Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
File: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft (raw, json)
Hash identifier: TxKUQ2BhyOWlFlM3QXKCRU+BTnoZYzQNq3C8zUPikbc=
Subject key identifier: 12:6E:E1:6A:04:E3:1D:A9:A7:06:F0:E0:E9:4F:AA:8E:DE:BB:85:9C
Authority key identifier: DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
Certificate issuer: /CN=dda5a222acb99ab2398439eded7770a65ee66de6
Certificate serial: 01A0C70EF6F6EA64EF0620E73BCD25745BC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
Manifest number: 1063
Signing time: Tue 22 Sep 2026 03:00:41 +0000
Manifest this update: Tue 22 Sep 2026 03:00:41 +0000
Manifest next update: Wed 23 Sep 2026 03:00:41 +0000
Files and hashes: 1: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl (hash: 3S93VpJxQKfaFHAigaZS4UXltoB9vHfrZr3QFcGxT7I=)
2: wnLAy32iYG4i-ODs-rBRdtaa9Ss.roa (hash: zyR18oxh6Lhv0Acyg819Q0tTDooFJ+wpThACkE37g/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0e:f6:f6:ea:64:ef:06:20:e7:3b:cd:25:74:5b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dda5a222acb99ab2398439eded7770a65ee66de6
Validity
Not Before: Sep 22 03:00:41 2026 GMT
Not After : Sep 23 03:00:41 2026 GMT
Subject: CN=126ee16a04e31da9a706f0e0e94faa8edebb859c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e9:fc:15:f2:f2:54:f8:aa:c3:29:57:cd:69:
e1:a5:01:be:e3:89:15:ce:8e:0f:0c:3b:57:e8:13:
9d:f7:66:7e:2b:65:31:e8:24:71:d4:8c:ac:91:08:
ab:d4:11:40:47:48:b9:3a:90:eb:3b:94:eb:98:c3:
87:f8:52:a7:e0:02:c9:c1:bb:a7:d4:9b:49:d3:59:
d6:f4:c3:a5:4c:68:09:b3:4f:1d:46:49:de:79:6d:
be:e1:3d:79:c8:fe:bb:e4:7e:eb:57:48:a6:69:ea:
20:49:e5:ff:2a:f3:c8:9b:e2:b8:ff:31:a6:41:47:
38:31:b3:aa:08:b5:74:33:f5:70:81:89:7e:49:95:
85:72:ab:b9:3e:4f:39:b9:23:1d:6b:53:fb:1b:db:
f0:71:89:38:79:0e:14:e7:43:83:76:7c:f0:e9:d7:
d1:8b:6b:65:40:db:f4:1c:6a:1d:94:0f:4b:5b:ca:
f1:c1:18:0a:67:91:06:08:41:07:8e:65:71:32:9c:
6e:69:77:af:39:01:68:84:6d:7b:d1:11:2f:d4:01:
f7:f4:23:4d:97:98:37:cd:5f:17:81:ad:b1:bf:c2:
ec:4b:b9:71:4f:d0:55:59:76:4b:bb:c2:6d:a1:ad:
34:ec:ff:a7:c0:4b:fb:4a:b3:5e:0c:dd:01:3e:a6:
1b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6E:E1:6A:04:E3:1D:A9:A7:06:F0:E0:E9:4F:AA:8E:DE:BB:85:9C
X509v3 Authority Key Identifier:
keyid:DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e0:16:36:65:c2:4d:2a:35:3c:d7:c6:f9:18:2f:a9:2b:c2:
9c:36:8b:b4:b4:5d:ef:ca:71:5b:4e:22:4b:da:a3:aa:42:c7:
