Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
File: 3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft (raw, json)
Hash identifier: qLIUkSXIBByi7JiEdKIlSKuFCJu8lZTOLLw3YYcOeHI=
Subject key identifier: DF:B1:10:98:33:AA:1C:39:5A:2F:73:B6:4F:6D:33:5F:7C:9C:7E:3A
Authority key identifier: DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
Certificate issuer: /CN=dd640339e59addc75fd978101b40082b5d2b8796
Certificate serial: 019FA9AC595DDE090E07826FD290417BAF43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
Manifest number: 11BD
Signing time: Tue 28 Jul 2026 17:01:12 +0000
Manifest this update: Tue 28 Jul 2026 17:01:12 +0000
Manifest next update: Wed 29 Jul 2026 17:01:12 +0000
Files and hashes: 1: 1-CWEKe6QSYYXBm5T6xMBPCzX5ao.roa (hash: OJS5BF4vZAK0MWbrUqmSMeUGDPRYp6S9E7QNpVkocFM=)
2: 3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl (hash: 5WsdlYNIPU1YWyGr1sYgYaT76nCByHWBNXF/Ou3Kvfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:59:5d:de:09:0e:07:82:6f:d2:90:41:7b:af:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd640339e59addc75fd978101b40082b5d2b8796
Validity
Not Before: Jul 28 17:01:12 2026 GMT
Not After : Jul 29 17:01:12 2026 GMT
Subject: CN=dfb1109833aa1c395a2f73b64f6d335f7c9c7e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:57:6e:a1:f5:ef:27:ba:73:70:e3:e8:af:ba:
94:de:a7:0e:51:41:4f:07:92:80:c7:b5:fc:2c:1f:
d6:15:89:f2:03:16:bc:28:dc:c3:2b:26:26:08:f4:
5e:b6:7f:0e:47:a3:01:9a:34:30:e1:b3:19:98:f3:
b0:b1:47:e9:7a:15:01:49:a9:06:47:b6:4b:96:b0:
c4:96:0b:11:21:be:c8:3d:cc:f7:17:19:80:ed:d3:
cf:2a:87:0f:00:83:cd:1c:9f:f9:43:af:0f:3d:ec:
8a:bb:ed:91:29:e2:b8:fb:9b:4f:95:4d:db:b7:b1:
38:ac:bb:34:fe:ee:52:b5:c2:6c:66:d3:dc:cb:2c:
39:b4:36:5d:1a:ba:de:17:b2:e6:95:da:13:43:6b:
03:a9:5c:4e:4f:8e:25:a9:81:2d:ce:c9:ec:4c:73:
e9:34:1a:7e:8b:cf:2d:cd:a1:8c:fc:09:d7:59:e8:
7e:8e:a6:29:c0:67:77:8f:bf:7d:5f:dd:10:56:39:
df:e8:39:cd:3c:8c:0b:5f:14:a4:81:71:ae:34:90:
e7:1e:2e:0a:65:73:0d:68:fc:03:8f:d4:ea:b9:87:
6e:d7:d5:3c:9f:88:c0:6d:c5:1c:f0:20:09:ef:ca:
2d:1c:5c:2d:2f:bb:25:f0:a5:0c:0f:8d:be:6d:d8:
ed:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B1:10:98:33:AA:1C:39:5A:2F:73:B6:4F:6D:33:5F:7C:9C:7E:3A
X509v3 Authority Key Identifier:
keyid:DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a8:e6:53:17:c7:d5:2b:2f:28:87:1a:a5:33:55:13:91:50:
e3:fe:54:02:e6:da:b9:a7:5e:2f:d6:56:aa:c2:ed:f7:8f:6a:
