Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
File: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft (raw, json)
Hash identifier: aYE8ejcDDskTj+Y7xirvKAVF+a4MOYmNd0RUFsibR2w=
Subject key identifier: 10:BF:E2:C9:D1:4E:A2:B0:21:6F:C5:4A:2B:FA:1B:C8:25:89:CA:96
Authority key identifier: DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
Certificate issuer: /CN=dda5a222acb99ab2398439eded7770a65ee66de6
Certificate serial: 019D26283A15E9ED967D021567CF3BF2668D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
Manifest number: 0E82
Signing time: Wed 25 Mar 2026 18:01:03 +0000
Manifest this update: Wed 25 Mar 2026 18:01:03 +0000
Manifest next update: Thu 26 Mar 2026 18:01:03 +0000
Files and hashes: 1: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl (hash: 2gMvFIjJE9AoWx70r1O8b7g7klqa3px7krGuybKtmoo=)
2: wnLAy32iYG4i-ODs-rBRdtaa9Ss.roa (hash: zyR18oxh6Lhv0Acyg819Q0tTDooFJ+wpThACkE37g/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:3a:15:e9:ed:96:7d:02:15:67:cf:3b:f2:66:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dda5a222acb99ab2398439eded7770a65ee66de6
Validity
Not Before: Mar 25 18:01:03 2026 GMT
Not After : Mar 26 18:01:03 2026 GMT
Subject: CN=10bfe2c9d14ea2b0216fc54a2bfa1bc82589ca96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f6:af:fd:5a:5d:fb:6e:52:64:ee:db:80:ed:
9c:b2:3d:e2:b6:4b:23:6a:3c:2b:ec:43:8b:21:59:
20:97:82:0c:ac:e3:ac:c8:dc:c3:c1:c2:b2:9b:56:
c4:e1:19:35:10:d4:a0:0f:54:a3:22:48:1e:ca:a4:
a8:f9:86:31:68:18:6d:c6:3e:b1:41:b4:b5:b8:28:
02:16:50:28:76:5d:bd:d5:d9:d3:72:df:68:51:db:
aa:ba:d3:ca:0a:5d:5a:43:06:d5:80:38:b7:44:87:
7a:aa:1b:33:42:37:8d:f1:8b:cc:14:46:14:e2:20:
25:cb:d7:0f:80:d3:d2:9a:28:ef:6f:24:43:9c:27:
47:33:e2:e3:7b:cd:a2:a9:ab:d0:b9:16:ae:d5:99:
e9:20:a3:95:53:d2:25:ce:92:76:c0:b7:d9:53:26:
b4:90:bf:62:e0:12:c5:65:d2:f6:ba:bb:12:15:eb:
15:72:ff:45:86:d4:a0:ac:5b:ca:66:ef:e7:c1:37:
7b:49:8c:ed:4d:e5:31:b3:20:35:93:aa:4d:fe:51:
7a:dc:9b:52:a1:4c:e0:9e:2e:34:54:5b:23:82:cf:
fe:74:0c:6b:cc:fb:0f:b8:bc:56:29:8e:49:00:d3:
58:79:5e:e8:f1:d8:f9:6b:9f:c3:5f:d9:5a:5d:e3:
44:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BF:E2:C9:D1:4E:A2:B0:21:6F:C5:4A:2B:FA:1B:C8:25:89:CA:96
X509v3 Authority Key Identifier:
keyid:DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f8:ae:87:6c:75:51:31:4b:b9:4b:f9:75:67:83:a8:07:12:
e9:fd:14:2e:f5:c8:fd:d0:4e:82:2c:3c:c6:c4:25:8a:99:ad:
02:b3:ef:e7:f6:3e:cf:33:71:54:b8:33:a7:74:25:c9:9d:b6:
a4:29:42:f7:74:fc:b2:9f:88:ae:cc:95:a5:2b:64:fa:99:e5:
00:f0:97:99:9b:fe:bb:eb:f3:2e:28:bf:a9:27:07:72:c9:8e:
e0:f0:18:82:35:83:5d:45:de:37:fa:08:b2:c5:e7:21:ee:59:
6f:83:39:a9:3b:d8:45:3b:2a:89:e5:8f:65:47:c2:de:f9:29:
5b:54:74:dc:e5:69:02:cf:82:4c:4b:97:43:3b:6e:88:41:e3:
63:64:9d:0d:7d:fc:2b:4a:bc:92:fd:b6:53:f3:ba:66:b8:29:
dc:4c:fb:5d:de:77:9f:b7:fc:6f:e8:4d:c3:99:18:47:c1:90:
8a:a2:0a:09:cc:ac:07:27:ab:5e:85:f4:4b:73:89:36:6d:e5:
66:ca:8a:0c:38:6a:6a:b1:d5:85:52:f4:d1:a9:eb:8c:ac:b9:
38:f4:c2:04:ce:8c:94:b2:e0:42:01:7a:87:4f:67:c0:7e:b1:
36:65:41:00:64:78:7c:e8:f2:df:e6:15:f3:cb:cc:a9:5c:0d:
53:30:ab:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKDoV6e2WfQIVZ8878maNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkYTVhMjIyYWNiOTlhYjIzOTg0MzllZGVkNzc3MGE2NWVl
NjZkZTYwHhcNMjYwMzI1MTgwMTAzWhcNMjYwMzI2MTgwMTAzWjAzMTEwLwYDVQQD
EygxMGJmZTJjOWQxNGVhMmIwMjE2ZmM1NGEyYmZhMWJjODI1ODljYTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfav/Vpd+25SZO7bgO2csj3itksj
ajwr7EOLIVkgl4IMrOOsyNzDwcKym1bE4Rk1ENSgD1SjIkgeyqSo+YYxaBhtxj6x
QbS1uCgCFlAodl291dnTct9oUduqutPKCl1aQwbVgDi3RId6qhszQjeN8YvMFEYU
4iAly9cPgNPSmijvbyRDnCdHM+Lje82iqavQuRau1ZnpIKOVU9IlzpJ2wLfZUya0
kL9i4BLFZdL2ursSFesVcv9FhtSgrFvKZu/nwTd7SYztTeUxsyA1k6pN/lF63JtS
oUzgni40VFsjgs/+dAxrzPsPuLxWKY5JANNYeV7o8dj5a5/DX9laXeNEXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBC/4snRTqKwIW/FSiv6G8glicqWMB8GA1UdIwQY
MBaAFN2loiKsuZqyOYQ57e13cKZe5m3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2FXaUlxeTVtckk1aERudDdYZHdwbDdtYmVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9iYTRhZDItZjQwZS00ZjRiLWE2MGQt
NzUzYWIxOTY4N2Q4LzEvM2FXaUlxeTVtckk1aERudDdYZHdwbDdtYmVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9iYTRhZDItZjQwZS00ZjRiLWE2MGQtNzUzYWIxOTY4N2Q4
LzEvM2FXaUlxeTVtckk1aERudDdYZHdwbDdtYmVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMfiuh2x1
UTFLuUv5dWeDqAcS6f0ULvXI/dBOgiw8xsQlipmtArPv5/Y+zzNxVLgzp3QlyZ22
pClC93T8sp+IrsyVpStk+pnlAPCXmZv+u+vzLii/qScHcsmO4PAYgjWDXUXeN/oI
ssXnIe5Zb4M5qTvYRTsqieWPZUfC3vkpW1R03OVpAs+CTEuXQztuiEHjY2SdDX38
K0q8kv22U/O6Zrgp3Ez7Xd53n7f8b+hNw5kYR8GQiqIKCcysByerXoX0S3OJNm3l
ZsqKDDhqarHVhVL00anrjKy5OPTCBM6MlLLgQgF6h09nwH6xNmVBAGR4fOjy3+YV
88vMqVwNUzCrFg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:12 2026 by rpki-client