Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
File: 3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft (raw, json)
Hash identifier: +VJvLkltmkrSnHfpFP+KZQ1nXmQ2AZxSTfIutZ4QaJI=
Subject key identifier: 9E:C8:B4:CF:9E:6F:FF:44:83:4F:EA:CA:27:5D:28:CC:2A:3C:DA:01
Authority key identifier: DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9
Certificate issuer: /CN=dd6daef6664a7529b629f3fd65004915230f1be9
Certificate serial: 019D32634814952BF73EC67C739E67A74C26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
Manifest number: 099B
Signing time: Sat 28 Mar 2026 03:01:00 +0000
Manifest this update: Sat 28 Mar 2026 03:01:00 +0000
Manifest next update: Sun 29 Mar 2026 03:01:00 +0000
Files and hashes: 1: 3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl (hash: SXZms+UXxBTnXKX9jTfoPYfT+DLt+xUu7FLmPkdzmKA=)
2: E2bog414s7wIyFoCk8EPV__dfvA.roa (hash: V6Nnm/ymBZJD1OFNh62adA8C3xBKE7VTPboLYpn7i3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:48:14:95:2b:f7:3e:c6:7c:73:9e:67:a7:4c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6daef6664a7529b629f3fd65004915230f1be9
Validity
Not Before: Mar 28 03:01:00 2026 GMT
Not After : Mar 29 03:01:00 2026 GMT
Subject: CN=9ec8b4cf9e6fff44834feaca275d28cc2a3cda01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0a:f7:c2:d9:5b:57:ae:0f:60:50:d1:d5:4b:
93:11:e2:81:4d:7e:06:2d:be:15:d8:ac:08:05:04:
3b:8f:17:4c:aa:a5:b3:6f:b8:9b:50:57:60:24:ef:
03:f5:8c:d6:c2:78:d3:db:eb:ad:ac:36:ad:ed:9a:
e5:5b:ee:1f:01:32:b7:dd:53:5d:a0:f1:a2:90:3f:
a4:7a:cf:6e:ab:32:2b:a9:ee:01:6d:5c:37:f5:c2:
92:f8:23:18:ab:2d:ed:fe:bd:ef:9d:0a:8e:6d:ee:
78:e1:60:42:2b:1b:cb:07:77:49:ed:96:98:62:3b:
a1:30:0a:53:a2:56:37:ef:39:79:f5:d1:be:dd:17:
36:88:37:52:ac:11:52:f7:ae:ab:08:b1:68:9c:29:
e5:39:1e:5a:21:29:22:05:14:40:8e:53:3f:d6:0f:
0c:2f:d5:e1:56:f1:87:f9:bf:e2:4b:01:76:9f:c5:
4f:b6:c0:96:e1:72:6b:2a:1b:91:28:29:d6:1c:7a:
38:26:e3:80:90:b1:db:e7:91:5d:13:8d:e5:15:54:
a0:64:5f:2a:96:54:27:4b:d4:93:8c:6d:47:16:4b:
12:e8:f7:04:98:03:6a:85:29:ba:2a:23:85:90:72:
7f:81:c6:88:70:46:65:57:a8:1a:f4:85:a3:45:61:
1a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C8:B4:CF:9E:6F:FF:44:83:4F:EA:CA:27:5D:28:CC:2A:3C:DA:01
X509v3 Authority Key Identifier:
keyid:DD:6D:AE:F6:66:4A:75:29:B6:29:F3:FD:65:00:49:15:23:0F:1B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7dd42b-66ed-4c13-a336-cfe1335f27fb/1/3W2u9mZKdSm2KfP9ZQBJFSMPG-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f3:b1:6a:1f:07:a8:8e:35:c3:70:e9:9c:7f:0e:b5:1a:a3:
04:f8:35:07:47:a2:20:b6:41:5a:cf:0f:66:62:c3:5d:41:cd:
5d:90:2b:f2:be:11:e0:7a:e0:b7:0e:cf:b0:4f:e7:b6:97:cd:
7a:bb:26:1a:b8:60:e8:b9:d2:67:50:56:0b:40:73:82:a1:44:
bd:0c:1a:1f:ba:c5:77:54:5d:40:57:33:a3:04:5f:90:57:60:
cb:5f:c1:27:85:49:0a:15:8a:e2:ed:99:06:2f:8d:b5:54:e4:
a1:62:9b:91:ac:2b:ed:8c:b4:9e:f9:42:67:4e:fc:2c:3c:c1:
c8:88:22:00:3c:12:c1:33:34:d6:29:6c:fb:35:54:be:de:b7:
26:75:f1:51:05:3c:b0:9f:37:f9:ec:1e:ea:5a:6f:0a:fc:36:
da:0f:25:da:9d:c7:ad:54:af:e9:51:f8:95:28:3d:3d:3f:8b:
af:91:32:2e:f6:50:25:66:cf:c4:48:88:7a:d9:65:c3:16:7f:
2e:29:e0:b0:9d:23:3b:ed:8f:83:b9:c9:fe:a1:87:1b:1e:71:
a1:67:41:0f:3c:23:84:a8:ff:f9:9f:bd:2d:37:71:7b:53:b9:
97:ca:76:1e:d8:de:1f:32:6c:f3:59:c5:9a:1c:ff:23:67:fb:
33:7f:f4:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0yY0gUlSv3PsZ8c55np0wmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNmRhZWY2NjY0YTc1MjliNjI5ZjNmZDY1MDA0OTE1MjMw
ZjFiZTkwHhcNMjYwMzI4MDMwMTAwWhcNMjYwMzI5MDMwMTAwWjAzMTEwLwYDVQQD
Eyg5ZWM4YjRjZjllNmZmZjQ0ODM0ZmVhY2EyNzVkMjhjYzJhM2NkYTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAr3wtlbV64PYFDR1UuTEeKBTX4G
Lb4V2KwIBQQ7jxdMqqWzb7ibUFdgJO8D9YzWwnjT2+utrDat7ZrlW+4fATK33VNd
oPGikD+kes9uqzIrqe4BbVw39cKS+CMYqy3t/r3vnQqObe544WBCKxvLB3dJ7ZaY
YjuhMApTolY37zl59dG+3Rc2iDdSrBFS966rCLFonCnlOR5aISkiBRRAjlM/1g8M
L9XhVvGH+b/iSwF2n8VPtsCW4XJrKhuRKCnWHHo4JuOAkLHb55FdE43lFVSgZF8q
llQnS9STjG1HFksS6PcEmANqhSm6KiOFkHJ/gcaIcEZlV6ga9IWjRWEaBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7ItM+eb/9Eg0/qyiddKMwqPNoBMB8GA1UdIwQY
MBaAFN1trvZmSnUptinz/WUASRUjDxvpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1cydTltWktkU20yS2ZQOVpRQkpGU01QRy1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi83ZGQ0MmItNjZlZC00YzEzLWEzMzYt
Y2ZlMTMzNWYyN2ZiLzEvM1cydTltWktkU20yS2ZQOVpRQkpGU01QRy1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi83ZGQ0MmItNjZlZC00YzEzLWEzMzYtY2ZlMTMzNWYyN2Zi
LzEvM1cydTltWktkU20yS2ZQOVpRQkpGU01QRy1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIPOxah8H
qI41w3DpnH8OtRqjBPg1B0eiILZBWs8PZmLDXUHNXZAr8r4R4Hrgtw7PsE/ntpfN
ersmGrhg6LnSZ1BWC0BzgqFEvQwaH7rFd1RdQFczowRfkFdgy1/BJ4VJChWK4u2Z
Bi+NtVTkoWKbkawr7Yy0nvlCZ078LDzByIgiADwSwTM01ils+zVUvt63JnXxUQU8
sJ83+ewe6lpvCvw22g8l2p3HrVSv6VH4lSg9PT+Lr5EyLvZQJWbPxEiIetllwxZ/
LingsJ0jO+2Pg7nJ/qGHGx5xoWdBDzwjhKj/+Z+9LTdxe1O5l8p2HtjeHzJs81nF
mhz/I2f7M3/0hg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:11 2026 by rpki-client