Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft
File: 3AWXDmUMKq8atqOjOoNzJGahUS4.mft (raw, json)
Hash identifier: pRStOv7BKCooWiinntw5L//XVFazI26LlXJh22AFsak=
Subject key identifier: A8:C3:80:E4:08:0F:3D:D7:A4:72:18:74:9B:72:7A:07:7B:EA:A0:6B
Authority key identifier: DC:05:97:0E:65:0C:2A:AF:1A:B6:A3:A3:3A:83:73:24:66:A1:51:2E
Certificate issuer: /CN=dc05970e650c2aaf1ab6a3a33a83732466a1512e
Certificate serial: 01A147CE616395E4F8D5A47CF8AE6BA37893
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AWXDmUMKq8atqOjOoNzJGahUS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft
Manifest number: 1AAD
Signing time: Sat 17 Oct 2026 03:01:09 +0000
Manifest this update: Sat 17 Oct 2026 03:01:09 +0000
Manifest next update: Sun 18 Oct 2026 03:01:09 +0000
Files and hashes: 1: 3AWXDmUMKq8atqOjOoNzJGahUS4.crl (hash: NPFJjMftKwDkzUdLCUOqS3wEJLP6msZQlTZ8/4I7iAA=)
2: JP7O65gp7zX3tDUG-U1DvEtjCFA.roa (hash: 4wb9GuGN7HSRqQwmPjSk8wSV9Gc7TW0TyvFnGjiWA5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AWXDmUMKq8atqOjOoNzJGahUS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:ce:61:63:95:e4:f8:d5:a4:7c:f8:ae:6b:a3:78:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc05970e650c2aaf1ab6a3a33a83732466a1512e
Validity
Not Before: Oct 17 03:01:09 2026 GMT
Not After : Oct 18 03:01:09 2026 GMT
Subject: CN=a8c380e4080f3dd7a47218749b727a077beaa06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b7:c5:ca:b3:4f:d0:53:34:ca:95:7d:58:80:
f7:23:a1:2c:d3:1c:34:23:5a:35:9c:f6:6e:a6:93:
1d:67:f6:a1:d4:80:fd:ac:61:39:6b:88:93:81:9a:
41:1c:fa:d7:61:9b:dd:26:76:60:a5:41:5a:5a:67:
09:20:ec:60:0d:e2:7b:54:20:56:ec:f6:4a:3b:34:
55:3f:f8:7c:07:49:2c:8f:7d:2f:04:dd:fb:6d:66:
2f:19:66:8b:f0:1f:dc:c9:ee:2a:21:dd:1f:9a:34:
67:38:d3:43:04:dd:58:d3:f9:6e:0b:d4:42:ba:86:
21:50:b4:d0:40:a0:87:d7:e3:0c:05:ee:e4:3a:32:
a1:51:50:86:b7:f7:26:88:19:4e:71:f2:37:5d:28:
0c:9c:fa:dd:08:61:19:7f:f7:44:d1:4d:3e:63:c8:
b5:85:17:78:1d:a5:05:b6:bb:16:04:22:bb:7f:73:
6f:02:5e:38:db:d1:b6:1c:ac:7b:1c:f1:f1:09:b8:
4f:b9:2a:cd:7b:64:a9:d3:68:09:99:70:d4:2f:af:
3d:90:ec:55:bb:1b:0d:42:58:ba:80:20:90:14:30:
dc:b8:f0:7b:19:9e:db:0d:ab:d8:9d:4f:04:4c:6a:
dd:4a:62:72:be:a8:a5:66:dc:a4:bf:c2:d2:80:25:
30:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C3:80:E4:08:0F:3D:D7:A4:72:18:74:9B:72:7A:07:7B:EA:A0:6B
X509v3 Authority Key Identifier:
keyid:DC:05:97:0E:65:0C:2A:AF:1A:B6:A3:A3:3A:83:73:24:66:A1:51:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AWXDmUMKq8atqOjOoNzJGahUS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:86:e9:58:7b:11:58:22:ff:ef:6f:5b:df:22:46:82:e2:1b:
