Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
File: 3RWKDaAyZt8UTImntuNadhxJmPc.mft (raw, json)
Hash identifier: zwdj6cRDoyQB3IGMohwaR/bRAbv5HDcX0pCH+AwmnVw=
Subject key identifier: 68:A8:54:29:DF:5C:35:44:52:61:A7:0B:10:A5:EE:C7:DA:FE:D5:35
Authority key identifier: DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7
Certificate issuer: /CN=dd158a0da03266df144c89a7b6e35a761c4998f7
Certificate serial: 019EBDA2BC39A17559C1203DEB8934B474B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
Manifest number: 0652
Signing time: Fri 12 Jun 2026 21:00:19 +0000
Manifest this update: Fri 12 Jun 2026 21:00:19 +0000
Manifest next update: Sat 13 Jun 2026 21:00:19 +0000
Files and hashes: 1: 3RWKDaAyZt8UTImntuNadhxJmPc.crl (hash: xSHgg7p29GAK878lpWfKgkDehQYxGr52YVsF1YKtAe4=)
2: KspZGEs5E9kBto-BDRNBpwgMozk.roa (hash: fEFWOKz8D3otbrIF7eDSpQJCGfc9dNpOBoympwBaaIo=)
3: _u0GYQJkGDKJGQy_cIUVysNdl-Y.roa (hash: NS2H85YUlo/0gpq3fxBfbH1id4mYTnAFlnyWNFbuJ2A=)
4: jBPPic1_WDiPKVrnfNcPILaGEPs.roa (hash: UZz5IRcSRwfo/4r9rh5sOcK5GPeqYQtDEcdC/J2p/UU=)
5: lwH0nqYhX__-20vFmPdqHfNDIrg.roa (hash: wCraYk4JI+EHVkIbds0t6IzfVaol6i4LvLzpJq3OoSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:a2:bc:39:a1:75:59:c1:20:3d:eb:89:34:b4:74:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd158a0da03266df144c89a7b6e35a761c4998f7
Validity
Not Before: Jun 12 21:00:19 2026 GMT
Not After : Jun 13 21:00:19 2026 GMT
Subject: CN=68a85429df5c35445261a70b10a5eec7dafed535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f4:e7:e9:47:a5:f5:d6:90:ef:b8:f3:b0:b0:
02:53:b7:29:45:13:e6:7c:eb:ec:5a:0d:e0:f3:da:
1b:b8:38:e6:2b:a8:25:2a:7f:fd:1d:5e:fb:57:b2:
c7:2e:db:2b:75:46:37:c1:65:4f:be:10:6e:ee:a2:
ad:e3:22:24:fe:8e:84:bc:b0:8d:7a:2d:6e:01:3f:
c1:f0:cb:2a:81:8d:e8:02:02:b3:a4:3e:3e:69:71:
14:15:26:42:53:68:30:58:cb:66:3c:6c:8f:91:3f:
e6:ee:f3:23:c4:f8:39:79:8b:80:aa:9d:a3:4e:ae:
5d:0d:a8:c2:05:8a:e1:cd:e4:8d:ce:2e:ac:af:9a:
8c:c7:29:d4:1b:aa:d7:e7:32:fe:1e:8e:f3:d3:c2:
1b:e1:2e:82:d4:da:8a:06:b6:16:b9:65:51:90:4e:
ca:c4:4d:65:9f:21:6d:97:9b:e5:e3:75:8e:5b:43:
be:0f:ca:9c:d8:28:1a:fc:c4:9d:31:e4:e8:ed:2b:
c4:60:1c:fc:09:22:3e:bf:84:a1:9d:a3:8e:07:fd:
21:31:da:9a:32:b7:aa:30:f1:84:25:f9:0c:00:21:
2e:f1:33:45:81:48:1c:c0:01:44:1f:de:43:5c:ad:
ba:1f:a6:52:93:a8:c1:0f:aa:39:2f:7a:ce:14:67:
61:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A8:54:29:DF:5C:35:44:52:61:A7:0B:10:A5:EE:C7:DA:FE:D5:35
X509v3 Authority Key Identifier:
