Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
File: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft (raw, json)
Hash identifier: vH98D2CvnZ8jgSKKueMZ8JYBNdB1zEuG4TAjrxjVPVI=
Subject key identifier: B8:44:BF:00:B7:CE:1B:36:74:34:2E:6F:C2:B1:C8:E8:42:06:CE:DA
Authority key identifier: DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
Certificate issuer: /CN=dda5a222acb99ab2398439eded7770a65ee66de6
Certificate serial: 019EBF91A3203D990BA1D7A9187A3222252A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
Manifest number: 0F56
Signing time: Sat 13 Jun 2026 06:00:53 +0000
Manifest this update: Sat 13 Jun 2026 06:00:53 +0000
Manifest next update: Sun 14 Jun 2026 06:00:53 +0000
Files and hashes: 1: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl (hash: 2M9yMj0En4Z3mQa5Zp8hUAtuSG5B8QG0OuIXqykxLQM=)
2: wnLAy32iYG4i-ODs-rBRdtaa9Ss.roa (hash: zyR18oxh6Lhv0Acyg819Q0tTDooFJ+wpThACkE37g/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:a3:20:3d:99:0b:a1:d7:a9:18:7a:32:22:25:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dda5a222acb99ab2398439eded7770a65ee66de6
Validity
Not Before: Jun 13 06:00:53 2026 GMT
Not After : Jun 14 06:00:53 2026 GMT
Subject: CN=b844bf00b7ce1b3674342e6fc2b1c8e84206ceda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e6:92:9d:0c:85:54:ff:eb:fe:72:43:6c:99:
c5:2a:ff:1c:23:e5:d2:ca:6e:59:af:70:5f:95:50:
7d:ce:9c:f1:b1:31:87:8b:4e:80:2b:c7:6f:e3:27:
e3:f5:58:ac:d9:7d:1d:12:86:a7:86:e9:79:bc:ad:
11:a7:21:d3:18:b5:ea:35:fa:0e:48:c3:f5:3f:5a:
d6:62:5d:a8:3b:5c:f9:d7:70:fe:5d:70:c1:a4:14:
1c:c0:cc:ce:3e:e5:af:f5:a4:6f:11:45:c8:34:04:
44:af:3b:b8:a4:eb:1c:06:16:74:fc:30:c2:fe:48:
62:02:cf:86:ce:28:4a:13:9d:ac:7f:f5:a6:e9:74:
e0:5c:2e:18:ae:c1:35:28:7f:d3:4e:56:ff:6c:3f:
0e:62:c1:35:1b:38:df:83:c6:b0:9d:3b:d4:de:37:
66:37:d0:c2:3e:af:c3:4d:3e:d1:36:bf:35:3f:61:
9c:af:f5:1b:55:74:4b:52:d0:aa:df:2f:6a:92:2b:
f6:0b:56:80:c4:c0:3d:73:c2:ca:1c:f4:39:4b:e7:
80:86:6c:94:1a:d3:ed:21:5f:92:f2:d9:a8:d4:5e:
44:bd:20:c3:07:e9:90:9d:c4:22:79:ec:be:4a:34:
98:04:63:c7:e9:ff:d4:5f:01:7f:e4:e1:e0:b0:f9:
9b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:44:BF:00:B7:CE:1B:36:74:34:2E:6F:C2:B1:C8:E8:42:06:CE:DA
X509v3 Authority Key Identifier:
keyid:DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:6d:c4:1f:b2:72:7e:f0:1c:28:67:90:c6:7b:f9:18:90:34:
0e:ba:81:89:ed:e6:0e:9a:ae:c7:1e:03:df:97:35:50:7a:9b:
a6:26:cd:57:97:47:5f:92:24:8c:ef:01:75:aa:73:cd:a2:5e:
fa:e9:05:5a:71:a0:2d:2b:1d:db:13:0b:b4:61:f7:43:21:3f:
48:ef:a5:72:ed:74:1d:3c:2e:48:43:0e:a6:32:59:84:ae:9b:
45:32:63:bf:7a:ab:79:5a:84:b3:b4:07:fa:5e:38:f8:a8:03:
39:c6:56:c4:bc:2a:73:24:de:d4:1d:45:ec:66:e5:3f:a5:f7:
dd:09:8c:03:8d:99:f6:84:a7:52:1f:b7:38:b3:3c:de:f5:79:
93:67:c0:c5:2f:84:b4:06:5a:63:ec:65:46:33:6e:6c:86:87:
2c:7c:de:11:68:e4:34:b1:b0:2a:68:aa:8d:36:fe:2a:56:0e:
84:d6:8b:1a:b0:23:e2:22:2f:bb:6a:4a:d2:44:b0:6a:48:34:
74:10:1b:40:01:c6:ec:fc:8d:20:b4:0c:41:77:34:07:1e:82:
0c:d5:1b:56:dc:1c:06:89:18:d4:36:7c:c4:28:cf:8d:78:26:
5f:d9:96:04:b0:9f:27:6f:1d:25:3a:ea:3e:30:1b:4c:c4:9c:
24:4a:db:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/kaMgPZkLodepGHoyIiUqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkYTVhMjIyYWNiOTlhYjIzOTg0MzllZGVkNzc3MGE2NWVl
NjZkZTYwHhcNMjYwNjEzMDYwMDUzWhcNMjYwNjE0MDYwMDUzWjAzMTEwLwYDVQQD
EyhiODQ0YmYwMGI3Y2UxYjM2NzQzNDJlNmZjMmIxYzhlODQyMDZjZWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uaSnQyFVP/r/nJDbJnFKv8cI+XS
ym5Zr3BflVB9zpzxsTGHi06AK8dv4yfj9Vis2X0dEoanhul5vK0RpyHTGLXqNfoO
SMP1P1rWYl2oO1z513D+XXDBpBQcwMzOPuWv9aRvEUXINARErzu4pOscBhZ0/DDC
/khiAs+GzihKE52sf/Wm6XTgXC4YrsE1KH/TTlb/bD8OYsE1Gzjfg8awnTvU3jdm
N9DCPq/DTT7RNr81P2Gcr/UbVXRLUtCq3y9qkiv2C1aAxMA9c8LKHPQ5S+eAhmyU
GtPtIV+S8tmo1F5EvSDDB+mQncQieey+SjSYBGPH6f/UXwF/5OHgsPmb3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhEvwC3zhs2dDQub8KxyOhCBs7aMB8GA1UdIwQY
MBaAFN2loiKsuZqyOYQ57e13cKZe5m3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2FXaUlxeTVtckk1aERudDdYZHdwbDdtYmVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9iYTRhZDItZjQwZS00ZjRiLWE2MGQt
NzUzYWIxOTY4N2Q4LzEvM2FXaUlxeTVtckk1aERudDdYZHdwbDdtYmVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9iYTRhZDItZjQwZS00ZjRiLWE2MGQtNzUzYWIxOTY4N2Q4
LzEvM2FXaUlxeTVtckk1aERudDdYZHdwbDdtYmVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHW3EH7Jy
fvAcKGeQxnv5GJA0DrqBie3mDpquxx4D35c1UHqbpibNV5dHX5IkjO8BdapzzaJe
+ukFWnGgLSsd2xMLtGH3QyE/SO+lcu10HTwuSEMOpjJZhK6bRTJjv3qreVqEs7QH
+l44+KgDOcZWxLwqcyTe1B1F7GblP6X33QmMA42Z9oSnUh+3OLM83vV5k2fAxS+E
tAZaY+xlRjNubIaHLHzeEWjkNLGwKmiqjTb+KlYOhNaLGrAj4iIvu2pK0kSwakg0
dBAbQAHG7PyNILQMQXc0Bx6CDNUbVtwcBokY1DZ8xCjPjXgmX9mWBLCfJ28dJTrq
PjAbTMScJErbRg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:35:40 2026 by rpki-client