Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
File: 3WQWapEXkwjyU6kXVhbMxoKMRGM.mft (raw, json)
Hash identifier: gZULEqg+BQ5wcpInnBd9weawaSS8wvS8mXmVaIS4edw=
Subject key identifier: C9:0F:26:BE:AA:AA:AD:71:EB:71:B3:9B:D4:FE:D2:AB:C7:5F:AC:9C
Authority key identifier: DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
Certificate issuer: /CN=dd64166a91179308f253a9175616ccc6828c4463
Certificate serial: 019E1C46E5AF7ECF4B976767D77B87A00902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
Manifest number: 037D
Signing time: Tue 12 May 2026 13:01:08 +0000
Manifest this update: Tue 12 May 2026 13:01:08 +0000
Manifest next update: Wed 13 May 2026 13:01:08 +0000
Files and hashes: 1: 3WQWapEXkwjyU6kXVhbMxoKMRGM.crl (hash: Ft9yGJUWreXnEtQnXj2qikZ6R/Anbo1SmdfTWi3LVyg=)
2: 6Hz-graF3A3TzKiU9TF5SPg3ZbQ.roa (hash: we1nA+m/JuF6parbhnTAu1bIwfcY90Qs5ZbrZu/N/Qk=)
3: TDzYhYR5_4J8DClbCjisUdgEPKM.roa (hash: q8MSYnLeyisCD2ZYQYaB+7DHM1ybMXAx9Du9NWSkplg=)
4: b3m-2mGJNe4d4cYhhMKL2hutIBY.roa (hash: VFpxrLor0/kl7tjGcbBC6hfUr2SDw3xOvK2qT2usj7g=)
5: e5LvhMnHL2M5G3BrE94Wfd_Hw30.roa (hash: fkj3hwgOelPzkmjhksY0UuW0XF+MqihAQUzut5E2VZk=)
6: kx4dGEV1WCVdxmXSMMr56j_3lbs.roa (hash: /AeCPUE+7U+x0eAWjMncSzT2rSFqU0vKvVwI+dTpmZs=)
7: rFwq2nzQIEZ5NhQDePRqPCbQDko.roa (hash: bEqUY1ErOtavF/ybp/ETS33kos0+WHhMLq9SxRm4BB8=)
8: u4CvbG6TDnI1kr1EXShfypgQBBY.roa (hash: fEiQJgutiQRDfdSgs+8iwYmGcoNGvto7HDp1hJif0ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:e5:af:7e:cf:4b:97:67:67:d7:7b:87:a0:09:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd64166a91179308f253a9175616ccc6828c4463
Validity
Not Before: May 12 13:01:08 2026 GMT
Not After : May 13 13:01:08 2026 GMT
Subject: CN=c90f26beaaaaad71eb71b39bd4fed2abc75fac9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:07:23:ce:e7:69:f6:c7:24:bd:f2:aa:9d:b3:
bc:b2:bf:01:72:36:92:7b:cb:ff:ce:32:9c:6c:ca:
9d:42:b7:a5:37:6b:81:1c:28:c7:d5:4f:0e:de:54:
af:6e:7c:d3:2c:3e:2c:19:00:6b:c1:d2:62:66:6f:
50:a3:db:8d:02:71:e6:91:ba:ff:c6:a7:37:bc:a0:
25:ab:e0:03:74:bb:70:50:ff:fc:7b:bb:cb:4a:7a:
60:76:ee:9c:f4:fe:e6:cc:ab:c5:0c:27:79:aa:57:
de:c7:4b:6e:07:82:e2:03:a1:5e:c2:72:3e:23:ab:
da:85:49:6d:ad:9b:40:1e:4e:10:4a:04:7e:f4:f1:
b3:cd:8e:c2:f6:e8:c7:4e:96:66:5d:83:88:0d:44:
45:85:ee:f7:4a:8e:07:0a:c0:4f:34:ab:f7:63:bb:
f0:6a:b6:d2:14:eb:b7:d4:60:3b:ce:a7:73:83:44:
81:3d:e2:82:0f:e0:9e:2e:90:4a:2e:7c:c0:ac:8c:
b2:94:33:40:41:1f:a3:b2:18:66:1b:81:f1:59:db:
74:3a:78:67:ff:0c:cd:9c:7b:6e:7b:cf:8f:2c:f7:
a4:ba:33:8f:ef:01:94:06:e2:90:41:dc:02:06:60:
93:8b:93:cc:48:50:bf:80:e2:17:e1:f4:0c:01:a0:
e2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0F:26:BE:AA:AA:AD:71:EB:71:B3:9B:D4:FE:D2:AB:C7:5F:AC:9C
X509v3 Authority Key Identifier:
keyid:DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b4:7d:b5:43:02:c7:ea:e8:a7:82:a7:35:e8:55:3c:63:02:
17:a0:c7:2f:18:9c:d4:2c:98:57:49:fb:bc:0c:16:a8:99:8d:
05:8c:81:f0:6c:38:84:bf:f8:4b:6d:37:7e:81:d6:ff:bd:05:
7d:7a:97:4c:2f:13:54:48:4f:a2:78:14:d9:7b:3a:ab:6e:64:
ed:6e:96:dc:f8:5e:d2:6c:8c:0c:dc:cd:32:2e:4d:83:14:4e:
32:6c:6f:f2:d0:2a:9c:72:e4:8d:0b:8a:87:84:14:a0:91:2a:
55:bd:e3:df:ac:5a:ff:e0:85:89:22:2a:ef:d9:04:95:28:5d:
a0:96:e7:68:00:2b:c2:5d:ed:ec:fd:9d:39:ba:c5:3d:4c:64:
d7:23:6c:66:ce:51:b7:9a:53:a7:3e:03:23:74:0a:1a:95:b0:
1d:98:f1:7d:03:b3:5f:a0:20:1d:52:80:db:b5:48:f2:07:99:
27:17:6b:4d:6f:ea:29:c8:e8:39:cb:8b:f3:51:61:ea:93:9d:
73:d2:db:a1:10:66:ab:6a:8d:ac:2c:93:ac:24:f5:bb:c3:d4:
fb:ac:3f:ad:e7:11:bb:ac:55:8d:d5:d1:de:6b:d4:28:a7:91:
23:96:a3:ec:b9:4a:d9:01:e9:8c:94:ba:36:8c:b4:d8:eb:b4:
03:7d:52:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:46 2026 by rpki-client