Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
File: 3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft (raw, json)
Hash identifier: EUK3Ui/OpaxH0RThlafKuBep7Kn6yIuv8q00JGT+QTY=
Subject key identifier: C4:23:5C:ED:32:84:49:54:94:24:1F:32:8F:AB:4D:69:98:06:1F:CE
Authority key identifier: DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
Certificate issuer: /CN=dd640339e59addc75fd978101b40082b5d2b8796
Certificate serial: 01A0C3A0054748124332CC23828BB7A8B810
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
Manifest number: 124F
Signing time: Mon 21 Sep 2026 11:00:39 +0000
Manifest this update: Mon 21 Sep 2026 11:00:39 +0000
Manifest next update: Tue 22 Sep 2026 11:00:39 +0000
Files and hashes: 1: 1-CWEKe6QSYYXBm5T6xMBPCzX5ao.roa (hash: OJS5BF4vZAK0MWbrUqmSMeUGDPRYp6S9E7QNpVkocFM=)
2: 3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl (hash: 6t71ToPJlfJEOR0xaJ+KV08yQq3DJR+BBcpZ/FZzOKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:a0:05:47:48:12:43:32:cc:23:82:8b:b7:a8:b8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd640339e59addc75fd978101b40082b5d2b8796
Validity
Not Before: Sep 21 11:00:39 2026 GMT
Not After : Sep 22 11:00:39 2026 GMT
Subject: CN=c4235ced3284495494241f328fab4d6998061fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e9:8c:d4:ae:76:98:61:fc:8f:28:d4:14:cf:
6e:38:61:38:b0:7a:d1:fd:78:b4:4d:e4:d5:6a:d8:
e4:c3:21:cb:66:e7:4e:69:bc:04:71:65:3f:dc:34:
86:0e:2f:5c:75:61:e9:cc:34:3d:d6:80:e9:3c:2d:
da:33:03:62:3b:7f:65:cd:a0:b3:cd:a9:bf:f8:3d:
b0:ce:34:c0:52:67:fd:b4:bb:93:b3:7d:e4:3b:f1:
ee:76:b7:57:91:63:09:10:c5:28:16:b0:97:1d:45:
d0:76:8b:24:cb:6a:c0:22:dc:6e:b8:a6:77:48:e5:
69:45:f5:6c:eb:f4:18:02:8a:f9:62:0f:78:ce:32:
0e:3d:f4:66:93:ef:c9:4c:ba:f7:a6:d0:67:ed:03:
f7:65:ea:2c:aa:0d:04:56:15:60:7e:a2:54:43:7c:
08:04:e9:9e:d6:fc:11:11:52:79:39:c8:4a:40:0c:
1e:8a:4b:59:2c:8e:c3:5d:de:7a:e5:1a:48:b5:31:
23:63:92:ee:eb:0a:5f:66:0f:2e:cf:4b:31:f4:09:
b6:9c:4d:58:81:06:33:15:76:3b:5d:16:b5:fa:91:
ba:5f:ef:af:03:06:90:2d:75:50:74:23:f2:a4:ff:
a7:cc:e8:42:88:33:c0:bb:27:51:9b:d9:94:b1:4f:
b1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:23:5C:ED:32:84:49:54:94:24:1F:32:8F:AB:4D:69:98:06:1F:CE
X509v3 Authority Key Identifier:
keyid:DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:4b:72:04:d2:f2:5c:54:47:72:ea:60:32:e7:2f:87:85:64:
89:be:ec:0d:b1:cf:7b:90:24:45:a6:06:4a:60:07:61:6b:36:
