Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
File: 3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft (raw, json)
Hash identifier: wt1+0+yQOpnRp00lZ9efAQII8nWaQ0OYyhl3Y9nWNJc=
Subject key identifier: BA:7C:97:98:AA:CA:30:CC:AF:99:44:6C:E2:C4:E2:C1:C6:69:BB:1C
Authority key identifier: DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
Certificate issuer: /CN=dd640339e59addc75fd978101b40082b5d2b8796
Certificate serial: 01A1DE710BDCC0BE8797FD55202C4D61E25F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
Manifest number: 12E2
Signing time: Sun 15 Nov 2026 09:01:52 +0000
Manifest this update: Sun 15 Nov 2026 09:01:52 +0000
Manifest next update: Mon 16 Nov 2026 09:01:52 +0000
Files and hashes: 1: 3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl (hash: 2vqfjPkY24197LqDkMqdNWuQDrpK8VFYftxtZ9bwba8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:71:0b:dc:c0:be:87:97:fd:55:20:2c:4d:61:e2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd640339e59addc75fd978101b40082b5d2b8796
Validity
Not Before: Nov 15 09:01:52 2026 GMT
Not After : Nov 16 09:01:52 2026 GMT
Subject: CN=ba7c9798aaca30ccaf99446ce2c4e2c1c669bb1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f6:89:86:26:a8:5e:5c:f1:f2:48:6b:61:c4:
c1:48:23:73:65:46:a7:77:6d:41:59:5a:76:63:fd:
3b:19:ba:82:f1:ac:4c:a0:59:2a:cf:43:e9:57:c0:
45:49:ba:59:da:ef:b3:95:e5:aa:b7:b1:08:f9:1a:
72:33:cf:e6:9d:45:07:ef:3c:e5:61:4a:59:ee:f0:
6c:a6:93:47:a1:54:fa:9c:2e:d8:59:7a:e8:c1:76:
50:af:e9:1d:df:73:b4:9b:12:83:50:12:32:37:10:
a3:b4:fc:81:af:6f:2d:9f:64:c4:c3:30:3e:04:4b:
64:51:4a:9d:f7:dd:c2:58:ce:82:5d:88:e4:d5:9a:
31:7f:4b:b2:f4:4f:cf:25:5a:21:aa:11:f4:a5:89:
2c:a8:74:47:92:bd:e4:1c:ad:cf:0f:19:d9:75:d3:
37:aa:94:1c:b4:01:d1:20:4b:43:4a:b7:c6:98:39:
c3:bb:2b:9f:c7:8e:19:dc:84:22:8d:d2:16:46:fa:
18:aa:80:0e:48:18:3b:81:19:90:66:91:eb:1d:9f:
49:d1:1a:99:17:be:06:f9:e2:25:8e:05:05:c5:be:
5b:c4:4f:b9:13:d8:0e:1a:37:fe:6d:db:cb:07:d6:
03:25:3c:71:9b:e1:b2:9c:c0:15:b6:1a:ff:85:24:
14:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7C:97:98:AA:CA:30:CC:AF:99:44:6C:E2:C4:E2:C1:C6:69:BB:1C
X509v3 Authority Key Identifier:
keyid:DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:0c:5f:e1:0f:a5:89:30:2c:c3:55:06:8b:36:29:24:45:ad:
9f:11:0c:c5:46:6b:34:2b:f1:1b:6d:d1:84:29:53:08:67:0a:
31:2b:90:5f:bf:aa:c8:c2:f2:dc:d0:59:2a:e7:89:6f:07:49:
f5:82:35:62:0f:39:f7:02:f2:7f:59:4c:18:a4:a7:41:51:6e:
35:4d:19:a6:4c:b5:17:29:43:54:c5:08:50:85:a8:d4:83:7b:
37:fe:b3:48:9b:1b:c2:17:d6:ee:bb:89:e3:23:95:50:02:fb:
d9:78:be:ca:81:ed:98:be:fb:fc:dd:12:4a:0f:6a:af:0d:ce:
b8:39:8a:3a:a1:2d:bc:11:87:57:6c:ce:1c:d2:7f:6d:11:fb:
e0:b9:ad:a7:0a:42:8c:60:f4:73:6b:e0:66:a6:e1:07:f8:06:
05:dc:ed:b6:66:ce:e1:5b:bf:fb:45:d8:31:ec:7f:16:7d:bc:
92:53:de:77:94:52:98:ca:ad:61:d8:aa:84:c2:b4:92:9f:35:
15:11:b1:37:de:92:c9:24:7d:3f:b1:f2:69:85:92:44:08:d8:
49:89:50:fa:4b:92:8b:98:3c:ae:88:68:fa:74:6d:27:88:4c:
c2:9b:b0:ba:8e:07:b7:0d:c3:da:0c:88:01:e1:5e:36:76:a8:
c2:15:7b:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHecQvcwL6Hl/1VICxNYeJfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNjQwMzM5ZTU5YWRkYzc1ZmQ5NzgxMDFiNDAwODJiNWQy
Yjg3OTYwHhcNMjYxMTE1MDkwMTUyWhcNMjYxMTE2MDkwMTUyWjAzMTEwLwYDVQQD
EyhiYTdjOTc5OGFhY2EzMGNjYWY5OTQ0NmNlMmM0ZTJjMWM2NjliYjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9faJhiaoXlzx8khrYcTBSCNzZUan
d21BWVp2Y/07GbqC8axMoFkqz0PpV8BFSbpZ2u+zleWqt7EI+RpyM8/mnUUH7zzl
YUpZ7vBsppNHoVT6nC7YWXrowXZQr+kd33O0mxKDUBIyNxCjtPyBr28tn2TEwzA+
BEtkUUqd993CWM6CXYjk1Zoxf0uy9E/PJVohqhH0pYksqHRHkr3kHK3PDxnZddM3
qpQctAHRIEtDSrfGmDnDuyufx44Z3IQijdIWRvoYqoAOSBg7gRmQZpHrHZ9J0RqZ
F74G+eIljgUFxb5bxE+5E9gOGjf+bdvLB9YDJTxxm+GynMAVthr/hSQUNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLp8l5iqyjDMr5lEbOLE4sHGabscMB8GA1UdIwQY
MBaAFN1kAznlmt3HX9l4EBtACCtdK4eWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1dRRE9lV2EzY2RmMlhnUUcwQUlLMTByaDVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy83NjE2ZTUtYThjYy00NWQxLWIzZDAt
NjFiNzMzNTRhYmRiLzEvM1dRRE9lV2EzY2RmMlhnUUcwQUlLMTByaDVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy83NjE2ZTUtYThjYy00NWQxLWIzZDAtNjFiNzMzNTRhYmRi
LzEvM1dRRE9lV2EzY2RmMlhnUUcwQUlLMTByaDVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVAxf4Q+l
iTAsw1UGizYpJEWtnxEMxUZrNCvxG23RhClTCGcKMSuQX7+qyMLy3NBZKueJbwdJ
9YI1Yg859wLyf1lMGKSnQVFuNU0Zpky1FylDVMUIUIWo1IN7N/6zSJsbwhfW7ruJ
4yOVUAL72Xi+yoHtmL77/N0SSg9qrw3OuDmKOqEtvBGHV2zOHNJ/bRH74LmtpwpC
jGD0c2vgZqbhB/gGBdzttmbO4Vu/+0XYMex/Fn28klPed5RSmMqtYdiqhMK0kp81
FRGxN96SySR9P7HyaYWSRAjYSYlQ+kuSi5g8roho+nRtJ4hMwpuwuo4Htw3D2gyI
AeFeNnaowhV7+w==
-----END CERTIFICATE-----
Generated at Sun Nov 15 20:57:07 2026 by rpki-client