76:a3:4e:0f:de:0d:65:9c:f9:f0:e8:56:de:24:57:47:73:ad:
d0:1d:cc:91:70:ee:71:aa:2e:6c:5d:00:d3:b9:8e:58:ab:52:
07:d7:83:9c:2e:31:ce:5f:89:14:79:95:7a:34:98:00:b7:a1:
8c:ee:02:11:ee:32:49:7e:7c:9d:cf:7e:f5:cc:a1:e1:ce:1c:
17:7f:b6:4a:98:fd:60:95:ec:94:48:be:dd:f3:a5:bd:1c:fc:
1e:27:5f:9b:46:54:f1:2c:d4:c0:24:82:21:b3:73:04:ec:d5:
ea:53:4e:8d:d4:b6:af:f7:9f:16:6c:10:ff:8c:ac:ad:c3:54:
2b:92:ee:cf:ee:b2:50:49:f3:f0:7a:58:63:a1:c2:1d:51:a7:
cc:58:b3:2f:e4:a5:3d:58:02:5d:d3:69:b5:16:37:44:ef:31:
65:a2:47:f1:93:3e:f8:d0:63:77:a7:1d:a7:34:6a:48:e5:05:
72:e5:3b:01:d0:36:cc:07:a6:81:52:0a:ca:10:f0:a7:6d:30:
dd:77:81:02:36:b0:37:8b:dd:b7:12:c2:3a:6d:85:07:dc:3c:
74:8e:7e:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHDvb26mTvBiDnO80ldFvIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkYTVhMjIyYWNiOTlhYjIzOTg0MzllZGVkNzc3MGE2NWVl
NjZkZTYwHhcNMjYwOTIyMDMwMDQxWhcNMjYwOTIzMDMwMDQxWjAzMTEwLwYDVQQD
EygxMjZlZTE2YTA0ZTMxZGE5YTcwNmYwZTBlOTRmYWE4ZWRlYmI4NTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoun8FfLyVPiqwylXzWnhpQG+44kV
zo4PDDtX6BOd92Z+K2Ux6CRx1IyskQir1BFAR0i5OpDrO5TrmMOH+FKn4ALJwbun
1JtJ01nW9MOlTGgJs08dRkneeW2+4T15yP675H7rV0imaeogSeX/KvPIm+K4/zGm
QUc4MbOqCLV0M/VwgYl+SZWFcqu5Pk85uSMda1P7G9vwcYk4eQ4U50ODdnzw6dfR
i2tlQNv0HGodlA9LW8rxwRgKZ5EGCEEHjmVxMpxuaXevOQFohG170REv1AH39CNN
l5g3zV8Xga2xv8LsS7lxT9BVWXZLu8Jtoa007P+nwEv7SrNeDN0BPqYbfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJu4WoE4x2ppwbw4OlPqo7eu4WcMB8GA1UdIwQY
MBaAFN2loiKsuZqyOYQ57e13cKZe5m3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2FXaUlxeTVtckk1aERudDdYZHdwbDdtYmVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9iYTRhZDItZjQwZS00ZjRiLWE2MGQt
NzUzYWIxOTY4N2Q4LzEvM2FXaUlxeTVtckk1aERudDdYZHdwbDdtYmVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9iYTRhZDItZjQwZS00ZjRiLWE2MGQtNzUzYWIxOTY4N2Q4
LzEvM2FXaUlxeTVtckk1aERudDdYZHdwbDdtYmVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOuAWNmXC
TSo1PNfG+RgvqSvCnDaLtLRd78pxW04iS9qjqkLHdqNOD94NZZz58OhW3iRXR3Ot
0B3MkXDucaoubF0A07mOWKtSB9eDnC4xzl+JFHmVejSYALehjO4CEe4ySX58nc9+
9cyh4c4cF3+2Spj9YJXslEi+3fOlvRz8Hidfm0ZU8SzUwCSCIbNzBOzV6lNOjdS2
r/efFmwQ/4ysrcNUK5Luz+6yUEnz8HpYY6HCHVGnzFizL+SlPVgCXdNptRY3RO8x
ZaJH8ZM++NBjd6cdpzRqSOUFcuU7AdA2zAemgVIKyhDwp20w3XeBAjawN4vdtxLC
Om2FB9w8dI5+UA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:30:43 2026 by rpki-client