21:66:4b:0c:bf:e8:ba:49:ef:40:bf:2c:71:0c:31:8c:b8:0e:
7d:a0:11:22:bc:cf:b6:7b:de:3e:94:e4:c1:1f:8c:3a:ff:ca:
9f:f8:b4:65:40:4a:fb:d7:3e:bd:b6:ba:95:fd:ec:df:87:e8:
cf:4f:51:1d:ed:78:70:3f:ee:2f:74:5d:02:ca:a7:9c:60:b7:
ad:cc:47:9b:71:08:66:9e:82:79:1b:b7:31:1a:fd:a1:cb:35:
b2:70:5e:3d:df:64:a8:9f:75:0c:63:8a:65:27:af:ea:a2:f9:
83:b4:50:c7:f1:b1:ae:da:97:18:45:ca:bd:55:be:e9:b4:bf:
e3:15:6a:f7:48:83:b4:d0:93:00:46:9d:be:b8:0a:75:d9:e1:
02:9b:c6:90:55:97:dd:06:db:ef:fc:31:26:9f:3c:29:3d:f2:
26:50:46:a6:21:40:10:2a:ea:9d:dc:30:5f:30:a7:08:a5:9a:
23:50:f2:ff:43:23:75:87:36:bf:67:bd:7c:34:2e:30:b2:53:
a7:7a:24:26:43:51:60:93:91:7f:4f:b2:92:e4:3e:a0:11:b2:
93:5d:b4:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDoAVHSBJDMswjgou3qLgQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNjQwMzM5ZTU5YWRkYzc1ZmQ5NzgxMDFiNDAwODJiNWQy
Yjg3OTYwHhcNMjYwOTIxMTEwMDM5WhcNMjYwOTIyMTEwMDM5WjAzMTEwLwYDVQQD
EyhjNDIzNWNlZDMyODQ0OTU0OTQyNDFmMzI4ZmFiNGQ2OTk4MDYxZmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuemM1K52mGH8jyjUFM9uOGE4sHrR
/Xi0TeTVatjkwyHLZudOabwEcWU/3DSGDi9cdWHpzDQ91oDpPC3aMwNiO39lzaCz
zam/+D2wzjTAUmf9tLuTs33kO/HudrdXkWMJEMUoFrCXHUXQdosky2rAItxuuKZ3
SOVpRfVs6/QYAor5Yg94zjIOPfRmk+/JTLr3ptBn7QP3Zeosqg0EVhVgfqJUQ3wI
BOme1vwREVJ5OchKQAweiktZLI7DXd565RpItTEjY5Lu6wpfZg8uz0sx9Am2nE1Y
gQYzFXY7XRa1+pG6X++vAwaQLXVQdCPypP+nzOhCiDPAuydRm9mUsU+xyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQjXO0yhElUlCQfMo+rTWmYBh/OMB8GA1UdIwQY
MBaAFN1kAznlmt3HX9l4EBtACCtdK4eWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1dRRE9lV2EzY2RmMlhnUUcwQUlLMTByaDVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy83NjE2ZTUtYThjYy00NWQxLWIzZDAt
NjFiNzMzNTRhYmRiLzEvM1dRRE9lV2EzY2RmMlhnUUcwQUlLMTByaDVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy83NjE2ZTUtYThjYy00NWQxLWIzZDAtNjFiNzMzNTRhYmRi
LzEvM1dRRE9lV2EzY2RmMlhnUUcwQUlLMTByaDVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS0tyBNLy
XFRHcupgMucvh4Vkib7sDbHPe5AkRaYGSmAHYWs2IWZLDL/ouknvQL8scQwxjLgO
faARIrzPtnvePpTkwR+MOv/Kn/i0ZUBK+9c+vba6lf3s34foz09RHe14cD/uL3Rd
AsqnnGC3rcxHm3EIZp6CeRu3MRr9ocs1snBePd9kqJ91DGOKZSev6qL5g7RQx/Gx
rtqXGEXKvVW+6bS/4xVq90iDtNCTAEadvrgKddnhApvGkFWX3Qbb7/wxJp88KT3y
JlBGpiFAECrqndwwXzCnCKWaI1Dy/0MjdYc2v2e9fDQuMLJTp3okJkNRYJORf0+y
kuQ+oBGyk1202g==
-----END CERTIFICATE-----
Generated at Mon Sep 21 20:38:29 2026 by rpki-client