:32:b2:37:0f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de30ab01102aaef30ebd4c891c03809baad039e0
Validity
Not Before: Aug 26 22:01:30 2026 GMT
Not After : Aug 27 22:01:30 2026 GMT
Subject: CN=7aeeba49846bb7d984b6dfd2af9cea0587b892ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:65:36:2f:88:e6:49:f2:dd:f7:44:cf:fb:e6:
6a:3c:9c:6d:51:9d:3a:4d:7e:d7:c6:a2:9a:8a:ae:
f9:51:bc:f6:4e:c4:28:ca:8b:99:18:b6:95:53:00:
35:db:00:f4:0e:52:b6:92:d1:ed:09:81:de:5b:fd:
35:39:79:2a:6c:26:9a:c9:4b:83:52:2c:3d:03:07:
0b:5b:fb:8b:49:d0:9e:fe:48:ed:50:da:1f:c7:5e:
b0:08:ad:be:8d:d0:08:3b:bc:6c:82:4f:b9:c3:f4:
8f:5c:23:74:50:78:c7:a9:09:2c:eb:00:bb:ff:32:
f0:80:83:11:a1:38:13:02:97:5c:e2:49:b2:03:52:
82:97:d2:55:84:f4:2a:28:25:42:98:af:f7:f7:cb:
f9:64:10:77:66:59:f6:aa:62:4a:e8:2d:0a:5d:e7:
61:a3:81:05:d6:de:57:8a:d6:d8:56:50:21:b9:e0:
83:fd:92:26:3c:5c:0a:e5:22:5b:b3:2d:2c:ad:85:
49:24:d5:32:04:c3:ef:a7:a8:ba:ae:2c:67:2a:5c:
24:b2:a4:2f:46:d4:26:0f:f7:a0:34:75:13:f1:60:
46:fa:c8:0e:b9:a7:9c:77:17:8b:6d:68:66:8c:36:
82:16:24:79:1b:87:0e:ee:2b:83:ba:25:ca:80:9a:
61:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EE:BA:49:84:6B:B7:D9:84:B6:DF:D2:AF:9C:EA:05:87:B8:92:EC
X509v3 Authority Key Identifier:
keyid:DE:30:AB:01:10:2A:AE:F3:0E:BD:4C:89:1C:03:80:9B:AA:D0:39:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3jCrARAqrvMOvUyJHAOAm6rQOeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/553de1-0ee5-4b25-a520-d42768c84df7/1/3jCrARAqrvMOvUyJHAOAm6rQOeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/553de1-0ee5-4b25-a520-d42768c84df7/1/3jCrARAqrvMOvUyJHAOAm6rQOeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d1:3b:79:bf:1e:76:35:ff:51:1d:37:04:43:2b:2d:46:aa:
49:85:67:b5:33:36:fb:73:bc:27:be:4f:ed:db:5c:90:fd:76:
0f:98:f7:e8:cb:c7:bd:cf:01:1a:be:34:26:f0:c6:82:be:bc:
7c:69:ea:87:03:87:70:b6:a2:a7:bc:32:6b:60:33:c4:4f:4e:
86:24:10:94:94:c1:e5:00:e2:ae:f5:2a:e5:e5:29:7f:e4:09:
d8:f6:38:84:57:ef:fe:89:8a:8e:37:c2:b9:41:b9:45:91:83:
ff:95:29:d6:dd:b2:4f:ce:45:da:79:8c:a5:03:ee:23:f3:47:
77:83:b4:77:bb:02:7c:c7:0c:d7:aa:2f:f0:3a:1c:be:25:08:
9e:7a:31:33:c3:a9:ee:c2:74:ec:b8:12:cf:be:4e:f1:f1:73:
0c:64:96:aa:36:27:c0:f9:c2:10:25:de:a6:6b:d8:5d:75:4c:
84:09:5e:fb:4f:a9:33:c6:8a:03:ad:04:1e:2a:ae:9e:57:6a:
c7:8e:e9:2a:0f:48:9b:4e:19:13:6f:f6:79:f1:29:71:77:b0:
40:30:9e:75:01:49:68:de:2e:fd:e6:f0:0c:03:89:6b:9f:06:
36:28:23:0a:aa:9d:86:44:77:11:a4:6e:90:e9:98:91:27:31:
d5:44:c6:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBAF7UFKrI0u2aBdTKyNw9eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMzBhYjAxMTAyYWFlZjMwZWJkNGM4OTFjMDM4MDliYWFk
MDM5ZTAwHhcNMjYwODI2MjIwMTMwWhcNMjYwODI3MjIwMTMwWjAzMTEwLwYDVQQD
Eyg3YWVlYmE0OTg0NmJiN2Q5ODRiNmRmZDJhZjljZWEwNTg3Yjg5MmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGU2L4jmSfLd90TP++ZqPJxtUZ06
TX7XxqKaiq75Ubz2TsQoyouZGLaVUwA12wD0DlK2ktHtCYHeW/01OXkqbCaayUuD
Uiw9AwcLW/uLSdCe/kjtUNofx16wCK2+jdAIO7xsgk+5w/SPXCN0UHjHqQks6wC7
/zLwgIMRoTgTApdc4kmyA1KCl9JVhPQqKCVCmK/398v5ZBB3Zln2qmJK6C0KXedh
o4EF1t5XitbYVlAhueCD/ZImPFwK5SJbsy0srYVJJNUyBMPvp6i6rixnKlwksqQv
RtQmD/egNHUT8WBG+sgOuaecdxeLbWhmjDaCFiR5G4cO7iuDuiXKgJphnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHruukmEa7fZhLbf0q+c6gWHuJLsMB8GA1UdIwQY
MBaAFN4wqwEQKq7zDr1MiRwDgJuq0DngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2pDckFSQXFydk1PdlV5SkhBT0FtNnJRT2VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS81NTNkZTEtMGVlNS00YjI1LWE1MjAt
ZDQyNzY4Yzg0ZGY3LzEvM2pDckFSQXFydk1PdlV5SkhBT0FtNnJRT2VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS81NTNkZTEtMGVlNS00YjI1LWE1MjAtZDQyNzY4Yzg0ZGY3
LzEvM2pDckFSQXFydk1PdlV5SkhBT0FtNnJRT2VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkNE7eb8e
djX/UR03BEMrLUaqSYVntTM2+3O8J75P7dtckP12D5j36MvHvc8BGr40JvDGgr68
fGnqhwOHcLaip7wya2AzxE9OhiQQlJTB5QDirvUq5eUpf+QJ2PY4hFfv/omKjjfC
uUG5RZGD/5Up1t2yT85F2nmMpQPuI/NHd4O0d7sCfMcM16ov8DocviUInnoxM8Op
7sJ07LgSz75O8fFzDGSWqjYnwPnCECXepmvYXXVMhAle+0+pM8aKA60EHiqunldq
x47pKg9Im04ZE2/2efEpcXewQDCedQFJaN4u/ebwDAOJa58GNigjCqqdhkR3EaRu
kOmYkScx1UTG2Q==
-----END CERTIFICATE-----
Generated at Thu Aug 27 05:38:34 2026 by rpki-client