Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft
File: r3WOiP6vjWcFnch4ei5fMaBqwek.mft (raw, json)
Hash identifier: 28kiNObUolbcsQId8otGsm4AlX0HQM2/JNnbmBHiUZ4=
Subject key identifier: 93:44:29:16:29:9B:6D:F4:5C:2A:7B:79:88:8D:DE:0E:7A:5E:91:64
Authority key identifier: AF:75:8E:88:FE:AF:8D:67:05:9D:C8:78:7A:2E:5F:31:A0:6A:C1:E9
Certificate issuer: /CN=af758e88feaf8d67059dc8787a2e5f31a06ac1e9
Certificate serial: 019D9A3DE4DAAFA0F80B33069E05113A12BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3WOiP6vjWcFnch4ei5fMaBqwek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft
Manifest number: 0F43
Signing time: Fri 17 Apr 2026 07:00:40 +0000
Manifest this update: Fri 17 Apr 2026 07:00:40 +0000
Manifest next update: Sat 18 Apr 2026 07:00:40 +0000
Files and hashes: 1: r3WOiP6vjWcFnch4ei5fMaBqwek.crl (hash: oxKHHimZg5/7ccE7A2VvKnsqgV1YANzcHF+fNI7kHQ4=)
2: s9paXHBMcHwPpUAhDzEk7fWyjI4.roa (hash: 6LvRMh7M/YPi7YR17wVKUzvm8pgqSzx1sR9wUzsZ/wE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3WOiP6vjWcFnch4ei5fMaBqwek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:e4:da:af:a0:f8:0b:33:06:9e:05:11:3a:12:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af758e88feaf8d67059dc8787a2e5f31a06ac1e9
Validity
Not Before: Apr 17 07:00:40 2026 GMT
Not After : Apr 18 07:00:40 2026 GMT
Subject: CN=93442916299b6df45c2a7b79888dde0e7a5e9164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f2:60:2d:36:83:79:4f:8a:71:c1:45:91:47:
3c:5e:91:a9:91:f3:27:96:92:3f:a2:81:a4:80:73:
aa:48:aa:d1:0a:6d:49:d4:57:c0:e6:f5:a5:9f:36:
27:7d:2d:79:de:01:42:4f:d0:2e:c0:f5:9f:57:a5:
64:28:70:ed:02:d6:dc:28:c3:8a:d9:49:25:fb:f9:
3b:c6:86:89:60:7d:56:e1:2a:5f:63:44:93:81:ed:
ce:24:40:e2:47:01:d8:ca:df:5e:c4:70:6a:a8:20:
67:0e:21:60:b2:48:e5:5b:a6:f8:a4:28:0b:70:e4:
3b:02:d9:04:4f:28:c7:b7:ba:97:eb:76:e4:f9:e4:
d4:7b:89:8e:71:6e:74:1d:fe:c7:0c:11:8b:64:73:
f8:61:c2:06:0d:9b:d2:95:e2:45:3b:d4:b7:85:36:
54:d3:d2:b2:37:23:cb:b1:06:ea:e7:54:44:bc:6e:
bd:6e:0a:d4:cc:f1:03:6b:2e:41:6a:5d:05:7d:50:
22:85:69:9e:bd:e5:42:84:9f:04:f4:e3:7a:b1:de:
ac:95:30:ba:df:7d:02:bb:7f:45:da:94:a3:d6:b8:
e6:b2:5e:26:5d:b3:90:df:55:67:e3:5f:10:82:fe:
fa:16:2f:70:ab:9a:55:c2:87:36:16:5a:87:05:ea:
17:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:44:29:16:29:9B:6D:F4:5C:2A:7B:79:88:8D:DE:0E:7A:5E:91:64
X509v3 Authority Key Identifier:
keyid:AF:75:8E:88:FE:AF:8D:67:05:9D:C8:78:7A:2E:5F:31:A0:6A:C1:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3WOiP6vjWcFnch4ei5fMaBqwek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a1:8f:6f:53:32:ad:73:49:ab:61:74:5e:cf:91:f7:82:3f:
df:31:bd:ca:1f:4b:e2:05:7e:67:66:6d:ac:8c:4b:19:c2:79:
90:cc:bd:79:16:ac:c6:73:fc:d9:64:66:aa:07:62:5d:a6:fa:
dd:45:1c:ef:27:ed:1d:b6:b9:92:53:ec:8f:f3:ec:fa:a6:e4:
fd:17:ef:31:83:00:5c:7c:b8:bf:63:98:9b:51:75:c2:38:25:
18:70:2e:5c:2b:3b:1f:1d:ac:68:36:ca:53:33:a5:82:79:7e:
d0:d6:12:94:72:bf:06:07:a6:78:16:2e:0e:be:70:c3:d8:c5:
46:1c:84:5a:03:60:ed:c9:ac:8a:af:a4:30:92:74:1c:71:0c:
a2:7f:68:42:b6:12:fc:32:5d:34:7b:c5:e1:c7:4f:7a:9c:d4:
8e:d2:7a:63:f9:1b:98:57:12:de:1c:c3:64:a1:08:4f:27:71:
a9:33:db:ff:e3:e8:a1:90:07:7a:1c:69:ae:93:4a:f1:55:70:
01:c7:0d:85:ba:74:51:f0:20:dc:86:55:b5:de:1b:72:ca:31:
1b:9a:ef:24:91:06:c3:17:40:ff:43:1f:cb:58:03:b0:5b:5f:
4f:43:11:78:79:18:04:43:95:b9:59:70:e2:69:b9:e6:10:3b:
40:d8:5f:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPeTar6D4CzMGngUROhK6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNzU4ZTg4ZmVhZjhkNjcwNTlkYzg3ODdhMmU1ZjMxYTA2
YWMxZTkwHhcNMjYwNDE3MDcwMDQwWhcNMjYwNDE4MDcwMDQwWjAzMTEwLwYDVQQD
Eyg5MzQ0MjkxNjI5OWI2ZGY0NWMyYTdiNzk4ODhkZGUwZTdhNWU5MTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/JgLTaDeU+KccFFkUc8XpGpkfMn
lpI/ooGkgHOqSKrRCm1J1FfA5vWlnzYnfS153gFCT9AuwPWfV6VkKHDtAtbcKMOK
2Ukl+/k7xoaJYH1W4SpfY0STge3OJEDiRwHYyt9exHBqqCBnDiFgskjlW6b4pCgL
cOQ7AtkETyjHt7qX63bk+eTUe4mOcW50Hf7HDBGLZHP4YcIGDZvSleJFO9S3hTZU
09KyNyPLsQbq51REvG69bgrUzPEDay5Bal0FfVAihWmeveVChJ8E9ON6sd6slTC6
330Cu39F2pSj1rjmsl4mXbOQ31Vn418Qgv76Fi9wq5pVwoc2FlqHBeoXtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJNEKRYpm230XCp7eYiN3g56XpFkMB8GA1UdIwQY
MBaAFK91joj+r41nBZ3IeHouXzGgasHpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjNXT2lQNnZqV2NGbmNoNGVpNWZNYUJxd2VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS81NThjMzktNzUxMC00YjYzLWFhNTct
MWUyMjMwZGYwNzQ2LzEvcjNXT2lQNnZqV2NGbmNoNGVpNWZNYUJxd2VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS81NThjMzktNzUxMC00YjYzLWFhNTctMWUyMjMwZGYwNzQ2
LzEvcjNXT2lQNnZqV2NGbmNoNGVpNWZNYUJxd2VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU6GPb1My
rXNJq2F0Xs+R94I/3zG9yh9L4gV+Z2ZtrIxLGcJ5kMy9eRasxnP82WRmqgdiXab6
3UUc7yftHba5klPsj/Ps+qbk/RfvMYMAXHy4v2OYm1F1wjglGHAuXCs7Hx2saDbK
UzOlgnl+0NYSlHK/BgemeBYuDr5ww9jFRhyEWgNg7cmsiq+kMJJ0HHEMon9oQrYS
/DJdNHvF4cdPepzUjtJ6Y/kbmFcS3hzDZKEITydxqTPb/+PooZAHehxprpNK8VVw
AccNhbp0UfAg3IZVtd4bcsoxG5rvJJEGwxdA/0Mfy1gDsFtfT0MReHkYBEOVuVlw
4mm55hA7QNhf+Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:20:12 2026 by rpki-client