Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
File: 3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft (raw, json)
Hash identifier: G4He1GHRaw5hURHRTxqjnoRGDRIoTMCXLtjDr9ioU1s=
Subject key identifier: D3:2A:5A:1C:B0:2F:CA:D8:52:93:01:F4:8C:C4:45:F4:F6:46:EF:0A
Authority key identifier: DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
Certificate issuer: /CN=dd640339e59addc75fd978101b40082b5d2b8796
Certificate serial: 01A0CD47EF0F4FEA04C7056BE9B9735C1462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
Manifest number: 1254
Signing time: Wed 23 Sep 2026 08:00:38 +0000
Manifest this update: Wed 23 Sep 2026 08:00:38 +0000
Manifest next update: Thu 24 Sep 2026 08:00:38 +0000
Files and hashes: 1: 1-CWEKe6QSYYXBm5T6xMBPCzX5ao.roa (hash: OJS5BF4vZAK0MWbrUqmSMeUGDPRYp6S9E7QNpVkocFM=)
2: 3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl (hash: sDMtU0i0vl6WaIGqTHbLsGMTShbHm5gHhbe9PsvwuK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:47:ef:0f:4f:ea:04:c7:05:6b:e9:b9:73:5c:14:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd640339e59addc75fd978101b40082b5d2b8796
Validity
Not Before: Sep 23 08:00:38 2026 GMT
Not After : Sep 24 08:00:38 2026 GMT
Subject: CN=d32a5a1cb02fcad8529301f48cc445f4f646ef0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:aa:0e:b5:b6:c4:d9:1c:76:fc:cd:5a:95:e4:
38:df:ce:be:83:3c:f5:f5:ce:b8:19:74:02:0d:99:
4b:38:50:c8:ad:48:62:07:e1:2f:5a:bc:7d:1e:57:
8c:ba:59:0d:ee:25:ce:b1:e8:c6:7a:11:a3:5c:d9:
42:90:a2:11:86:a1:58:a5:62:2b:44:89:a0:d7:fe:
ac:3a:b4:db:08:8f:3c:a8:62:22:dd:ee:3e:ae:00:
5f:41:16:c5:0d:47:99:38:30:4f:18:64:05:7e:d2:
6a:5f:49:53:d6:db:55:3e:70:07:8a:14:d8:82:b3:
1a:71:3e:4d:89:9e:f5:e1:e8:c3:6d:92:3f:79:09:
df:3e:9b:64:78:65:12:f8:39:54:1b:4c:39:a3:48:
63:ca:1b:6e:3f:43:4a:fc:61:d7:f6:6f:4a:5e:f4:
fb:5f:ad:29:d9:d7:d6:2d:18:12:d3:8a:36:1b:b2:
ae:54:c1:14:d1:12:af:69:63:5c:1d:f6:ad:b1:6a:
1c:10:49:41:16:0c:93:3c:66:92:70:89:b4:7c:ad:
c3:af:83:00:70:6b:e8:7d:22:dc:82:79:8e:e0:53:
ff:60:df:c1:30:2b:c1:11:c2:11:f1:89:34:71:7f:
8f:19:52:d0:dd:32:2a:43:12:90:2d:7b:8a:b2:d9:
e3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2A:5A:1C:B0:2F:CA:D8:52:93:01:F4:8C:C4:45:F4:F6:46:EF:0A
X509v3 Authority Key Identifier:
keyid:DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ab:3a:9b:ab:0b:47:f0:77:09:b3:55:eb:41:04:ec:8f:f8:
3e:12:27:fe:62:0c:c4:28:bc:f0:64:46:1f:bb:3b:e9:f9:0a:
59:02:99:02:4e:cf:a6:90:6f:82:d5:5e:94:54:fd:3f:84:8d:
e8:d8:c2:17:03:75:e6:86:31:7f:ff:22:62:17:e2:57:93:52:
01:33:68:0f:e7:01:94:7b:85:8b:f7:87:c0:9c:dd:64:bd:a9:
f4:a7:f2:46:9e:4d:07:f9:4e:b9:b2:e4:9a:6b:f5:57:ab:c9:
4d:af:0e:cb:fb:f2:99:ae:ea:09:60:52:51:7e:80:11:29:5d:
54:45:b4:bf:24:75:76:9c:52:b0:3f:f5:31:fd:35:42:3a:fc:
7f:12:47:ef:74:53:60:40:42:02:fe:c6:90:e8:db:70:a6:85:
45:f7:6c:65:03:77:a4:5d:82:2c:e1:29:48:85:1b:06:f4:fd:
c1:77:a5:c4:a2:2e:9e:30:0a:af:6d:47:69:a2:75:be:13:20:
21:1f:e2:fe:bd:fe:70:cf:cc:15:6b:65:78:e3:ca:0c:6d:08:
83:91:5e:dc:8e:30:df:87:ba:99:7c:b8:a2:08:17:f1:37:35:
8e:c9:bb:f3:ee:28:c8:59:6c:8c:95:73:25:c2:5c:39:ec:d7:
7a:e0:17:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:24:29 2026 by rpki-client