98:7a:c8:08:3a:b0:98:ff:bc:03:f5:e4:23:25:83:ea:f8:68:
77:b1:93:3b:be:69:49:47:06:35:e8:52:02:05:54:cf:8d:e2:
eb:fc:63:af:44:84:2b:3d:0f:53:4c:47:a4:c9:d4:51:4b:b8:
4f:ea:26:67:ec:1c:38:8f:8a:2c:21:de:88:b9:ec:46:a1:3b:
ba:df:e8:bc:a4:d4:e8:6f:48:0b:19:ef:b4:46:42:db:41:bf:
1b:7e:fe:80:cf:fe:69:b7:1d:60:70:1b:ef:05:57:fd:38:38:
f8:bf:0a:09:dc:bf:e7:59:52:49:bc:6a:d8:7f:29:09:c3:5f:
db:e9:f0:ce:fe:b8:7d:34:5b:91:9a:5b:3e:f4:37:f0:a5:d1:
37:93:78:e6:24:86:ed:b5:8d:9a:3d:7e:43:02:50:0f:23:f3:
6a:54:c8:b8:d5:54:7a:62:ec:ca:56:82:1a:1f:a6:40:7c:cb:
68:e9:6b:7a:39:4e:c1:cf:a6:2b:fb:52:da:2d:c2:e7:2f:01:
28:0b:a0:76:1f:53:f2:d5:fb:a7:46:03:5d:36:ee:af:ab:13:
32:06:48:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+prFld3gkOB4Jv0pBBe69DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNjQwMzM5ZTU5YWRkYzc1ZmQ5NzgxMDFiNDAwODJiNWQy
Yjg3OTYwHhcNMjYwNzI4MTcwMTEyWhcNMjYwNzI5MTcwMTEyWjAzMTEwLwYDVQQD
EyhkZmIxMTA5ODMzYWExYzM5NWEyZjczYjY0ZjZkMzM1ZjdjOWM3ZTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1duofXvJ7pzcOPor7qU3qcOUUFP
B5KAx7X8LB/WFYnyAxa8KNzDKyYmCPRetn8OR6MBmjQw4bMZmPOwsUfpehUBSakG
R7ZLlrDElgsRIb7IPcz3FxmA7dPPKocPAIPNHJ/5Q68PPeyKu+2RKeK4+5tPlU3b
t7E4rLs0/u5StcJsZtPcyyw5tDZdGrreF7LmldoTQ2sDqVxOT44lqYEtzsnsTHPp
NBp+i88tzaGM/AnXWeh+jqYpwGd3j799X90QVjnf6DnNPIwLXxSkgXGuNJDnHi4K
ZXMNaPwDj9TquYdu19U8n4jAbcUc8CAJ78otHFwtL7sl8KUMD42+bdjtAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+xEJgzqhw5Wi9ztk9tM198nH46MB8GA1UdIwQY
MBaAFN1kAznlmt3HX9l4EBtACCtdK4eWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1dRRE9lV2EzY2RmMlhnUUcwQUlLMTByaDVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy83NjE2ZTUtYThjYy00NWQxLWIzZDAt
NjFiNzMzNTRhYmRiLzEvM1dRRE9lV2EzY2RmMlhnUUcwQUlLMTByaDVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy83NjE2ZTUtYThjYy00NWQxLWIzZDAtNjFiNzMzNTRhYmRi
LzEvM1dRRE9lV2EzY2RmMlhnUUcwQUlLMTByaDVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6jmUxfH
1SsvKIcapTNVE5FQ4/5UAubauadeL9ZWqsLt949qmHrICDqwmP+8A/XkIyWD6vho
d7GTO75pSUcGNehSAgVUz43i6/xjr0SEKz0PU0xHpMnUUUu4T+omZ+wcOI+KLCHe
iLnsRqE7ut/ovKTU6G9ICxnvtEZC20G/G37+gM/+abcdYHAb7wVX/Tg4+L8KCdy/
51lSSbxq2H8pCcNf2+nwzv64fTRbkZpbPvQ38KXRN5N45iSG7bWNmj1+QwJQDyPz
alTIuNVUemLsylaCGh+mQHzLaOlrejlOwc+mK/tS2i3C5y8BKAugdh9T8tX7p0YD
XTbur6sTMgZIkg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:10:52 2026 by rpki-client