Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/3gKSn1rIw0n-qYVSnBcU58yVz80.mft
File: 3gKSn1rIw0n-qYVSnBcU58yVz80.mft (raw, json)
Hash identifier: D/pBZkYz9obJKiZAfzKXNymdCXE+2AwEjcDB7cXzWeU=
Subject key identifier: A5:09:A5:0D:59:3E:2B:CD:CC:20:F2:45:27:38:5F:23:33:C0:CF:7B
Authority key identifier: DE:02:92:9F:5A:C8:C3:49:FE:A9:85:52:9C:17:14:E7:CC:95:CF:CD
Certificate issuer: /CN=de02929f5ac8c349fea985529c1714e7cc95cfcd
Certificate serial: 01A0EB1C12DFD383701C44FBBA6A535EEDED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gKSn1rIw0n-qYVSnBcU58yVz80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/3gKSn1rIw0n-qYVSnBcU58yVz80.mft
Manifest number: F3
Signing time: Tue 29 Sep 2026 03:01:20 +0000
Manifest this update: Tue 29 Sep 2026 03:01:20 +0000
Manifest next update: Wed 30 Sep 2026 03:01:20 +0000
Files and hashes: 1: 3gKSn1rIw0n-qYVSnBcU58yVz80.crl (hash: 0PERsYSuquBYrKim4Bldhc2VXiu2cZjksp8rzW/LvO0=)
2: qt1X8cd4EEdSt0Ko4GKZetgm0U8.roa (hash: QOME3Vz+1BFTr6N1pPVdoLgRzF0h3H4cA0/YeWP3aH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/3gKSn1rIw0n-qYVSnBcU58yVz80.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/3gKSn1rIw0n-qYVSnBcU58yVz80.mft
rsync://rpki.ripe.net/repository/DEFAULT/3gKSn1rIw0n-qYVSnBcU58yVz80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:1c:12:df:d3:83:70:1c:44:fb:ba:6a:53:5e:ed:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de02929f5ac8c349fea985529c1714e7cc95cfcd
Validity
Not Before: Sep 29 03:01:20 2026 GMT
Not After : Sep 30 03:01:20 2026 GMT
Subject: CN=a509a50d593e2bcdcc20f24527385f2333c0cf7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:29:f0:ef:08:b2:f4:40:05:75:35:0a:4e:94:
06:04:29:c2:bb:e4:90:57:5d:63:43:a0:2b:6a:66:
df:f2:95:80:de:ce:57:98:bc:8b:8c:d6:88:32:0a:
63:02:6a:33:05:a4:9b:97:32:14:7f:eb:0f:8e:a9:
87:37:2f:b1:16:82:84:3a:4a:32:48:c3:3c:64:94:
44:64:d8:87:6d:bc:f7:2f:f8:00:28:30:23:e8:b6:
45:8c:26:60:b0:94:59:9f:0c:95:f2:bc:f2:93:33:
1f:a4:c5:66:58:a8:f2:8a:86:6c:94:23:3f:24:84:
d9:9c:2b:26:44:53:34:24:a9:ec:b8:ab:fa:45:53:
b3:a3:17:09:b9:77:55:3e:82:43:45:91:d6:75:10:
07:06:c7:dd:7c:9a:da:bd:af:6d:b3:cc:86:5c:41:
0f:4d:6c:1d:e2:8d:a7:5e:fd:db:73:8f:90:3c:4a:
21:6d:4f:68:e7:5c:41:33:14:e8:d6:e7:c8:a9:09:
2d:80:2b:81:83:54:7b:fe:00:b6:54:01:29:39:fc:
2f:f8:42:b9:ce:bc:71:0b:ac:90:c8:40:26:7e:97:
6f:c1:e8:e1:dc:0b:38:dd:50:0e:da:23:a6:26:75:
f9:2e:d0:ee:53:a6:fc:10:28:30:98:9c:a0:76:d5:
89:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:09:A5:0D:59:3E:2B:CD:CC:20:F2:45:27:38:5F:23:33:C0:CF:7B
X509v3 Authority Key Identifier:
keyid:DE:02:92:9F:5A:C8:C3:49:FE:A9:85:52:9C:17:14:E7:CC:95:CF:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gKSn1rIw0n-qYVSnBcU58yVz80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/3gKSn1rIw0n-qYVSnBcU58yVz80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/3gKSn1rIw0n-qYVSnBcU58yVz80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:60:2e:c9:65:c8:ff:dc:35:6b:27:e8:22:0a:b2:49:70:54:
f2:ac:2e:12:cc:e6:0c:79:64:ba:59:f2:5f:5f:d3:3b:41:9c:
25:e2:cc:bd:ce:99:64:b8:5e:cd:99:d2:ab:f8:49:6b:c9:46:
05:d9:80:42:35:66:1f:33:49:4c:8a:94:ae:11:74:29:db:20:
bf:0a:73:f5:b0:c0:a4:fa:ae:74:5e:11:61:71:d5:cd:61:52:
c0:7d:7e:8c:b2:27:29:fa:62:8d:65:76:33:9f:92:60:9c:ab:
8d:77:2e:80:66:3f:91:42:8b:9f:d9:f9:5b:93:4e:83:76:5d:
e5:95:f5:b4:e3:08:72:0c:79:78:b7:e1:df:ce:a3:e7:a9:c1:
f1:1f:ea:62:41:ad:e9:be:c3:50:5e:32:8d:0a:86:eb:10:b0:
e6:e1:cc:72:50:ba:13:85:e7:6e:03:43:ff:4b:11:cb:52:2a:
0f:8b:41:22:5c:16:2f:c9:ff:cf:7d:bc:02:9f:2e:8e:91:53:
2a:f7:0b:23:33:c4:e1:44:07:a4:6b:85:58:3e:52:f2:58:74:
f5:40:a2:32:eb:2c:11:e2:4d:11:0a:24:92:bb:68:5e:90:1e:
12:0a:6b:b3:54:6e:2f:d9:34:59:f4:aa:8a:88:fb:55:de:bc:
65:58:b5:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDrHBLf04NwHET7umpTXu3tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMDI5MjlmNWFjOGMzNDlmZWE5ODU1MjljMTcxNGU3Y2M5
NWNmY2QwHhcNMjYwOTI5MDMwMTIwWhcNMjYwOTMwMDMwMTIwWjAzMTEwLwYDVQQD
EyhhNTA5YTUwZDU5M2UyYmNkY2MyMGYyNDUyNzM4NWYyMzMzYzBjZjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkynw7wiy9EAFdTUKTpQGBCnCu+SQ
V11jQ6Arambf8pWA3s5XmLyLjNaIMgpjAmozBaSblzIUf+sPjqmHNy+xFoKEOkoy
SMM8ZJREZNiHbbz3L/gAKDAj6LZFjCZgsJRZnwyV8rzykzMfpMVmWKjyioZslCM/
JITZnCsmRFM0JKnsuKv6RVOzoxcJuXdVPoJDRZHWdRAHBsfdfJrava9ts8yGXEEP
TWwd4o2nXv3bc4+QPEohbU9o51xBMxTo1ufIqQktgCuBg1R7/gC2VAEpOfwv+EK5
zrxxC6yQyEAmfpdvwejh3As43VAO2iOmJnX5LtDuU6b8ECgwmJygdtWJBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUJpQ1ZPivNzCDyRSc4XyMzwM97MB8GA1UdIwQY
MBaAFN4Ckp9ayMNJ/qmFUpwXFOfMlc/NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2dLU24xckl3MG4tcVlWU25CY1U1OHlWejgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iMzQ2NDItYzdlYy00ZDQ3LTlkNmYt
MjcxYTE1NWVlYjkyLzEvM2dLU24xckl3MG4tcVlWU25CY1U1OHlWejgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9iMzQ2NDItYzdlYy00ZDQ3LTlkNmYtMjcxYTE1NWVlYjky
LzEvM2dLU24xckl3MG4tcVlWU25CY1U1OHlWejgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsWAuyWXI
/9w1ayfoIgqySXBU8qwuEszmDHlkulnyX1/TO0GcJeLMvc6ZZLhezZnSq/hJa8lG
BdmAQjVmHzNJTIqUrhF0Kdsgvwpz9bDApPqudF4RYXHVzWFSwH1+jLInKfpijWV2
M5+SYJyrjXcugGY/kUKLn9n5W5NOg3Zd5ZX1tOMIcgx5eLfh386j56nB8R/qYkGt
6b7DUF4yjQqG6xCw5uHMclC6E4XnbgND/0sRy1IqD4tBIlwWL8n/z328Ap8ujpFT
KvcLIzPE4UQHpGuFWD5S8lh09UCiMussEeJNEQokkrtoXpAeEgprs1RuL9k0WfSq
ioj7Vd68ZVi1Wg==
-----END CERTIFICATE-----
Generated at Tue Sep 29 09:46:20 2026 by rpki-client