Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
File: 3WQWapEXkwjyU6kXVhbMxoKMRGM.mft (raw, json)
Hash identifier: wn9mGWjAWhL69eRROOedZ3zRnZFiRnQ9iRp4L+yzqzM=
Subject key identifier: 09:45:A2:E6:BF:60:83:4D:F2:5F:6F:B1:53:C4:7F:60:1E:2F:EE:6F
Authority key identifier: DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
Certificate issuer: /CN=dd64166a91179308f253a9175616ccc6828c4463
Certificate serial: 019F9211BB2A8334B681DE9BB29EB38567C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
Manifest number: 0441
Signing time: Fri 24 Jul 2026 03:01:03 +0000
Manifest this update: Fri 24 Jul 2026 03:01:03 +0000
Manifest next update: Sat 25 Jul 2026 03:01:03 +0000
Files and hashes: 1: 3WQWapEXkwjyU6kXVhbMxoKMRGM.crl (hash: 8fvw9xkP7li0CeoUZ5o0c3IuPCybvhyhY5GteEO/0BI=)
2: 7KVZU4-HF-afdqG45DO8bphs_b0.roa (hash: /pVPv4rhoafLAO7wB0Dl1u6XY55uheOcI31Yt9KHyuw=)
3: 9aNckCJ7rOtyHQcJ8dWJNjrl2CE.roa (hash: wwLjfqYWdmc3gAOqi/Xh2w+ZkNRMZMyC2IBoBI+xP1o=)
4: LFUzd1MNgzFM0rTHQaW3jj6t04A.roa (hash: 9etRAJZvcq7gG7YvLNlBeV+epjf10PNNdX9cfmdp1Ts=)
5: TDzYhYR5_4J8DClbCjisUdgEPKM.roa (hash: q8MSYnLeyisCD2ZYQYaB+7DHM1ybMXAx9Du9NWSkplg=)
6: b3m-2mGJNe4d4cYhhMKL2hutIBY.roa (hash: VFpxrLor0/kl7tjGcbBC6hfUr2SDw3xOvK2qT2usj7g=)
7: kx4dGEV1WCVdxmXSMMr56j_3lbs.roa (hash: /AeCPUE+7U+x0eAWjMncSzT2rSFqU0vKvVwI+dTpmZs=)
8: rFwq2nzQIEZ5NhQDePRqPCbQDko.roa (hash: bEqUY1ErOtavF/ybp/ETS33kos0+WHhMLq9SxRm4BB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:bb:2a:83:34:b6:81:de:9b:b2:9e:b3:85:67:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd64166a91179308f253a9175616ccc6828c4463
Validity
Not Before: Jul 24 03:01:03 2026 GMT
Not After : Jul 25 03:01:03 2026 GMT
Subject: CN=0945a2e6bf60834df25f6fb153c47f601e2fee6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4d:73:e2:b1:f9:12:6d:11:f8:87:87:16:1f:
f3:96:13:66:56:ec:c5:fc:d9:c3:56:d2:ea:aa:11:
0d:72:36:12:64:ab:db:8c:da:7b:fb:40:f8:86:63:
3b:50:ea:da:be:cc:87:64:1b:81:95:ab:7e:6d:1e:
a5:a5:99:41:79:3e:d4:83:65:c1:01:cf:18:00:74:
9b:58:c4:c7:ee:ca:6b:e8:77:61:69:33:ce:75:a4:
ca:00:20:59:aa:ba:0b:87:74:3e:68:90:7c:92:4e:
fe:49:f0:14:a1:be:4d:bc:cc:03:11:77:0b:61:37:
5a:75:27:2c:ca:7f:30:11:37:55:b3:71:e4:57:bf:
c5:1b:1f:ae:d7:1f:e2:fc:e9:7a:92:4e:22:1c:b6:
36:f6:62:bf:d4:08:80:09:42:b0:84:be:04:38:38:
cb:a3:2e:40:9f:b2:2f:a7:11:f2:11:2c:90:82:2d:
62:1b:42:67:f6:b3:55:03:60:2c:89:5c:b9:09:70:
f8:3e:2d:7a:d6:b3:f8:35:ce:5a:f1:4f:24:d2:f1:
9d:b2:6a:e2:84:b1:73:98:71:b7:14:ba:5f:01:9f:
54:b4:00:2e:4f:87:7e:c7:30:77:59:b6:54:bc:db:
32:7a:09:4e:21:77:b4:5d:ac:d1:f6:f6:66:48:2b:
14:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:45:A2:E6:BF:60:83:4D:F2:5F:6F:B1:53:C4:7F:60:1E:2F:EE:6F
X509v3 Authority Key Identifier:
keyid:DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:4e:9a:ed:42:c3:60:b3:b8:ac:85:24:c2:a1:0e:b0:0d:0e:
98:03:a9:44:38:62:71:fd:25:9d:dd:6f:14:3c:b3:1d:ff:48:
0e:31:9c:9b:18:08:77:51:76:fe:d2:51:57:d0:70:c2:77:82:
dc:59:19:c2:b5:d4:aa:a7:eb:cb:bc:f5:7a:9a:d4:c9:2f:f6:
d3:bc:97:61:65:65:6c:b2:da:ca:ff:45:a8:d5:57:8b:04:e5:
83:61:24:b2:f7:4e:6e:04:7f:8a:27:e7:55:da:c1:cd:b6:3a:
e1:f8:0a:ae:03:ab:97:93:e7:8f:8e:bf:d5:87:ed:19:2d:f3:
05:2b:40:d4:4b:68:a1:d4:ae:5a:58:7c:d3:5b:f1:f0:36:f8:
5a:fb:50:90:4a:48:fc:4b:c7:dc:c7:dd:17:e5:22:41:75:b4:
c3:0e:56:42:71:29:6b:b2:a3:08:1b:8b:39:1d:b6:c2:5e:38:
6c:32:7a:ee:fa:bd:e8:88:5f:e0:c1:12:fd:69:e7:41:ae:82:
ee:6c:46:41:f4:5f:f3:f2:90:1d:47:1b:59:f8:13:50:9f:89:
f9:4a:fa:9e:e8:2a:d3:b7:c9:fc:60:f7:4a:c8:55:67:bf:e3:
64:59:97:01:a9:49:92:1b:f5:d4:24:7c:3b:26:c8:fe:5f:d9:
48:bd:ca:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:09:06 2026 by rpki-client