Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
File: 3qSlB60VhloLLuwJ67TnVFf0AYs.mft (raw, json)
Hash identifier: neDBp1gX2Gsef3pNnPF4G2+TZWpJBFebbLmEkz+Mh+A=
Subject key identifier: AA:4E:18:DA:4C:EF:12:A2:A3:EF:EF:7B:02:00:30:CD:33:52:07:42
Authority key identifier: DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B
Certificate issuer: /CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
Certificate serial: 019D9B515294A4E00B6FA585F2E7CDF8E923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
Manifest number: 02E7
Signing time: Fri 17 Apr 2026 12:01:31 +0000
Manifest this update: Fri 17 Apr 2026 12:01:31 +0000
Manifest next update: Sat 18 Apr 2026 12:01:31 +0000
Files and hashes: 1: 3qSlB60VhloLLuwJ67TnVFf0AYs.crl (hash: CgnhNNXMWEkv/So1wqvxw17M7Dbuexh1ZAlEfk6x8zk=)
2: UcfLZ7L91GVWjLGWEYmlJV2c10o.roa (hash: uVZ/PpG6ROCuILZTxmMA8qXeD47uyabcF2INsekoGNc=)
3: n_N9Ah4Rw1Wp9Z-3SVYIy6Y0wC4.roa (hash: 2wd1XBjZMp+nPiV7QP5P7/6ushDvOEw3Nbs3DojVSrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:52:94:a4:e0:0b:6f:a5:85:f2:e7:cd:f8:e9:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dea4a507ad15865a0b2eec09ebb4e75457f4018b
Validity
Not Before: Apr 17 12:01:31 2026 GMT
Not After : Apr 18 12:01:31 2026 GMT
Subject: CN=aa4e18da4cef12a2a3efef7b020030cd33520742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d8:99:46:f7:02:07:e7:bd:4c:ef:13:68:ab:
a5:73:f5:e8:47:63:f0:5a:34:4d:e6:99:23:81:2a:
64:60:09:b7:3d:be:75:ab:17:22:5d:ac:93:1c:46:
3a:d0:3f:31:7b:f0:2e:cb:c0:1a:b2:64:63:46:57:
db:d7:bc:e2:83:2b:ab:16:8d:3e:48:75:63:70:e2:
1e:b4:5e:52:f4:ba:43:d4:23:f6:61:4f:b2:2e:49:
20:3f:02:b0:e8:be:a6:69:3b:47:01:9e:99:57:53:
e2:7f:2c:85:ef:48:4b:55:c1:97:f6:b0:69:e9:ce:
d7:cc:76:b8:28:cb:67:f0:14:b1:ea:55:67:8e:f4:
13:2b:77:74:0e:77:32:0b:c0:95:a8:01:04:1a:1b:
04:6e:87:12:3a:41:a3:a2:d4:6e:ad:6b:78:07:3e:
a9:d3:20:3f:02:3e:01:70:44:90:69:8c:d9:fb:70:
76:ed:45:ee:25:29:db:45:06:e0:e5:68:02:84:65:
b8:15:93:a3:dd:b6:87:83:50:0a:7b:ff:3b:7a:bd:
e4:c6:7e:bb:c0:6e:74:d7:50:20:5c:07:3f:fc:42:
f7:23:f5:7c:51:0d:f6:40:f4:6c:24:21:c6:71:96:
d2:59:d6:a6:c7:11:4d:45:d5:40:dc:c0:c1:73:03:
fc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4E:18:DA:4C:EF:12:A2:A3:EF:EF:7B:02:00:30:CD:33:52:07:42
X509v3 Authority Key Identifier:
keyid:DE:A4:A5:07:AD:15:86:5A:0B:2E:EC:09:EB:B4:E7:54:57:F4:01:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qSlB60VhloLLuwJ67TnVFf0AYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b491e0-1941-4273-9a25-922e224459fb/1/3qSlB60VhloLLuwJ67TnVFf0AYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ca:47:41:d0:cb:e1:92:17:9b:4f:b2:ce:5b:d4:72:5f:db:
