Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
File: 3WQWapEXkwjyU6kXVhbMxoKMRGM.mft (raw, json)
Hash identifier: yvFO0R6vYasaFXKy5iwoOAp2UBuwAMTkMygrB+02v54=
Subject key identifier: 68:D9:2E:9B:BE:AB:02:F7:83:99:AA:58:11:99:59:EB:2C:69:7B:C3
Authority key identifier: DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
Certificate issuer: /CN=dd64166a91179308f253a9175616ccc6828c4463
Certificate serial: 01A0DE3C741618143B1CCB635C45A67DFE52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
Manifest number: 04ED
Signing time: Sat 26 Sep 2026 15:01:38 +0000
Manifest this update: Sat 26 Sep 2026 15:01:38 +0000
Manifest next update: Sun 27 Sep 2026 15:01:38 +0000
Files and hashes: 1: 3WQWapEXkwjyU6kXVhbMxoKMRGM.crl (hash: tURPibb2NAy13KmlcGpDAQW3ljW17nmsMlKCzSJ3IrY=)
2: 7KVZU4-HF-afdqG45DO8bphs_b0.roa (hash: /pVPv4rhoafLAO7wB0Dl1u6XY55uheOcI31Yt9KHyuw=)
3: 9aNckCJ7rOtyHQcJ8dWJNjrl2CE.roa (hash: wwLjfqYWdmc3gAOqi/Xh2w+ZkNRMZMyC2IBoBI+xP1o=)
4: LFUzd1MNgzFM0rTHQaW3jj6t04A.roa (hash: 9etRAJZvcq7gG7YvLNlBeV+epjf10PNNdX9cfmdp1Ts=)
5: TDzYhYR5_4J8DClbCjisUdgEPKM.roa (hash: q8MSYnLeyisCD2ZYQYaB+7DHM1ybMXAx9Du9NWSkplg=)
6: b3m-2mGJNe4d4cYhhMKL2hutIBY.roa (hash: VFpxrLor0/kl7tjGcbBC6hfUr2SDw3xOvK2qT2usj7g=)
7: kx4dGEV1WCVdxmXSMMr56j_3lbs.roa (hash: /AeCPUE+7U+x0eAWjMncSzT2rSFqU0vKvVwI+dTpmZs=)
8: rFwq2nzQIEZ5NhQDePRqPCbQDko.roa (hash: bEqUY1ErOtavF/ybp/ETS33kos0+WHhMLq9SxRm4BB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:3c:74:16:18:14:3b:1c:cb:63:5c:45:a6:7d:fe:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd64166a91179308f253a9175616ccc6828c4463
Validity
Not Before: Sep 26 15:01:38 2026 GMT
Not After : Sep 27 15:01:38 2026 GMT
Subject: CN=68d92e9bbeab02f78399aa58119959eb2c697bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1c:5c:4c:84:23:f0:b6:0e:53:3a:a6:cb:0a:
b6:3a:ab:83:24:44:6f:85:5b:09:2e:af:70:f5:f4:
8e:fa:53:28:7a:82:fd:7d:23:e4:6a:c2:15:61:6a:
64:63:89:33:11:3d:93:f5:1e:e3:99:4a:10:fe:e7:
2e:bb:8d:af:65:ee:3c:25:4f:43:7b:52:6a:35:eb:
40:fa:f2:cc:c7:ef:97:5d:ec:e5:b1:55:47:c2:63:
42:1a:36:71:e5:12:10:9a:35:39:c7:3b:3d:ad:81:
60:10:02:7d:95:5e:12:e0:3b:d6:e4:39:59:75:ef:
35:98:be:32:e6:7f:63:be:8c:28:e3:47:f4:27:3f:
73:9e:42:da:b8:24:eb:9d:2a:00:a8:22:4d:cd:e5:
2f:43:20:7f:bd:11:f9:c0:31:37:6b:65:91:ce:0a:
08:20:de:28:b7:b4:e5:10:85:fc:a3:ab:85:41:6f:
11:69:3e:4d:6f:ec:72:98:74:3f:c5:54:30:92:1e:
ac:db:bb:0e:15:a5:41:35:33:ae:9d:e9:95:7b:42:
35:11:ce:c6:0d:d0:7a:7b:fc:f3:bf:fd:bc:5f:86:
0d:5f:3c:c8:df:b2:01:1b:59:39:e9:2e:90:2f:48:
cb:8d:00:4a:81:74:73:d2:12:28:2b:ea:8d:54:33:
e8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D9:2E:9B:BE:AB:02:F7:83:99:AA:58:11:99:59:EB:2C:69:7B:C3
X509v3 Authority Key Identifier:
keyid:DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a7:57:e5:42:6d:97:50:87:ec:0f:74:7f:73:48:a7:90:ec:
0e:c3:f9:68:2d:7b:ce:ae:52:1b:c8:10:80:95:9e:53:d6:3b:
4e:14:d0:dc:c6:6d:80:df:cc:36:82:03:32:9c:90:d0:e9:cb:
cd:af:da:55:51:dc:c9:f4:a7:5b:11:d8:c5:8c:be:de:ff:39:
39:88:ff:5f:14:f0:01:b8:4f:12:e7:90:dc:7f:09:bf:0a:40:
03:d0:85:f5:bc:63:d8:38:f8:85:71:19:cc:90:1a:86:44:9c:
46:9e:6b:2f:5f:42:03:f9:c0:9d:c0:90:c6:7e:4d:56:3d:99:
12:80:72:36:37:de:7b:4c:69:97:d9:05:90:6e:da:c9:67:9e:
eb:43:9a:a0:d6:cc:3a:03:5a:12:7b:aa:e4:de:e3:b6:6f:17:
23:37:97:71:33:71:e0:88:c2:69:35:77:04:54:31:ce:93:09:
fd:8f:20:5f:be:cd:60:f4:ae:28:e7:d0:c9:20:64:b6:76:9f:
64:79:ed:f7:29:98:23:7c:bc:14:71:97:eb:5b:cf:a3:14:fa:
61:42:36:b5:d6:c7:3b:49:5b:23:f3:bd:19:74:a4:02:99:70:
97:5c:96:99:c6:79:da:cf:51:fa:2a:df:ad:30:e7:71:96:b3:
d9:ec:08:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDePHQWGBQ7HMtjXEWmff5SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNjQxNjZhOTExNzkzMDhmMjUzYTkxNzU2MTZjY2M2ODI4
YzQ0NjMwHhcNMjYwOTI2MTUwMTM4WhcNMjYwOTI3MTUwMTM4WjAzMTEwLwYDVQQD
Eyg2OGQ5MmU5YmJlYWIwMmY3ODM5OWFhNTgxMTk5NTllYjJjNjk3YmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xxcTIQj8LYOUzqmywq2OquDJERv
hVsJLq9w9fSO+lMoeoL9fSPkasIVYWpkY4kzET2T9R7jmUoQ/ucuu42vZe48JU9D
e1JqNetA+vLMx++XXezlsVVHwmNCGjZx5RIQmjU5xzs9rYFgEAJ9lV4S4DvW5DlZ
de81mL4y5n9jvowo40f0Jz9znkLauCTrnSoAqCJNzeUvQyB/vRH5wDE3a2WRzgoI
IN4ot7TlEIX8o6uFQW8RaT5Nb+xymHQ/xVQwkh6s27sOFaVBNTOunemVe0I1Ec7G
DdB6e/zzv/28X4YNXzzI37IBG1k56S6QL0jLjQBKgXRz0hIoK+qNVDPoQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjZLpu+qwL3g5mqWBGZWessaXvDMB8GA1UdIwQY
MBaAFN1kFmqRF5MI8lOpF1YWzMaCjERjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1dRV2FwRVhrd2p5VTZrWFZoYk14b0tNUkdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8wYTQ4OWItOWQ5ZS00ZjZhLTg3Yzct
NzRkZTI1OGE3NmY4LzEvM1dRV2FwRVhrd2p5VTZrWFZoYk14b0tNUkdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8wYTQ4OWItOWQ5ZS00ZjZhLTg3YzctNzRkZTI1OGE3NmY4
LzEvM1dRV2FwRVhrd2p5VTZrWFZoYk14b0tNUkdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABKdX5UJt
l1CH7A90f3NIp5DsDsP5aC17zq5SG8gQgJWeU9Y7ThTQ3MZtgN/MNoIDMpyQ0OnL
za/aVVHcyfSnWxHYxYy+3v85OYj/XxTwAbhPEueQ3H8JvwpAA9CF9bxj2Dj4hXEZ
zJAahkScRp5rL19CA/nAncCQxn5NVj2ZEoByNjfee0xpl9kFkG7ayWee60OaoNbM
OgNaEnuq5N7jtm8XIzeXcTNx4IjCaTV3BFQxzpMJ/Y8gX77NYPSuKOfQySBktnaf
ZHnt9ymYI3y8FHGX61vPoxT6YUI2tdbHO0lbI/O9GXSkAplwl1yWmcZ52s9R+irf
rTDncZaz2ewI5A==
-----END CERTIFICATE-----
Generated at Sat Sep 26 18:50:52 2026 by rpki-client