Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
File: 3AOqmk_p1gxc-FOpJIIiafHMdFI.mft (raw, json)
Hash identifier: 2tKOoSxQwqpyHJGrD9YDgd2MAJmFqB5tUJ3qbkpXnmE=
Subject key identifier: E1:FF:A3:7F:D2:02:02:53:99:D5:9E:75:BD:43:A8:31:3C:28:3F:97
Authority key identifier: DC:03:AA:9A:4F:E9:D6:0C:5C:F8:53:A9:24:82:22:69:F1:CC:74:52
Certificate issuer: /CN=dc03aa9a4fe9d60c5cf853a924822269f1cc7452
Certificate serial: 019D992B6AE2681ED8B70F16EAD1997DE177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
Manifest number: 0E6D
Signing time: Fri 17 Apr 2026 02:00:52 +0000
Manifest this update: Fri 17 Apr 2026 02:00:52 +0000
Manifest next update: Sat 18 Apr 2026 02:00:52 +0000
Files and hashes: 1: 3AOqmk_p1gxc-FOpJIIiafHMdFI.crl (hash: gtU7sSVZaO77Dq/xASrZqw9FM24+8IpsI/e6OcnHaWM=)
2: 7TZLT2P2zuuPjzUmClw3kX64yXM.roa (hash: fnAcb1tn2nnIoVX24Iibq3Ab9gwSJ7WX+AekjhFSNg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:6a:e2:68:1e:d8:b7:0f:16:ea:d1:99:7d:e1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc03aa9a4fe9d60c5cf853a924822269f1cc7452
Validity
Not Before: Apr 17 02:00:52 2026 GMT
Not After : Apr 18 02:00:52 2026 GMT
Subject: CN=e1ffa37fd202025399d59e75bd43a8313c283f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:91:25:b8:f2:8c:23:c7:1b:75:09:3e:42:a8:
6a:17:37:35:b2:8f:8b:5b:55:05:67:d7:59:2b:f8:
41:65:0a:a4:b8:ac:b5:36:c9:d7:dd:78:3a:dc:6d:
13:c4:ab:fd:a3:84:d7:3a:e1:e5:11:4c:57:d1:c7:
bf:dd:08:ed:f9:72:d6:b5:e2:4a:67:88:e1:7c:a6:
ba:8d:af:79:25:c6:20:73:ce:cc:8b:f3:6c:a9:5f:
f4:03:e4:8f:30:5c:76:10:d9:e5:e6:26:66:1a:64:
cf:19:15:a2:bf:66:25:ba:d5:61:35:ec:ca:08:23:
a8:91:5b:f1:8d:7d:ef:f0:5a:51:cf:4e:d9:2d:79:
5e:55:7b:f2:60:05:78:55:dc:d1:7c:3c:e0:4b:b5:
d2:4c:2f:8f:5e:de:b3:b9:58:cd:48:31:29:67:3f:
28:06:3b:00:59:6d:5c:02:3c:10:85:ac:1f:3b:af:
e4:67:8d:d4:d6:11:1b:5f:e6:b3:43:0f:9b:ef:1b:
34:2c:0e:d4:e6:0f:57:65:80:a3:1b:ab:d0:03:41:
cf:49:bc:38:a7:e4:63:c7:c5:6e:c1:57:fd:8b:fc:
e0:40:c9:cc:2e:b7:67:09:f9:3b:9b:17:6d:1d:8b:
82:1d:68:08:d5:42:09:3c:33:e5:da:52:5f:dd:a1:
8e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FF:A3:7F:D2:02:02:53:99:D5:9E:75:BD:43:A8:31:3C:28:3F:97
X509v3 Authority Key Identifier:
keyid:DC:03:AA:9A:4F:E9:D6:0C:5C:F8:53:A9:24:82:22:69:F1:CC:74:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:6f:f3:80:e6:55:6e:84:51:26:06:ac:b6:f1:b2:32:9a:91:
b5:d6:e9:73:63:4c:f1:a2:19:55:89:0c:3e:c1:70:41:8c:f0:
5e:ba:71:39:8c:c7:18:95:21:51:ff:84:4c:36:82:8b:95:bf:
1c:94:1d:18:c0:69:cb:43:bd:a2:69:45:b9:a4:d5:3f:17:b1:
2b:eb:18:1e:73:78:db:24:3b:de:e9:94:dc:ad:6e:2f:8a:c3:
b2:90:01:73:78:7a:d0:0e:65:60:99:a3:24:9e:6b:a2:86:cd:
91:64:61:a7:34:8a:a4:31:d2:ae:73:78:1a:1b:0c:c1:f2:e4:
73:ff:20:92:40:3c:ce:25:7e:d5:fc:31:79:56:b2:ca:d7:36:
23:52:83:8d:6d:31:93:2c:f5:51:3d:24:d0:cd:ee:fc:21:0e:
73:3a:ca:56:cc:ec:ff:04:aa:cb:d1:b5:8b:f2:0e:8f:4f:4e:
3d:9d:b0:15:ff:6c:d7:fe:04:69:2d:b7:6e:89:81:86:3f:02:
87:c2:4f:c6:eb:e3:1d:0e:35:b6:ee:85:6b:02:6b:de:b5:cc:
fa:ad:32:a8:ee:5f:7d:77:49:f2:13:60:3b:0f:12:fd:a9:a0:
a4:79:e8:5d:6d:0b:a3:fa:b2:77:41:4e:91:d9:6f:8f:18:02:
61:ec:33:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK2riaB7Ytw8W6tGZfeF3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMDNhYTlhNGZlOWQ2MGM1Y2Y4NTNhOTI0ODIyMjY5ZjFj
Yzc0NTIwHhcNMjYwNDE3MDIwMDUyWhcNMjYwNDE4MDIwMDUyWjAzMTEwLwYDVQQD
EyhlMWZmYTM3ZmQyMDIwMjUzOTlkNTllNzViZDQzYTgzMTNjMjgzZjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5EluPKMI8cbdQk+QqhqFzc1so+L
W1UFZ9dZK/hBZQqkuKy1NsnX3Xg63G0TxKv9o4TXOuHlEUxX0ce/3Qjt+XLWteJK
Z4jhfKa6ja95JcYgc87Mi/NsqV/0A+SPMFx2ENnl5iZmGmTPGRWiv2YlutVhNezK
CCOokVvxjX3v8FpRz07ZLXleVXvyYAV4VdzRfDzgS7XSTC+PXt6zuVjNSDEpZz8o
BjsAWW1cAjwQhawfO6/kZ43U1hEbX+azQw+b7xs0LA7U5g9XZYCjG6vQA0HPSbw4
p+Rjx8VuwVf9i/zgQMnMLrdnCfk7mxdtHYuCHWgI1UIJPDPl2lJf3aGO0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOH/o3/SAgJTmdWedb1DqDE8KD+XMB8GA1UdIwQY
MBaAFNwDqppP6dYMXPhTqSSCImnxzHRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0FPcW1rX3AxZ3hjLUZPcEpJSWlhZkhNZEZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kODRlMWUtY2M1My00Y2MyLWFhYjkt
MWNhNzY2ZmJlZWJhLzEvM0FPcW1rX3AxZ3hjLUZPcEpJSWlhZkhNZEZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9kODRlMWUtY2M1My00Y2MyLWFhYjktMWNhNzY2ZmJlZWJh
LzEvM0FPcW1rX3AxZ3hjLUZPcEpJSWlhZkhNZEZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXm/zgOZV
boRRJgastvGyMpqRtdbpc2NM8aIZVYkMPsFwQYzwXrpxOYzHGJUhUf+ETDaCi5W/
HJQdGMBpy0O9omlFuaTVPxexK+sYHnN42yQ73umU3K1uL4rDspABc3h60A5lYJmj
JJ5roobNkWRhpzSKpDHSrnN4GhsMwfLkc/8gkkA8ziV+1fwxeVayytc2I1KDjW0x
kyz1UT0k0M3u/CEOczrKVszs/wSqy9G1i/IOj09OPZ2wFf9s1/4EaS23bomBhj8C
h8JPxuvjHQ41tu6FawJr3rXM+q0yqO5ffXdJ8hNgOw8S/amgpHnoXW0Lo/qyd0FO
kdlvjxgCYewzeQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:28:01 2026 by rpki-client