Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
File: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft (raw, json)
Hash identifier: 8mH4rOuD8VC8Tic3xKVkhpfrQqz2vtVGc5wcQ6NPPOE=
Subject key identifier: D3:BF:91:BA:58:06:14:0E:8B:F4:94:B8:A3:60:D1:BB:B6:88:E2:E2
Authority key identifier: DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
Certificate issuer: /CN=dda5a222acb99ab2398439eded7770a65ee66de6
Certificate serial: 019D981891343B92A3C219FD076F3ECBCE1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
Manifest number: 0EBD
Signing time: Thu 16 Apr 2026 21:00:40 +0000
Manifest this update: Thu 16 Apr 2026 21:00:40 +0000
Manifest next update: Fri 17 Apr 2026 21:00:40 +0000
Files and hashes: 1: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl (hash: dboFhtKOnFzmlzzT2/fL17zvWwkTatAz2AAzSeY3yMo=)
2: wnLAy32iYG4i-ODs-rBRdtaa9Ss.roa (hash: zyR18oxh6Lhv0Acyg819Q0tTDooFJ+wpThACkE37g/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:91:34:3b:92:a3:c2:19:fd:07:6f:3e:cb:ce:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dda5a222acb99ab2398439eded7770a65ee66de6
Validity
Not Before: Apr 16 21:00:40 2026 GMT
Not After : Apr 17 21:00:40 2026 GMT
Subject: CN=d3bf91ba5806140e8bf494b8a360d1bbb688e2e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cb:96:86:a5:7e:97:08:88:0d:a6:62:bb:6a:
4d:55:b4:60:6e:98:94:03:c3:40:58:db:db:c4:f1:
26:d5:c5:ed:3a:4d:7f:08:0f:07:d7:cd:10:08:8c:
c5:37:4f:6f:7c:b1:09:88:ec:3a:8d:cb:30:54:40:
61:9c:2a:59:c1:81:9b:ef:7a:5b:4f:00:aa:64:66:
88:38:12:53:13:97:b2:ed:77:6e:23:03:4c:82:1d:
89:9e:2e:ea:ed:ba:af:c0:9c:bc:24:ad:00:64:3e:
d3:2e:12:c9:10:c4:70:67:cc:7f:87:6d:a7:2e:db:
48:48:48:83:b9:3e:b5:b4:21:f9:9e:8a:3e:f4:88:
3f:51:4e:a8:a1:89:2c:e4:81:a3:23:f8:49:20:8f:
1e:2e:9b:32:10:61:da:e0:eb:f5:30:f0:54:50:71:
a4:41:65:9b:e1:6d:42:f9:b1:13:73:67:18:57:32:
9b:29:0c:49:81:c6:fd:a2:42:2c:68:0a:33:36:2e:
b8:f1:52:16:e2:79:14:87:80:d6:32:af:8e:f9:24:
9e:e4:17:e9:90:fe:b9:3b:fc:0d:70:e7:5f:d5:d4:
43:83:4a:51:ab:23:92:1d:d3:a8:06:f2:52:c2:c8:
f4:63:fd:56:5c:b3:0a:49:13:71:52:ea:25:39:ba:
d4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BF:91:BA:58:06:14:0E:8B:F4:94:B8:A3:60:D1:BB:B6:88:E2:E2
X509v3 Authority Key Identifier:
keyid:DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:40:69:4b:a2:45:3a:e0:50:08:2b:d5:98:0d:30:ac:67:72:
96:8b:ff:52:81:90:1f:b7:a9:2b:50:c5:49:b7:b2:94:dc:88:
69:19:bf:c0:1a:ac:e9:8f:10:25:65:0c:75:51:82:dd:d4:44:
3d:71:f6:3d:a0:4c:ab:0d:a5:de:49:05:3d:2b:7a:7d:4a:42:
4a:ca:4c:32:9c:fc:69:c1:b7:ae:1c:9c:7a:3b:3d:5f:78:a0:
a9:83:65:5d:d1:c4:fa:1f:6b:70:39:aa:68:23:b5:e1:c0:0b:
9f:42:7b:e5:0d:09:5b:57:b6:b2:22:9a:d1:1e:3d:24:df:ca:
a5:eb:d5:74:09:38:ff:9e:d9:7c:ac:fc:ba:ec:1e:21:fb:1f:
4a:0a:a6:ec:0a:9d:84:72:b0:7f:10:b2:43:ea:76:e3:69:93:
74:4c:72:ca:64:35:2d:1c:2a:c9:34:7f:87:ca:62:6d:b2:7f:
70:b7:16:dc:05:06:87:41:4d:88:46:73:0a:80:bd:ab:97:d4:
f0:d6:0c:3b:aa:bf:0b:cc:37:c6:98:c3:81:82:27:fd:66:68:
68:3a:69:9c:ef:6b:f2:df:52:01:a0:92:57:51:fc:fe:63:21:
60:c5:16:34:8f:17:4c:39:91:30:de:6a:e3:60:0e:a8:72:24:
82:e4:a9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:45:50 2026 by rpki-client