Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
File: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft (raw, json)
Hash identifier: oS0viKW0RsCyESAHFJKqMvo9WdPQKiZZdwgCsK6DPd8=
Subject key identifier: 45:4B:F6:8F:8A:AE:26:14:8E:65:68:68:D6:73:2D:A3:CB:B3:C4:B3
Authority key identifier: DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
Certificate issuer: /CN=df0198a7b3afdcdd7003562a0871878e238760ad
Certificate serial: 019E1EDA1BEC5FAE5AAFF975A9620954D9A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
Manifest number: 13BA
Signing time: Wed 13 May 2026 01:01:10 +0000
Manifest this update: Wed 13 May 2026 01:01:10 +0000
Manifest next update: Thu 14 May 2026 01:01:10 +0000
Files and hashes: 1: 10zWBAG3yHk6LZ2cT_OBKxWFNWM.roa (hash: 3CyCzPInmv1M2HVwGxzJQ9jqmdcvQHPMZfCVee8QVmg=)
2: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl (hash: pLMhTl9YRCydXivVFFAAeyC9HlB+Cao4T4nC+K8vh2k=)
3: K7-F8r5HaixUXPBxPks_drLfCLM.roa (hash: IxrS8dpVCynttuxgWbJEvLUTdnUOcVknWjS85DsyGnY=)
4: RubVNCawFmtSSykZF5XcDH3aXBc.roa (hash: pb4UIOlvmHSq695BiD6WHLwCWaB/NLP+RzVFb75tWfs=)
5: csf31rqb-Vtp8DxAcvND5Xzia2g.roa (hash: tIcC2hzx8VFbqFhPv8CNA+NzwFonxl1ILY4nFDsUkqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:1b:ec:5f:ae:5a:af:f9:75:a9:62:09:54:d9:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0198a7b3afdcdd7003562a0871878e238760ad
Validity
Not Before: May 13 01:01:10 2026 GMT
Not After : May 14 01:01:10 2026 GMT
Subject: CN=454bf68f8aae26148e656868d6732da3cbb3c4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:55:c0:4a:43:e9:94:85:0d:1e:ef:a8:86:12:
01:78:25:1c:7e:08:bc:4e:71:59:f9:cc:86:01:40:
b1:e9:98:d2:15:ab:d2:24:cb:ee:6b:31:94:b6:b1:
2e:b0:25:69:b9:c0:7e:20:07:c0:85:cd:32:c2:5c:
e3:94:5c:72:43:99:31:6b:e6:b1:a5:70:eb:ae:e1:
10:ad:fd:39:6c:c7:a2:de:be:6b:1b:d7:57:93:5c:
c8:cf:84:02:5e:4b:c7:3f:fd:fc:d1:c7:84:74:f9:
db:05:77:84:8b:6d:fe:52:9c:9f:ce:f9:d5:66:af:
75:a3:1c:e4:22:dd:f0:4a:ff:2f:a7:9e:52:ca:47:
b8:ca:41:48:a2:a7:c6:7d:f8:20:df:2e:4d:b3:87:
df:16:09:81:12:51:f2:09:38:08:4b:cc:bf:ee:08:
72:7d:a4:1b:da:dc:e0:ab:6c:7c:9b:c7:d6:c3:d7:
bf:ad:3d:2d:40:d7:43:32:6b:30:28:51:8c:9c:d7:
43:d7:60:c5:c4:9c:ed:72:b6:c6:e5:c0:5e:68:af:
65:e4:c8:a6:a8:60:8c:02:61:df:53:95:df:17:43:
0f:dc:eb:6d:42:ac:72:09:6b:bd:9c:6c:3f:01:15:
c0:92:70:67:61:d9:81:c4:b6:67:85:ea:dc:c4:22:
55:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4B:F6:8F:8A:AE:26:14:8E:65:68:68:D6:73:2D:A3:CB:B3:C4:B3
X509v3 Authority Key Identifier:
keyid:DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:8f:ac:84:95:83:4b:74:04:d4:18:d8:5e:bb:67:1f:d8:a1:
ba:81:f5:e0:8c:f6:c9:ef:6d:d3:36:ac:05:39:28:db:21:c3:
a2:84:33:ee:cd:68:a7:e4:0f:5f:85:52:4e:bc:c8:6e:68:0b:
fc:8f:e7:74:23:2a:4e:9b:77:c1:b0:35:9d:25:7e:aa:7b:04:
c2:fa:7f:38:b1:a0:3d:b5:2b:69:21:ee:dd:9b:e6:25:7c:f3:
30:54:d4:49:b4:d6:5f:6c:9c:a5:54:fb:cd:9d:28:dc:17:9a:
b9:97:b3:c9:56:b0:be:fc:c0:75:e5:ec:17:97:ff:6b:08:17:
32:a8:b6:ae:c4:ac:6c:2a:0b:ad:92:49:f4:df:45:7c:6f:be:
67:84:2b:c4:dd:47:9f:04:69:d3:2b:a7:08:b5:3f:b1:0e:ba:
56:b1:a0:a4:99:56:1c:c1:73:37:0a:1d:61:a1:f2:98:67:7b:
3d:5e:74:4d:63:c6:69:c0:22:29:61:f8:98:9b:59:6a:44:5b:
c6:37:0b:8b:41:4a:2e:85:29:de:44:0e:69:cc:c8:4b:15:e7:
71:4d:e9:b9:48:17:19:77:bc:fa:10:27:6c:ed:de:95:1b:c0:
03:4b:4a:50:b6:0f:69:dd:96:66:ed:e9:94:95:5a:4c:c1:7b:
7d:ee:f4:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2hvsX65ar/l1qWIJVNmnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMDE5OGE3YjNhZmRjZGQ3MDAzNTYyYTA4NzE4NzhlMjM4
NzYwYWQwHhcNMjYwNTEzMDEwMTEwWhcNMjYwNTE0MDEwMTEwWjAzMTEwLwYDVQQD
Eyg0NTRiZjY4ZjhhYWUyNjE0OGU2NTY4NjhkNjczMmRhM2NiYjNjNGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVXASkPplIUNHu+ohhIBeCUcfgi8
TnFZ+cyGAUCx6ZjSFavSJMvuazGUtrEusCVpucB+IAfAhc0ywlzjlFxyQ5kxa+ax
pXDrruEQrf05bMei3r5rG9dXk1zIz4QCXkvHP/380ceEdPnbBXeEi23+UpyfzvnV
Zq91oxzkIt3wSv8vp55Syke4ykFIoqfGffgg3y5Ns4ffFgmBElHyCTgIS8y/7ghy
faQb2tzgq2x8m8fWw9e/rT0tQNdDMmswKFGMnNdD12DFxJztcrbG5cBeaK9l5Mim
qGCMAmHfU5XfF0MP3OttQqxyCWu9nGw/ARXAknBnYdmBxLZnhercxCJVJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVL9o+KriYUjmVoaNZzLaPLs8SzMB8GA1UdIwQY
MBaAFN8BmKezr9zdcANWKghxh44jh2CtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3dHWXA3T3YzTjF3QTFZcUNIR0hqaU9IWUswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9kM2ZjYTYtZWNiNS00M2FhLThjOWQt
MGZjYzZjMzAxMWZjLzEvM3dHWXA3T3YzTjF3QTFZcUNIR0hqaU9IWUswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9kM2ZjYTYtZWNiNS00M2FhLThjOWQtMGZjYzZjMzAxMWZj
LzEvM3dHWXA3T3YzTjF3QTFZcUNIR0hqaU9IWUswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJI+shJWD
S3QE1BjYXrtnH9ihuoH14Iz2ye9t0zasBTko2yHDooQz7s1op+QPX4VSTrzIbmgL
/I/ndCMqTpt3wbA1nSV+qnsEwvp/OLGgPbUraSHu3ZvmJXzzMFTUSbTWX2ycpVT7
zZ0o3BeauZezyVawvvzAdeXsF5f/awgXMqi2rsSsbCoLrZJJ9N9FfG++Z4QrxN1H
nwRp0yunCLU/sQ66VrGgpJlWHMFzNwodYaHymGd7PV50TWPGacAiKWH4mJtZakRb
xjcLi0FKLoUp3kQOaczISxXncU3puUgXGXe8+hAnbO3elRvAA0tKULYPad2WZu3p
lJVaTMF7fe70Fg==
-----END CERTIFICATE-----
Generated at Wed May 13 08:15:20 2026 by rpki-client