Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
File: 3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft (raw, json)
Hash identifier: PFakKDBkNJp/DsHCgn1FPgEtIvOrkqWczWRXIjT8OIw=
Subject key identifier: 5A:05:D4:67:34:A6:D6:38:EE:09:1A:5D:CC:74:2A:BF:FC:33:37:E1
Authority key identifier: DD:6C:3D:D8:DD:EF:FD:9A:E4:C8:55:C5:F9:48:38:04:7D:C9:AD:71
Certificate issuer: /CN=dd6c3dd8ddeffd9ae4c855c5f94838047dc9ad71
Certificate serial: 019CAE353A9C1CB4BB9346DBA88595DE7493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
Manifest number: 0983
Signing time: Mon 02 Mar 2026 11:00:49 +0000
Manifest this update: Mon 02 Mar 2026 11:00:49 +0000
Manifest next update: Tue 03 Mar 2026 11:00:49 +0000
Files and hashes: 1: 3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl (hash: /YcbzZ39NjIjkLKCAHjIyHQhAA73kGu6Y2vp8GmYm68=)
2: 40MGzFSmxhQmZ9z9Cr7j9kE1tv8.roa (hash: bavnt0dg+vb1MILd4J2Ncb0MCiwl3VmV6Ojco6sCOTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:3a:9c:1c:b4:bb:93:46:db:a8:85:95:de:74:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6c3dd8ddeffd9ae4c855c5f94838047dc9ad71
Validity
Not Before: Mar 2 11:00:49 2026 GMT
Not After : Mar 3 11:00:49 2026 GMT
Subject: CN=5a05d46734a6d638ee091a5dcc742abffc3337e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:89:20:eb:b9:82:93:74:db:c6:db:2c:75:d5:
13:d5:45:45:9a:78:67:31:37:24:fc:40:49:01:3b:
79:91:15:92:73:ba:cd:a6:91:5b:9c:16:75:de:40:
bd:4b:ce:e6:83:0c:08:c7:19:de:ed:27:12:6a:e1:
6e:98:20:24:24:92:cd:cc:c2:20:0b:2e:f7:17:88:
f0:40:da:20:cd:ac:fc:90:52:68:66:25:82:4b:0b:
9d:78:ad:06:c4:e0:a9:d5:37:37:9b:cb:ad:5d:b1:
dd:cd:b7:9d:0e:60:3f:2e:55:b2:1d:78:98:92:93:
ea:a1:e8:ab:eb:b1:84:8e:0a:7b:f3:f2:63:45:3c:
ed:6d:84:52:ad:f1:8f:05:1c:dc:f8:64:26:0e:55:
a3:fa:95:2f:e3:72:a5:72:e6:b5:1d:f5:40:54:55:
5f:0a:d9:f3:2c:b4:df:5d:21:38:86:13:a9:42:f4:
e2:03:70:01:1b:7e:9e:e0:f0:1b:53:53:2b:1e:f3:
c6:1e:4c:41:05:57:1d:59:d9:32:b4:6d:f9:68:dd:
5e:df:29:e5:59:bd:22:86:00:5e:ad:40:8a:58:5e:
a6:50:c2:6c:68:d3:94:bd:0e:f7:5f:75:bc:7c:76:
7b:1a:c7:4f:c4:24:8a:ef:5b:f2:11:20:1d:ed:e8:
5a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:05:D4:67:34:A6:D6:38:EE:09:1A:5D:CC:74:2A:BF:FC:33:37:E1
X509v3 Authority Key Identifier:
keyid:DD:6C:3D:D8:DD:EF:FD:9A:E4:C8:55:C5:F9:48:38:04:7D:C9:AD:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:cd:e2:95:6f:5b:a9:c8:5b:b9:73:d9:c0:b5:3b:0b:17:8f:
bd:8d:f5:22:27:ab:42:ae:a0:31:22:b5:cc:5d:b2:d9:37:27:
ad:4d:e4:5b:eb:4e:a7:a1:d4:c0:df:8e:c9:90:b0:8f:13:55:
be:fa:6e:4e:de:e5:e3:fd:a6:e8:8b:1e:2b:a4:fe:70:8a:52:
29:08:9e:68:46:12:51:e7:ac:45:4d:a4:b4:5b:41:db:ac:7c:
2c:a6:83:b6:37:5f:73:33:86:69:d6:e5:a2:bd:b6:1a:66:5e:
ba:f5:bb:f4:47:38:9f:66:19:fb:08:ce:34:38:2c:f5:ea:92:
7b:80:98:95:64:5b:e2:8b:66:66:4e:58:8e:f5:3b:e8:38:25:
9d:29:61:78:61:63:3d:c0:af:a5:57:21:94:db:e1:50:7e:2e:
5e:10:bd:92:a0:22:62:21:61:d8:9b:b5:d9:f7:a2:cb:0f:44:
34:13:2f:18:ae:da:f7:36:9f:65:3e:db:0b:90:09:4a:bb:98:
ef:36:9e:3e:59:84:a4:4a:f0:ba:2e:48:12:3a:29:d3:73:87:
be:0c:e5:bc:b5:fa:6d:db:6f:e6:1d:70:83:91:6b:f2:7f:67:
ea:56:26:04:b1:66:5c:ce:31:7a:c8:aa:7d:56:11:c7:24:8b:
f9:96:87:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNTqcHLS7k0bbqIWV3nSTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNmMzZGQ4ZGRlZmZkOWFlNGM4NTVjNWY5NDgzODA0N2Rj
OWFkNzEwHhcNMjYwMzAyMTEwMDQ5WhcNMjYwMzAzMTEwMDQ5WjAzMTEwLwYDVQQD
Eyg1YTA1ZDQ2NzM0YTZkNjM4ZWUwOTFhNWRjYzc0MmFiZmZjMzMzN2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYkg67mCk3TbxtssddUT1UVFmnhn
MTck/EBJATt5kRWSc7rNppFbnBZ13kC9S87mgwwIxxne7ScSauFumCAkJJLNzMIg
Cy73F4jwQNogzaz8kFJoZiWCSwudeK0GxOCp1Tc3m8utXbHdzbedDmA/LlWyHXiY
kpPqoeir67GEjgp78/JjRTztbYRSrfGPBRzc+GQmDlWj+pUv43Klcua1HfVAVFVf
CtnzLLTfXSE4hhOpQvTiA3ABG36e4PAbU1MrHvPGHkxBBVcdWdkytG35aN1e3ynl
Wb0ihgBerUCKWF6mUMJsaNOUvQ73X3W8fHZ7GsdPxCSK71vyESAd7ehaAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFoF1Gc0ptY47gkaXcx0Kr/8MzfhMB8GA1UdIwQY
MBaAFN1sPdjd7/2a5MhVxflIOAR9ya1xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1d3OTJOM3ZfWnJreUZYRi1VZzRCSDNKclhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83OTM1YmItYjAxNC00MjU1LTlhMGMt
YTJiYzcyYjE1OWQ3LzEvM1d3OTJOM3ZfWnJreUZYRi1VZzRCSDNKclhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS83OTM1YmItYjAxNC00MjU1LTlhMGMtYTJiYzcyYjE1OWQ3
LzEvM1d3OTJOM3ZfWnJreUZYRi1VZzRCSDNKclhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQM3ilW9b
qchbuXPZwLU7CxePvY31IierQq6gMSK1zF2y2TcnrU3kW+tOp6HUwN+OyZCwjxNV
vvpuTt7l4/2m6IseK6T+cIpSKQieaEYSUeesRU2ktFtB26x8LKaDtjdfczOGadbl
or22GmZeuvW79Ec4n2YZ+wjONDgs9eqSe4CYlWRb4otmZk5YjvU76DglnSlheGFj
PcCvpVchlNvhUH4uXhC9kqAiYiFh2Ju12feiyw9ENBMvGK7a9zafZT7bC5AJSruY
7zaePlmEpErwui5IEjop03OHvgzlvLX6bdtv5h1wg5Fr8n9n6lYmBLFmXM4xesiq
fVYRxySL+ZaHPg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:22:35 2026 by rpki-client