Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
File: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft (raw, json)
Hash identifier: xP803i9tdTnelnGDDYBfeM04ZAe+XVylKkRA2SiLEG4=
Subject key identifier: A0:96:32:A7:DF:70:68:41:F9:66:41:5D:02:22:E5:52:2F:F7:A4:6A
Authority key identifier: DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
Certificate issuer: /CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Certificate serial: 019D9A3E3127961A90C82AC5809CAC8BC9C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
Manifest number: 06F7
Signing time: Fri 17 Apr 2026 07:01:00 +0000
Manifest this update: Fri 17 Apr 2026 07:01:00 +0000
Manifest next update: Sat 18 Apr 2026 07:01:00 +0000
Files and hashes: 1: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl (hash: OJ2PqFu8egpSbvJAEtY+6hBnJWEPKRQTvh18P5HssAk=)
2: HrUPMg6A27LayY1nzJVXakWil-8.roa (hash: 6oiaD9+R084Ie04PfQ9j94YYcX9VFnuvxlsXJPk70DA=)
3: LsW7E92fgqyb4h0SFoyQ1iS_A-A.roa (hash: lZdLHI5/Pom2chJvXWn7/eiTGrnfbJ5HoDaiu046MUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:31:27:96:1a:90:c8:2a:c5:80:9c:ac:8b:c9:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Validity
Not Before: Apr 17 07:01:00 2026 GMT
Not After : Apr 18 07:01:00 2026 GMT
Subject: CN=a09632a7df706841f966415d0222e5522ff7a46a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9d:91:92:df:58:00:22:70:76:62:7a:14:64:
ee:b0:0a:0f:07:2a:b9:21:08:9d:ce:c0:08:f4:8c:
60:09:b7:ac:ec:2d:79:9f:13:d3:fc:62:a0:e6:e3:
a3:02:d9:97:68:b1:aa:d9:e0:99:bf:1d:05:68:58:
fb:8c:dc:1e:0b:66:2b:e4:79:fd:5a:d2:49:9a:99:
3a:7b:80:95:7d:df:84:56:60:30:09:21:1b:99:51:
3d:58:6e:2c:3e:50:e3:73:73:ca:d6:2a:56:ae:21:
eb:11:78:57:94:a7:b2:96:be:d4:e1:70:bf:51:f3:
94:cb:8c:e3:af:b3:39:38:11:22:ad:50:2a:73:ae:
b3:de:35:8f:3c:51:cb:21:73:e5:c4:a7:20:94:03:
9c:f0:67:12:46:95:61:cb:f6:aa:1b:6d:f6:bc:d8:
b6:18:87:a3:df:8b:38:03:95:f8:a6:a1:70:15:9d:
10:9a:b6:8b:be:d8:48:e8:1d:12:32:a4:bb:5d:df:
2c:8f:f3:73:8d:d6:7b:ee:05:0a:d7:a1:dd:04:f1:
05:ed:0f:69:8e:95:42:cc:dc:23:6d:80:65:33:de:
24:08:e0:d2:bc:0c:cb:ff:11:ae:ad:18:22:68:73:
40:ea:31:f3:e7:83:1c:ae:84:2e:e4:55:b5:55:82:
39:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:96:32:A7:DF:70:68:41:F9:66:41:5D:02:22:E5:52:2F:F7:A4:6A
X509v3 Authority Key Identifier:
keyid:DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e9:33:76:b0:88:ce:0e:a6:cf:5a:cf:10:d1:10:10:c6:66:
13:27:c3:fa:c3:cf:e2:88:da:15:b5:53:c4:19:ab:5b:ed:e2:
e5:6a:ee:78:12:12:26:39:cc:3f:65:11:3c:bd:0a:21:55:85:
26:51:ee:03:ae:d7:21:6a:33:5e:51:8b:45:56:81:2e:12:d5:
ab:5f:cf:59:f3:21:d1:bc:a6:0d:47:9f:c1:24:f4:ed:80:26:
4e:83:e2:82:95:56:85:fb:00:20:54:c3:e4:c2:00:72:b2:4d:
6d:e0:c5:77:af:2b:73:d4:92:e9:0f:5c:ff:5b:8f:3f:a5:a9:
9f:38:2f:8a:13:06:2c:4a:63:e8:20:b1:d5:67:80:c6:b8:ae:
bc:36:47:98:e0:21:49:58:bc:8d:b8:37:f5:64:e8:6a:fb:95:
29:90:50:fd:26:d0:c6:68:a9:8a:3c:39:f2:6b:c3:96:21:9b:
05:44:53:fc:4c:a1:d6:71:f9:ce:c1:58:46:ee:1a:ec:82:ff:
23:29:f6:c7:51:dd:b5:0d:c5:57:c1:38:a0:86:8b:cc:28:5c:
ef:68:9f:5b:3a:d6:7d:ba:92:88:32:61:36:45:2b:7d:1c:d0:
14:49:d1:4e:19:d5:ad:1a:0a:ed:67:b2:ad:6d:30:94:51:dd:
61:5e:42:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPjEnlhqQyCrFgJysi8nCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZDk3NzBjMzA3ZWEzOTYwYzhkYTI2OGE4ODY1YTRhOWZh
NjM0YzkwHhcNMjYwNDE3MDcwMTAwWhcNMjYwNDE4MDcwMTAwWjAzMTEwLwYDVQQD
EyhhMDk2MzJhN2RmNzA2ODQxZjk2NjQxNWQwMjIyZTU1MjJmZjdhNDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ2Rkt9YACJwdmJ6FGTusAoPByq5
IQidzsAI9IxgCbes7C15nxPT/GKg5uOjAtmXaLGq2eCZvx0FaFj7jNweC2Yr5Hn9
WtJJmpk6e4CVfd+EVmAwCSEbmVE9WG4sPlDjc3PK1ipWriHrEXhXlKeylr7U4XC/
UfOUy4zjr7M5OBEirVAqc66z3jWPPFHLIXPlxKcglAOc8GcSRpVhy/aqG232vNi2
GIej34s4A5X4pqFwFZ0QmraLvthI6B0SMqS7Xd8sj/NzjdZ77gUK16HdBPEF7Q9p
jpVCzNwjbYBlM94kCODSvAzL/xGurRgiaHNA6jHz54McroQu5FW1VYI5AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCWMqffcGhB+WZBXQIi5VIv96RqMB8GA1UdIwQY
MBaAFN3ZdwwwfqOWDI2iaKiGWkqfpjTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2RsM0REQi1vNVlNamFKb3FJWmFTcC1tTk1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My80NDQ0YWItM2RhMy00MThiLWExMDUt
ZjJmZTBkMDRiZmJmLzEvM2RsM0REQi1vNVlNamFKb3FJWmFTcC1tTk1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My80NDQ0YWItM2RhMy00MThiLWExMDUtZjJmZTBkMDRiZmJm
LzEvM2RsM0REQi1vNVlNamFKb3FJWmFTcC1tTk1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgOkzdrCI
zg6mz1rPENEQEMZmEyfD+sPP4ojaFbVTxBmrW+3i5WrueBISJjnMP2URPL0KIVWF
JlHuA67XIWozXlGLRVaBLhLVq1/PWfMh0bymDUefwST07YAmToPigpVWhfsAIFTD
5MIAcrJNbeDFd68rc9SS6Q9c/1uPP6WpnzgvihMGLEpj6CCx1WeAxriuvDZHmOAh
SVi8jbg39WToavuVKZBQ/SbQxmipijw58mvDliGbBURT/Eyh1nH5zsFYRu4a7IL/
Iyn2x1HdtQ3FV8E4oIaLzChc72ifWzrWfbqSiDJhNkUrfRzQFEnRThnVrRoK7Wey
rW0wlFHdYV5Cbg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:56:19 2026 by rpki-client