Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
File: 3WQWapEXkwjyU6kXVhbMxoKMRGM.mft (raw, json)
Hash identifier: BRWIkHKLQkArsFsIXVb3GeAB+qim05opTUoebcN1R3s=
Subject key identifier: 14:44:55:64:B9:77:6E:8D:FC:02:0D:1E:91:1A:3D:99:28:BF:E3:F6
Authority key identifier: DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
Certificate issuer: /CN=dd64166a91179308f253a9175616ccc6828c4463
Certificate serial: 019D2816E2042BEF7E0AFEBCB1CE34BC0A72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
Manifest number: 02FC
Signing time: Thu 26 Mar 2026 03:01:21 +0000
Manifest this update: Thu 26 Mar 2026 03:01:21 +0000
Manifest next update: Fri 27 Mar 2026 03:01:21 +0000
Files and hashes: 1: 3WQWapEXkwjyU6kXVhbMxoKMRGM.crl (hash: NO1nes/t/q6L2B6G5FviQpSynyGcW7f58N0yuPOGalI=)
2: 9GlAd--ziJn6zEERuSI1wMxCVUI.roa (hash: yW98a8lXMRGOAvXCAcelUQyydp3bl59KXdnIoFgiRQU=)
3: P3KJe-KpvIfVnSus9dYEd9IB5is.roa (hash: yzKFnPXT/yf225Fng2cCAnIlvWFQn++5Nl5/aoZu65M=)
4: b3m-2mGJNe4d4cYhhMKL2hutIBY.roa (hash: VFpxrLor0/kl7tjGcbBC6hfUr2SDw3xOvK2qT2usj7g=)
5: e4sjM1fXWk_A_ZzXaZBRZzVlSZE.roa (hash: 5c/2d20TsHc5uK5yVLQ9OB9Bt6Agm7Sts7MBlakKwT8=)
6: e5LvhMnHL2M5G3BrE94Wfd_Hw30.roa (hash: fkj3hwgOelPzkmjhksY0UuW0XF+MqihAQUzut5E2VZk=)
7: kx4dGEV1WCVdxmXSMMr56j_3lbs.roa (hash: /AeCPUE+7U+x0eAWjMncSzT2rSFqU0vKvVwI+dTpmZs=)
8: rFwq2nzQIEZ5NhQDePRqPCbQDko.roa (hash: bEqUY1ErOtavF/ybp/ETS33kos0+WHhMLq9SxRm4BB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:e2:04:2b:ef:7e:0a:fe:bc:b1:ce:34:bc:0a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd64166a91179308f253a9175616ccc6828c4463
Validity
Not Before: Mar 26 03:01:21 2026 GMT
Not After : Mar 27 03:01:21 2026 GMT
Subject: CN=14445564b9776e8dfc020d1e911a3d9928bfe3f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:97:1c:d4:4e:a9:e1:13:50:d6:eb:75:3e:f3:
98:e9:ac:4f:47:a4:66:b8:35:e1:b5:f3:d9:4f:78:
76:53:0b:b7:c2:d4:e8:15:c3:2e:48:df:59:c3:9d:
fc:fa:58:d2:44:8f:ca:30:79:37:0e:e3:d7:af:f8:
8c:25:7d:7b:ff:14:a8:f6:3e:21:f7:72:c3:db:ed:
e5:2b:c9:8d:33:ce:70:08:09:66:5c:1a:e8:6b:43:
ff:30:ae:77:c1:35:61:cb:09:28:76:b9:30:ea:2b:
b8:fd:4a:d3:d8:6c:17:03:8c:cb:84:5c:a3:04:a2:
42:a5:4e:b5:b4:0b:5a:2b:67:b4:d7:3e:1a:fd:ce:
d8:ac:d0:de:d1:95:51:91:0c:b2:f7:5b:9f:4b:96:
3d:79:b2:e2:69:8b:8b:26:e0:9e:0e:de:f4:e5:37:
17:2d:eb:86:8e:20:4b:41:7a:e7:6e:4f:48:7c:97:
2b:37:92:75:f4:53:64:95:21:3e:ee:64:30:22:8b:
1e:82:03:b9:a0:13:2a:02:c0:20:6a:34:86:df:1d:
a9:52:d4:eb:4d:06:c7:f9:df:17:2a:03:54:05:19:
83:b9:d2:81:96:07:50:10:6b:6f:79:67:66:33:f5:
ca:87:fb:b3:3d:27:2f:43:ca:ee:22:16:a1:88:86:
86:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:44:55:64:B9:77:6E:8D:FC:02:0D:1E:91:1A:3D:99:28:BF:E3:F6
X509v3 Authority Key Identifier:
keyid:DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:56:ac:64:01:97:aa:90:c2:89:e9:5a:fe:cb:67:e3:c7:fd:
a4:79:6d:0d:22:be:2f:85:9b:22:b1:86:64:41:78:2c:c5:20:
25:a9:fb:bd:60:c4:c7:80:1e:be:35:19:2c:d0:90:92:60:bc:
42:3e:40:36:84:97:eb:b1:e2:7d:a7:7d:c7:55:4a:54:05:2d:
4d:59:19:51:38:e7:e7:c3:02:14:44:71:d0:a3:aa:2d:fe:d0:
b7:ba:09:36:9d:4e:63:c3:04:93:37:b3:1d:9e:05:91:0b:7f:
95:c6:0c:72:d3:b2:e9:f8:e6:a8:1d:5c:fc:8e:f6:e1:7e:3f:
9e:57:aa:45:20:cf:9e:68:75:ea:d2:ea:5f:5f:8f:a0:e8:3c:
f5:00:0f:a2:b3:42:a9:cb:17:96:38:c8:9e:b9:46:ef:46:06:
4a:f0:02:0a:e7:89:ea:9b:66:ff:5a:2d:2a:c0:69:e3:7c:40:
6e:06:c7:a6:61:35:79:0b:e5:69:0c:0f:32:88:2d:fe:8f:92:
30:62:07:d4:c8:3e:09:13:8a:a9:fc:fb:c5:14:49:6b:d1:f9:
82:42:66:ca:1b:89:d7:68:2a:8b:f5:2b:eb:cf:0c:4b:cb:ea:
ba:0e:17:b5:b8:fb:68:b6:2a:76:87:ab:79:1e:9f:73:b6:24:
bf:43:e9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:01:47 2026 by rpki-client