Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
File: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft (raw, json)
Hash identifier: dj7o0SBj4ksyYACIlVr5JVLaWmdpHBEA3VDiVlQKPYg=
Subject key identifier: 71:2A:0E:18:7A:7C:49:46:49:63:09:07:04:57:85:BB:6A:67:AE:DA
Authority key identifier: DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
Certificate issuer: /CN=dda5a222acb99ab2398439eded7770a65ee66de6
Certificate serial: 019E1D599E442EEF4FE12FEAFBF0CF51877C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
Manifest number: 0F02
Signing time: Tue 12 May 2026 18:01:12 +0000
Manifest this update: Tue 12 May 2026 18:01:12 +0000
Manifest next update: Wed 13 May 2026 18:01:12 +0000
Files and hashes: 1: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl (hash: pLI5hVXd07LhiGS3gsgprKxpo+am95vqAWVOWgE4gmY=)
2: wnLAy32iYG4i-ODs-rBRdtaa9Ss.roa (hash: zyR18oxh6Lhv0Acyg819Q0tTDooFJ+wpThACkE37g/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:9e:44:2e:ef:4f:e1:2f:ea:fb:f0:cf:51:87:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dda5a222acb99ab2398439eded7770a65ee66de6
Validity
Not Before: May 12 18:01:12 2026 GMT
Not After : May 13 18:01:12 2026 GMT
Subject: CN=712a0e187a7c494649630907045785bb6a67aeda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:58:3d:70:ad:37:5e:c0:e4:14:20:36:5b:b5:
79:74:12:bf:b8:dc:8a:1b:b6:64:89:91:97:63:dd:
09:a8:21:d6:42:2c:2e:ce:c6:84:12:e0:15:c5:19:
52:fc:f1:9c:1c:df:93:b9:a0:0c:c1:4d:4c:53:d5:
86:a7:c0:b2:18:d7:88:3b:78:30:c6:10:5c:3a:42:
06:55:0f:54:c6:07:ac:5f:8a:96:60:e3:cd:10:27:
d1:6f:70:25:04:7a:bf:28:91:a2:3a:bd:27:f6:71:
2f:0b:77:0a:f4:9e:5e:44:22:ef:67:68:53:7b:4b:
76:52:5d:8a:ab:80:2a:b8:4d:b5:64:74:f0:b2:c2:
64:c0:4e:88:2f:ae:eb:da:b9:a8:72:ed:57:8c:67:
72:2b:f9:cb:76:ab:66:cc:af:ea:d0:1b:f2:6b:8b:
15:70:f3:f5:8a:49:c6:02:ad:31:a5:93:06:c9:b5:
2b:67:4b:44:00:55:18:1f:5a:99:cb:24:f3:6d:a1:
27:3f:f1:35:6a:ad:dd:72:e7:ba:16:5d:7c:d4:cc:
64:74:a5:b4:f5:7e:93:91:9a:06:40:c8:5e:28:a9:
a0:29:44:3f:5e:97:a6:f1:6b:a5:1e:b1:0e:b9:7e:
5c:d3:77:1e:cc:cc:05:53:2c:60:36:05:15:5e:8b:
43:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2A:0E:18:7A:7C:49:46:49:63:09:07:04:57:85:BB:6A:67:AE:DA
X509v3 Authority Key Identifier:
keyid:DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f7:8b:3a:75:3e:57:df:0e:c2:f0:a9:79:b5:3a:1a:95:af:
f3:46:2b:ff:21:0c:85:0f:78:96:68:f2:03:88:4f:84:87:6c:
e6:3b:2c:ab:c8:3e:b8:71:85:d0:4c:5e:e2:31:0f:a5:d5:a0:
9b:7b:1e:7d:ca:dc:09:6f:e6:5e:81:15:07:54:41:d7:03:66:
7f:f9:fe:8d:fa:6f:f6:5c:b7:4c:73:8f:14:18:08:63:1b:30:
0e:81:3b:9e:6e:51:cf:07:37:a2:11:a4:49:61:f6:8e:08:49:
9c:9e:51:59:b0:9a:fb:c8:b9:d0:01:5b:31:fc:cd:50:67:c7:
bd:e2:c7:00:62:25:cb:60:f2:b5:f9:09:0e:2d:ed:a0:f6:57:
d1:31:74:2d:b5:f3:d0:9d:e2:81:5d:20:b5:23:62:b3:9f:fa:
2e:0b:03:11:06:a1:c7:38:ba:00:aa:14:1a:15:27:ea:b8:ef:
22:9f:12:76:6f:e4:f3:09:80:d0:7f:36:9d:37:29:20:9d:3e:
76:5f:a0:c4:5d:78:f3:08:c6:31:71:be:5e:b9:6e:17:4c:79:
f5:77:c4:bd:cd:ee:c6:be:97:45:3a:4e:66:6a:8e:76:91:07:
60:91:6e:6c:2c:28:5f:cf:19:2b:8c:8c:21:ca:f3:bd:7f:a8:
c5:3d:87:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:45:25 2026 by rpki-client