2f:8a:13:53:56:36:7e:ef:93:38:2b:08:1d:21:eb:4f:83:63:
df:cf:1c:49:31:be:74:13:64:73:35:53:ec:da:cc:cb:77:2d:
c2:af:b4:ea:9b:e3:7a:1b:c7:4c:b1:d0:e0:2c:5e:e2:a9:3e:
da:84:60:15:96:e7:44:73:31:fe:51:3e:c2:22:45:87:b9:da:
38:6a:06:c7:aa:68:08:a4:a7:3d:a6:56:67:e3:d9:d0:f0:d1:
39:50:5b:2f:2e:33:76:5e:68:33:e0:05:d5:6e:3c:d4:fe:27:
98:28:57:4b:4a:b2:0e:0b:16:a9:93:05:b4:ef:76:7f:1c:16:
cb:e2:d4:59:17:5c:ab:36:ec:82:2a:f6:70:52:56:5c:77:5a:
0d:cd:de:a0:f1:43:2d:c8:f5:2d:a2:44:69:a9:7c:1a:e2:a0:
61:d4:10:65:db:46:df:a7:27:c7:8f:ff:03:92:b0:74:2b:f3:
a5:2d:50:26:72:e7:cc:ca:64:e4:c3:cf:58:62:ed:7f:e9:0b:
2c:59:da:24:0b:7a:37:17:49:65:f3:9b:63:b8:39:d7:46:70:
a7:05:01:5a:c4:aa:09:a3:83:16:e1:f0:cb:1f:54:e3:d3:b4:
92:8b:87:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUVKUpOALb6WF8ufN+OkjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYTRhNTA3YWQxNTg2NWEwYjJlZWMwOWViYjRlNzU0NTdm
NDAxOGIwHhcNMjYwNDE3MTIwMTMxWhcNMjYwNDE4MTIwMTMxWjAzMTEwLwYDVQQD
EyhhYTRlMThkYTRjZWYxMmEyYTNlZmVmN2IwMjAwMzBjZDMzNTIwNzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdiZRvcCB+e9TO8TaKulc/XoR2Pw
WjRN5pkjgSpkYAm3Pb51qxciXayTHEY60D8xe/Auy8AasmRjRlfb17zigyurFo0+
SHVjcOIetF5S9LpD1CP2YU+yLkkgPwKw6L6maTtHAZ6ZV1PifyyF70hLVcGX9rBp
6c7XzHa4KMtn8BSx6lVnjvQTK3d0DncyC8CVqAEEGhsEbocSOkGjotRurWt4Bz6p
0yA/Aj4BcESQaYzZ+3B27UXuJSnbRQbg5WgChGW4FZOj3baHg1AKe/87er3kxn67
wG5011AgXAc//EL3I/V8UQ32QPRsJCHGcZbSWdamxxFNRdVA3MDBcwP84wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpOGNpM7xKio+/vewIAMM0zUgdCMB8GA1UdIwQY
MBaAFN6kpQetFYZaCy7sCeu051RX9AGLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3FTbEI2MFZobG9MTHV3SjY3VG5WRmYwQVlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iNDkxZTAtMTk0MS00MjczLTlhMjUt
OTIyZTIyNDQ1OWZiLzEvM3FTbEI2MFZobG9MTHV3SjY3VG5WRmYwQVlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9iNDkxZTAtMTk0MS00MjczLTlhMjUtOTIyZTIyNDQ1OWZi
LzEvM3FTbEI2MFZobG9MTHV3SjY3VG5WRmYwQVlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe8pHQdDL
4ZIXm0+yzlvUcl/bL4oTU1Y2fu+TOCsIHSHrT4Nj388cSTG+dBNkczVT7NrMy3ct
wq+06pvjehvHTLHQ4Cxe4qk+2oRgFZbnRHMx/lE+wiJFh7naOGoGx6poCKSnPaZW
Z+PZ0PDROVBbLy4zdl5oM+AF1W481P4nmChXS0qyDgsWqZMFtO92fxwWy+LUWRdc
qzbsgir2cFJWXHdaDc3eoPFDLcj1LaJEaal8GuKgYdQQZdtG36cnx4//A5KwdCvz
pS1QJnLnzMpk5MPPWGLtf+kLLFnaJAt6NxdJZfObY7g510ZwpwUBWsSqCaODFuHw
yx9U49O0kouH/g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:14:51 2026 by rpki-client