keyid:DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b2:af:ef:59:1d:52:ad:e8:7a:10:93:2d:a0:e5:8c:ae:d1:
4f:5b:84:d0:42:4d:52:52:f0:cf:ad:2f:00:28:15:ff:36:d7:
d9:0a:b7:67:85:03:f5:d9:b3:f2:58:82:ad:ef:82:01:8f:52:
9e:fa:06:68:5f:39:14:1e:ad:d4:9d:27:21:3b:c3:af:0c:ed:
9b:a2:d2:b8:ab:60:0c:b0:17:a1:20:9d:06:4d:b6:7c:ce:9b:
88:cd:36:e2:fd:06:ae:1d:5a:f7:49:bd:c0:7e:9a:bf:10:7a:
33:9f:63:fd:18:95:6e:fa:1b:24:c2:47:9d:1f:2b:49:19:5a:
5f:1f:50:1f:be:ed:21:be:a7:51:4a:05:05:45:5d:d2:34:03:
d1:20:84:b3:2d:91:89:87:a9:76:4a:58:15:90:16:9c:a3:5e:
ab:f7:6e:9e:c1:e4:d7:03:7a:01:53:24:fa:ca:a3:e8:fd:e8:
37:e2:06:3e:76:67:d9:98:5a:67:70:23:15:de:35:9f:fc:ea:
86:56:c0:c4:6b:44:eb:5c:c6:3a:8e:a3:8a:ae:f6:86:93:49:
9f:69:92:8e:14:ea:9c:fc:59:8f:2f:b2:a1:08:b6:23:85:f7:
96:80:47:b6:bd:3b:2e:30:fa:be:8b:19:53:ca:65:10:66:f1:
bb:ec:79:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ69orw5oXVZwSA964k0tHS3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMTU4YTBkYTAzMjY2ZGYxNDRjODlhN2I2ZTM1YTc2MWM0
OTk4ZjcwHhcNMjYwNjEyMjEwMDE5WhcNMjYwNjEzMjEwMDE5WjAzMTEwLwYDVQQD
Eyg2OGE4NTQyOWRmNWMzNTQ0NTI2MWE3MGIxMGE1ZWVjN2RhZmVkNTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvTn6Uel9daQ77jzsLACU7cpRRPm
fOvsWg3g89obuDjmK6glKn/9HV77V7LHLtsrdUY3wWVPvhBu7qKt4yIk/o6EvLCN
ei1uAT/B8MsqgY3oAgKzpD4+aXEUFSZCU2gwWMtmPGyPkT/m7vMjxPg5eYuAqp2j
Tq5dDajCBYrhzeSNzi6sr5qMxynUG6rX5zL+Ho7z08Ib4S6C1NqKBrYWuWVRkE7K
xE1lnyFtl5vl43WOW0O+D8qc2Cga/MSdMeTo7SvEYBz8CSI+v4ShnaOOB/0hMdqa
MreqMPGEJfkMACEu8TNFgUgcwAFEH95DXK26H6ZSk6jBD6o5L3rOFGdhqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGioVCnfXDVEUmGnCxCl7sfa/tU1MB8GA1UdIwQY
MBaAFN0Vig2gMmbfFEyJp7bjWnYcSZj3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1JXS0RhQXladDhVVEltbnR1TmFkaHhKbVBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8wYjU1YWItYWNjOC00MWRhLTljODAt
ZThmMjBhYWRkZTk5LzEvM1JXS0RhQXladDhVVEltbnR1TmFkaHhKbVBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS8wYjU1YWItYWNjOC00MWRhLTljODAtZThmMjBhYWRkZTk5
LzEvM1JXS0RhQXladDhVVEltbnR1TmFkaHhKbVBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi7Kv71kd
Uq3oehCTLaDljK7RT1uE0EJNUlLwz60vACgV/zbX2Qq3Z4UD9dmz8liCre+CAY9S
nvoGaF85FB6t1J0nITvDrwztm6LSuKtgDLAXoSCdBk22fM6biM024v0Grh1a90m9
wH6avxB6M59j/RiVbvobJMJHnR8rSRlaXx9QH77tIb6nUUoFBUVd0jQD0SCEsy2R
iYepdkpYFZAWnKNeq/dunsHk1wN6AVMk+sqj6P3oN+IGPnZn2ZhaZ3AjFd41n/zq
hlbAxGtE61zGOo6jiq72hpNJn2mSjhTqnPxZjy+yoQi2I4X3loBHtr07LjD6vosZ
U8plEGbxu+x5+w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:17:23 2026 by rpki-client