Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
File: 3UZwwqb9ciMyf2i62-bQgyK3gFg.mft (raw, json)
Hash identifier: buLH1qjIDvAtJq2q5t24ESB/4oIBI87KeC2Yb4LuuDQ=
Subject key identifier: F4:A8:76:EC:5F:56:DC:1A:85:F4:97:39:EC:C4:AF:8E:F5:9A:C5:08
Authority key identifier: DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
Certificate issuer: /CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Certificate serial: 019D9AE3B4DCFAF121E6299FBC67B138317C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
Manifest number: 17A3
Signing time: Fri 17 Apr 2026 10:01:47 +0000
Manifest this update: Fri 17 Apr 2026 10:01:47 +0000
Manifest next update: Sat 18 Apr 2026 10:01:47 +0000
Files and hashes: 1: 2dLJGNtyrJQjFI2AhS7wj2LhKrc.roa (hash: UnzgZZ3TVB6578Tog21CNFea50mTLp1x803U9EWHzmU=)
2: 3UZwwqb9ciMyf2i62-bQgyK3gFg.crl (hash: eWFyv32oNtyCtCl9u6drt08Ug01eA6Gb0raMi0yTNaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:b4:dc:fa:f1:21:e6:29:9f:bc:67:b1:38:31:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Validity
Not Before: Apr 17 10:01:47 2026 GMT
Not After : Apr 18 10:01:47 2026 GMT
Subject: CN=f4a876ec5f56dc1a85f49739ecc4af8ef59ac508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4c:cf:2e:22:a1:e6:3e:2d:2c:1c:bf:24:65:
19:44:07:25:96:69:ef:c0:1a:01:d7:d2:31:43:7a:
28:fd:6f:cc:3f:54:0e:f7:bd:fe:6f:86:08:13:36:
a5:39:bd:af:f8:f7:b3:7b:25:e1:8a:ce:04:03:29:
e8:1f:e3:74:31:38:a3:80:71:10:41:b5:13:71:72:
b0:23:b2:9a:7b:fb:b1:b2:5b:af:5a:d6:f9:53:70:
c1:49:f4:31:78:89:28:a1:ea:58:96:13:f8:4f:62:
9e:5a:9d:f9:01:a0:48:41:30:a4:55:2b:97:85:23:
4a:e3:5a:b6:b3:c6:92:47:e2:43:cb:94:59:27:31:
d1:77:81:9c:10:66:53:d6:2a:b0:9c:d0:73:ab:e7:
3b:10:4f:82:ed:93:5c:ad:e0:77:30:72:44:c1:b4:
06:97:60:6f:e0:4b:a1:d7:51:58:fd:9d:93:1a:96:
bb:05:c1:71:5d:89:c9:a7:fc:50:56:d6:e7:23:76:
2e:4b:28:30:e5:83:15:ab:5f:6f:92:4e:e2:49:6a:
79:42:b5:dc:99:98:e9:81:9b:1d:43:ae:46:71:1f:
bc:2d:c2:59:c1:57:8d:47:6d:d6:7a:bd:9a:08:e6:
9e:ee:21:12:2f:65:14:4b:56:a2:b2:bd:90:34:9b:
a9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A8:76:EC:5F:56:DC:1A:85:F4:97:39:EC:C4:AF:8E:F5:9A:C5:08
X509v3 Authority Key Identifier:
keyid:DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:db:d6:b8:09:a7:75:6d:00:50:42:5e:0c:13:12:d1:bd:52:
6b:3a:97:68:ad:79:dd:a4:33:a7:47:d2:3b:ba:b9:e1:5b:13:
c4:c2:68:7b:e1:b9:95:bf:80:54:7a:28:ad:b1:ba:e6:98:14:
ce:ef:23:2e:df:3f:4b:b3:c2:7e:b0:34:19:6b:75:73:4b:46:
87:48:82:e9:5e:90:a7:05:dc:dc:89:40:aa:74:5d:d4:be:ac:
7b:db:4a:d0:a0:94:99:4e:9f:77:f3:fc:3e:14:62:73:ac:3b:
ed:50:6c:1a:d8:5c:05:70:96:f2:ad:bc:46:fb:75:c2:d4:2f:
e8:ab:ab:29:b4:0f:72:7d:e4:05:1f:38:11:89:d1:df:c8:78:
d8:9c:15:33:8e:22:4c:5f:7e:15:be:0b:62:1a:cc:c0:cf:e2:
a0:a3:27:68:20:ee:a9:72:00:fb:64:69:9b:04:80:e2:82:fd:
51:73:fa:34:00:29:40:18:bc:51:42:10:bd:6e:ba:f0:e3:87:
1a:0a:ae:81:52:64:65:3e:ad:1c:da:35:6f:55:68:6d:ce:6b:
1b:18:0b:28:54:01:7a:18:51:dd:38:fd:f8:f0:05:80:f9:c5:
0c:6e:0a:d9:37:02:27:7b:30:ea:af:18:ba:2c:82:61:7c:d7:
91:93:51:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a47Tc+vEh5imfvGexODF8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNDY3MGMyYTZmZDcyMjMzMjdmNjhiYWRiZTZkMDgzMjJi
NzgwNTgwHhcNMjYwNDE3MTAwMTQ3WhcNMjYwNDE4MTAwMTQ3WjAzMTEwLwYDVQQD
EyhmNGE4NzZlYzVmNTZkYzFhODVmNDk3MzllY2M0YWY4ZWY1OWFjNTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UzPLiKh5j4tLBy/JGUZRAcllmnv
wBoB19IxQ3oo/W/MP1QO973+b4YIEzalOb2v+PezeyXhis4EAynoH+N0MTijgHEQ
QbUTcXKwI7Kae/uxsluvWtb5U3DBSfQxeIkooepYlhP4T2KeWp35AaBIQTCkVSuX
hSNK41q2s8aSR+JDy5RZJzHRd4GcEGZT1iqwnNBzq+c7EE+C7ZNcreB3MHJEwbQG
l2Bv4Euh11FY/Z2TGpa7BcFxXYnJp/xQVtbnI3YuSygw5YMVq19vkk7iSWp5QrXc
mZjpgZsdQ65GcR+8LcJZwVeNR23Wer2aCOae7iESL2UUS1aisr2QNJupkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSoduxfVtwahfSXOezEr471msUIMB8GA1UdIwQY
MBaAFN1GcMKm/XIjMn9outvm0IMit4BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1Vad3dxYjljaU15ZjJpNjItYlFneUszZ0ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi83YTc3ODEtOWI0Yy00ODJiLWIyOTUt
OWNkM2M2YTE4ODY2LzEvM1Vad3dxYjljaU15ZjJpNjItYlFneUszZ0ZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi83YTc3ODEtOWI0Yy00ODJiLWIyOTUtOWNkM2M2YTE4ODY2
LzEvM1Vad3dxYjljaU15ZjJpNjItYlFneUszZ0ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAddvWuAmn
dW0AUEJeDBMS0b1SazqXaK153aQzp0fSO7q54VsTxMJoe+G5lb+AVHoorbG65pgU
zu8jLt8/S7PCfrA0GWt1c0tGh0iC6V6QpwXc3IlAqnRd1L6se9tK0KCUmU6fd/P8
PhRic6w77VBsGthcBXCW8q28Rvt1wtQv6KurKbQPcn3kBR84EYnR38h42JwVM44i
TF9+Fb4LYhrMwM/ioKMnaCDuqXIA+2RpmwSA4oL9UXP6NAApQBi8UUIQvW668OOH
GgqugVJkZT6tHNo1b1Vobc5rGxgLKFQBehhR3Tj9+PAFgPnFDG4K2TcCJ3sw6q8Y
uiyCYXzXkZNRMA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:15:12 2026 by rpki-client