46:e4:75:c0:7f:99:87:83:00:48:52:c6:66:d0:a9:fc:ac:09:
39:6e:81:d3:52:dc:3e:5d:1d:62:99:b7:53:06:a9:6a:e7:ac:
46:45:9b:57:9e:c8:42:7b:97:dc:08:a4:f3:03:23:0f:13:54:
fc:64:cd:7f:38:7a:e9:c1:78:30:66:45:d1:59:e5:4e:3b:7b:
9a:2f:1f:30:be:f9:5c:48:8a:54:80:0b:bf:06:f1:19:cb:65:
2b:55:21:d4:9d:a2:4e:0c:7c:4d:7f:d8:4a:eb:6e:96:ce:69:
2c:6b:1e:fb:92:a5:31:7e:47:b7:20:3f:e2:cc:eb:63:00:7f:
fb:69:04:7f:74:e9:88:fc:5b:8b:11:b9:45:57:3d:61:cd:ac:
53:92:74:44:47:34:97:4c:f0:f8:6f:25:c1:d1:48:35:2b:c3:
5a:f9:ea:1e:57:ca:59:7f:f4:78:8e:9e:e5:92:b8:ef:3c:43:
d5:46:ae:5f:29:1a:de:6b:f3:96:e9:67:e3:30:3e:5f:bf:da:
d7:c2:7b:49:2c:a2:e7:75:e7:25:fd:84:0c:c7:63:28:0c:76:
8c:01:b3:8d:d1:33:a1:99:be:84:d2:5c:78:d2:b9:2a:bf:1a:
9f:8e:95:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFHzmFjleT41aR8+K5ro3iTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMDU5NzBlNjUwYzJhYWYxYWI2YTNhMzNhODM3MzI0NjZh
MTUxMmUwHhcNMjYxMDE3MDMwMTA5WhcNMjYxMDE4MDMwMTA5WjAzMTEwLwYDVQQD
EyhhOGMzODBlNDA4MGYzZGQ3YTQ3MjE4NzQ5YjcyN2EwNzdiZWFhMDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprfFyrNP0FM0ypV9WID3I6Es0xw0
I1o1nPZuppMdZ/ah1ID9rGE5a4iTgZpBHPrXYZvdJnZgpUFaWmcJIOxgDeJ7VCBW
7PZKOzRVP/h8B0ksj30vBN37bWYvGWaL8B/cye4qId0fmjRnONNDBN1Y0/luC9RC
uoYhULTQQKCH1+MMBe7kOjKhUVCGt/cmiBlOcfI3XSgMnPrdCGEZf/dE0U0+Y8i1
hRd4HaUFtrsWBCK7f3NvAl4429G2HKx7HPHxCbhPuSrNe2Sp02gJmXDUL689kOxV
uxsNQli6gCCQFDDcuPB7GZ7bDavYnU8ETGrdSmJyvqilZtykv8LSgCUwVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKjDgOQIDz3XpHIYdJtyegd76qBrMB8GA1UdIwQY
MBaAFNwFlw5lDCqvGrajozqDcyRmoVEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0FXWERtVU1LcThhdHFPak9vTnpKR2FoVVM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zYjlhNDgtOGI2My00ZDNiLWEzYTkt
NjdhNTQwZTI5N2YwLzEvM0FXWERtVU1LcThhdHFPak9vTnpKR2FoVVM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8zYjlhNDgtOGI2My00ZDNiLWEzYTktNjdhNTQwZTI5N2Yw
LzEvM0FXWERtVU1LcThhdHFPak9vTnpKR2FoVVM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPobpWHsR
WCL/729b3yJGguIbRuR1wH+Zh4MASFLGZtCp/KwJOW6B01LcPl0dYpm3Uwapaues
RkWbV57IQnuX3Aik8wMjDxNU/GTNfzh66cF4MGZF0VnlTjt7mi8fML75XEiKVIAL
vwbxGctlK1Uh1J2iTgx8TX/YSutuls5pLGse+5KlMX5HtyA/4szrYwB/+2kEf3Tp
iPxbixG5RVc9Yc2sU5J0REc0l0zw+G8lwdFINSvDWvnqHlfKWX/0eI6e5ZK47zxD
1UauXyka3mvzluln4zA+X7/a18J7SSyi53XnJf2EDMdjKAx2jAGzjdEzoZm+hNJc
eNK5Kr8an46VVg==
-----END CERTIFICATE-----
Generated at Sat Oct 17 06:00:13 2026 by rpki-client