Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
File: 3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft (raw, json)
Hash identifier: JN9iTWVvNY9jj+seCcfpESSH+hd6xJ0GZP68N0FS3o0=
Subject key identifier: 70:95:73:0F:BD:A3:04:E0:7A:DE:72:AB:69:F3:A1:3F:0A:E2:A2:C1
Authority key identifier: DD:6C:3D:D8:DD:EF:FD:9A:E4:C8:55:C5:F9:48:38:04:7D:C9:AD:71
Certificate issuer: /CN=dd6c3dd8ddeffd9ae4c855c5f94838047dc9ad71
Certificate serial: 01A1DEDEB815A12D773F3C68ED35958C9ADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
Manifest number: 0C33
Signing time: Sun 15 Nov 2026 11:01:40 +0000
Manifest this update: Sun 15 Nov 2026 11:01:40 +0000
Manifest next update: Mon 16 Nov 2026 11:01:40 +0000
Files and hashes: 1: 3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl (hash: V07N+tPmtgiLrznjqKOcp/B9R6wA/5tbvxqHhlvQbRo=)
2: 40MGzFSmxhQmZ9z9Cr7j9kE1tv8.roa (hash: bavnt0dg+vb1MILd4J2Ncb0MCiwl3VmV6Ojco6sCOTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:b8:15:a1:2d:77:3f:3c:68:ed:35:95:8c:9a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6c3dd8ddeffd9ae4c855c5f94838047dc9ad71
Validity
Not Before: Nov 15 11:01:40 2026 GMT
Not After : Nov 16 11:01:40 2026 GMT
Subject: CN=7095730fbda304e07ade72ab69f3a13f0ae2a2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:d2:34:7e:b0:b0:76:87:96:b1:43:ac:aa:
87:f8:a5:bf:a8:1b:58:5b:07:60:8c:fa:18:59:e0:
c4:28:aa:1b:d6:cf:4f:12:cd:e8:b0:11:69:b0:9a:
c7:2e:99:5e:9d:95:c9:a9:01:77:b9:4c:fa:2e:8c:
91:c8:57:37:28:88:fe:d2:e6:2e:e7:1f:85:ed:60:
a1:ad:c5:94:ca:b9:0e:f7:c3:a7:51:57:2a:1d:f7:
7f:dd:cd:54:5b:54:7f:01:4d:f7:0d:4d:13:1f:fb:
01:f7:27:af:96:cd:95:90:66:8a:6a:1e:33:2f:e3:
1e:63:7e:55:25:a5:a8:34:c1:24:d8:b9:96:0c:c2:
82:e6:81:5b:9f:b2:8c:d5:01:ec:a0:92:72:3e:e6:
c9:18:45:bb:23:30:cf:5a:34:de:80:2b:35:12:de:
05:3a:71:8c:06:1d:55:5e:88:79:6d:c8:b7:0e:e3:
03:f1:b5:7d:76:22:27:40:0f:6f:8b:94:ad:35:63:
d4:a6:e2:08:94:3a:be:2e:64:7a:af:b0:c4:3c:2f:
a5:e1:f5:63:39:fe:d2:aa:d5:8b:c5:0c:0b:2e:56:
82:6d:2e:42:c8:13:89:8d:bf:c3:36:5b:27:64:f0:
17:d8:fa:4c:75:f6:ff:5a:88:9f:20:4b:87:39:12:
e8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:95:73:0F:BD:A3:04:E0:7A:DE:72:AB:69:F3:A1:3F:0A:E2:A2:C1
X509v3 Authority Key Identifier:
keyid:DD:6C:3D:D8:DD:EF:FD:9A:E4:C8:55:C5:F9:48:38:04:7D:C9:AD:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:42:ec:3c:23:4d:f8:97:dd:19:06:23:cb:8d:10:77:db:26:
d4:1e:93:ee:4c:5a:6f:1a:e1:32:32:ca:8e:dd:22:46:03:b3:
0c:9e:f0:ed:30:9e:3c:61:e8:88:2f:84:c2:e4:21:24:af:18:
2e:c3:ce:92:25:9d:b9:00:dd:a9:c6:fa:8a:d7:f1:06:5c:d1:
8d:ed:62:1b:7f:79:61:3e:e2:c4:c0:35:9e:f3:47:33:88:ab:
07:31:35:5f:1c:b5:f7:e4:00:ec:31:5d:c1:d9:07:23:23:9c:
78:cc:72:4c:21:76:2a:ad:c6:06:29:bf:18:df:7b:ea:be:3b:
d9:ff:f6:31:1a:7a:b3:d8:d0:1f:95:1b:e9:de:4b:03:05:83:
52:d4:2d:53:47:e9:3d:74:e8:8f:21:7d:82:96:65:54:6b:78:
df:63:b2:9b:b5:b4:cd:20:a7:45:79:88:17:3d:c4:44:6b:21:
b5:76:38:24:a1:40:6d:77:41:b7:9f:f2:e9:ad:ee:0e:5a:79:
8c:52:c6:94:34:8b:5d:76:da:00:23:7d:06:64:e3:f1:ea:37:
cf:07:ad:82:10:60:44:71:b1:92:8c:c4:17:df:15:8b:25:8e:
d8:07:63:d2:0b:85:d0:c1:88:26:ef:bd:9c:3d:f8:66:b8:b7:
fd:a3:c9:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHe3rgVoS13Pzxo7TWVjJrdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNmMzZGQ4ZGRlZmZkOWFlNGM4NTVjNWY5NDgzODA0N2Rj
OWFkNzEwHhcNMjYxMTE1MTEwMTQwWhcNMjYxMTE2MTEwMTQwWjAzMTEwLwYDVQQD
Eyg3MDk1NzMwZmJkYTMwNGUwN2FkZTcyYWI2OWYzYTEzZjBhZTJhMmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCHSNH6wsHaHlrFDrKqH+KW/qBtY
WwdgjPoYWeDEKKob1s9PEs3osBFpsJrHLplenZXJqQF3uUz6LoyRyFc3KIj+0uYu
5x+F7WChrcWUyrkO98OnUVcqHfd/3c1UW1R/AU33DU0TH/sB9yevls2VkGaKah4z
L+MeY35VJaWoNMEk2LmWDMKC5oFbn7KM1QHsoJJyPubJGEW7IzDPWjTegCs1Et4F
OnGMBh1VXoh5bci3DuMD8bV9diInQA9vi5StNWPUpuIIlDq+LmR6r7DEPC+l4fVj
Of7SqtWLxQwLLlaCbS5CyBOJjb/DNlsnZPAX2PpMdfb/WoifIEuHORLoEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCVcw+9owTget5yq2nzoT8K4qLBMB8GA1UdIwQY
MBaAFN1sPdjd7/2a5MhVxflIOAR9ya1xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1d3OTJOM3ZfWnJreUZYRi1VZzRCSDNKclhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83OTM1YmItYjAxNC00MjU1LTlhMGMt
YTJiYzcyYjE1OWQ3LzEvM1d3OTJOM3ZfWnJreUZYRi1VZzRCSDNKclhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS83OTM1YmItYjAxNC00MjU1LTlhMGMtYTJiYzcyYjE1OWQ3
LzEvM1d3OTJOM3ZfWnJreUZYRi1VZzRCSDNKclhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbULsPCNN
+JfdGQYjy40Qd9sm1B6T7kxabxrhMjLKjt0iRgOzDJ7w7TCePGHoiC+EwuQhJK8Y
LsPOkiWduQDdqcb6itfxBlzRje1iG395YT7ixMA1nvNHM4irBzE1Xxy19+QA7DFd
wdkHIyOceMxyTCF2Kq3GBim/GN976r472f/2MRp6s9jQH5Ub6d5LAwWDUtQtU0fp
PXTojyF9gpZlVGt432Oym7W0zSCnRXmIFz3ERGshtXY4JKFAbXdBt5/y6a3uDlp5
jFLGlDSLXXbaACN9BmTj8eo3zwetghBgRHGxkozEF98ViyWO2Adj0guF0MGIJu+9
nD34Zri3/aPJUQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 20:55:56 2026 by rpki-client