Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
File: 3WQWapEXkwjyU6kXVhbMxoKMRGM.mft (raw, json)
Hash identifier: x0Xqe8iOhFU/sHl/Bj3R/nP+uLdH1IElb90Ub4WXxq4=
Subject key identifier: 00:65:3E:58:64:66:54:60:D2:47:39:8A:49:E5:5D:F8:A7:8B:35:CB
Authority key identifier: DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
Certificate issuer: /CN=dd64166a91179308f253a9175616ccc6828c4463
Certificate serial: 019CB05AD7B9F04D29ACADF164DFE223FF19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
Manifest number: 02BE
Signing time: Mon 02 Mar 2026 21:01:09 +0000
Manifest this update: Mon 02 Mar 2026 21:01:09 +0000
Manifest next update: Tue 03 Mar 2026 21:01:09 +0000
Files and hashes: 1: 3WQWapEXkwjyU6kXVhbMxoKMRGM.crl (hash: W3+vyuTnGXMOOAKRosWfG+1tZ31dYDjMIjQTkOZMtnQ=)
2: 9GlAd--ziJn6zEERuSI1wMxCVUI.roa (hash: yW98a8lXMRGOAvXCAcelUQyydp3bl59KXdnIoFgiRQU=)
3: P3KJe-KpvIfVnSus9dYEd9IB5is.roa (hash: yzKFnPXT/yf225Fng2cCAnIlvWFQn++5Nl5/aoZu65M=)
4: b3m-2mGJNe4d4cYhhMKL2hutIBY.roa (hash: VFpxrLor0/kl7tjGcbBC6hfUr2SDw3xOvK2qT2usj7g=)
5: e4sjM1fXWk_A_ZzXaZBRZzVlSZE.roa (hash: 5c/2d20TsHc5uK5yVLQ9OB9Bt6Agm7Sts7MBlakKwT8=)
6: e5LvhMnHL2M5G3BrE94Wfd_Hw30.roa (hash: fkj3hwgOelPzkmjhksY0UuW0XF+MqihAQUzut5E2VZk=)
7: kx4dGEV1WCVdxmXSMMr56j_3lbs.roa (hash: /AeCPUE+7U+x0eAWjMncSzT2rSFqU0vKvVwI+dTpmZs=)
8: rFwq2nzQIEZ5NhQDePRqPCbQDko.roa (hash: bEqUY1ErOtavF/ybp/ETS33kos0+WHhMLq9SxRm4BB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:5a:d7:b9:f0:4d:29:ac:ad:f1:64:df:e2:23:ff:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd64166a91179308f253a9175616ccc6828c4463
Validity
Not Before: Mar 2 21:01:09 2026 GMT
Not After : Mar 3 21:01:09 2026 GMT
Subject: CN=00653e5864665460d247398a49e55df8a78b35cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fc:0c:ff:88:25:91:ae:2d:f6:0b:e1:28:ae:
c5:de:c4:92:31:25:1e:61:d4:b7:7d:7d:e4:19:f7:
6b:67:40:5c:2c:d0:fe:f0:e6:a2:7c:0d:ea:0b:3b:
58:2d:14:13:aa:1d:56:a3:42:7f:24:78:13:5d:74:
ce:63:2e:f9:51:1b:d7:d4:75:2d:43:96:8d:7e:9a:
70:f0:ba:7e:90:62:57:b1:f4:63:56:38:79:32:b0:
83:43:97:e0:70:52:2a:ce:8a:02:ae:68:30:c0:31:
08:8c:47:31:2b:0d:c3:60:54:ec:2f:3e:7a:9e:c2:
1e:03:8f:7d:db:39:75:3f:47:3f:31:b7:d7:49:1b:
fc:72:ba:22:c3:3a:46:df:d6:db:a2:4a:79:00:cf:
49:d3:03:b4:2c:31:87:34:c8:7d:4c:56:49:f6:1e:
87:7f:18:da:6e:d0:ed:59:e7:a4:8c:bc:06:8f:f6:
15:10:e1:36:a7:eb:70:3c:90:98:db:f3:f1:8c:19:
79:65:08:de:21:95:c1:cd:9f:c2:33:7a:db:51:57:
23:af:ff:aa:0a:c0:c4:8e:b1:7e:51:1e:6f:67:9d:
60:34:34:96:0b:d7:d9:e1:eb:c3:6a:96:1b:da:f0:
b8:80:b5:71:51:4d:f3:4d:86:6f:95:28:1e:aa:37:
ba:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:65:3E:58:64:66:54:60:D2:47:39:8A:49:E5:5D:F8:A7:8B:35:CB
X509v3 Authority Key Identifier:
keyid:DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:c7:1a:91:c6:a2:46:78:73:a3:d3:b0:09:eb:fd:ad:ae:d5:
d2:9f:96:a3:52:d5:0c:e4:b6:d4:5f:e0:85:c2:5d:8f:49:31:
ee:79:6d:12:7e:10:71:91:a3:15:ea:bc:8f:3d:7d:44:60:df:
36:18:63:0b:dc:af:0d:15:47:50:f2:87:b4:be:25:63:6f:78:
a4:08:4d:60:38:35:18:ac:45:3e:68:7b:21:15:53:70:58:73:
9c:f2:9e:08:ec:d5:c9:89:83:14:70:1e:6e:f3:76:39:c0:a9:
9a:b2:d5:76:68:a5:54:8e:4f:5b:3a:1d:06:45:d4:e7:53:5a:
1a:f0:ea:f8:61:c6:d7:2f:22:3f:6b:f2:e6:81:42:24:da:47:
4c:98:6b:cd:51:71:bd:c7:b5:5d:1a:57:27:42:7b:67:a3:b6:
69:2f:75:a3:29:db:8c:9d:82:c2:cc:80:4f:a7:b1:c2:40:d8:
e4:3f:3d:8f:95:f8:33:c2:0d:a6:9e:d4:f7:4e:8c:f4:d3:1e:
c2:d1:e1:5b:0b:6e:28:c5:24:fb:ff:ad:b7:84:8c:e8:60:c8:
cf:83:b1:88:a6:3e:12:b3:e8:16:17:7e:6a:83:01:79:b6:21:
eb:9d:5e:f8:e2:2a:5d:2a:bd:d3:77:56:7e:ca:4a:69:9b:ae:
a5:e1:3d:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZywWte58E0prK3xZN/iI/8ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNjQxNjZhOTExNzkzMDhmMjUzYTkxNzU2MTZjY2M2ODI4
YzQ0NjMwHhcNMjYwMzAyMjEwMTA5WhcNMjYwMzAzMjEwMTA5WjAzMTEwLwYDVQQD
EygwMDY1M2U1ODY0NjY1NDYwZDI0NzM5OGE0OWU1NWRmOGE3OGIzNWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/wM/4glka4t9gvhKK7F3sSSMSUe
YdS3fX3kGfdrZ0BcLND+8OaifA3qCztYLRQTqh1Wo0J/JHgTXXTOYy75URvX1HUt
Q5aNfppw8Lp+kGJXsfRjVjh5MrCDQ5fgcFIqzooCrmgwwDEIjEcxKw3DYFTsLz56
nsIeA4992zl1P0c/MbfXSRv8croiwzpG39bbokp5AM9J0wO0LDGHNMh9TFZJ9h6H
fxjabtDtWeekjLwGj/YVEOE2p+twPJCY2/PxjBl5ZQjeIZXBzZ/CM3rbUVcjr/+q
CsDEjrF+UR5vZ51gNDSWC9fZ4evDapYb2vC4gLVxUU3zTYZvlSgeqje6sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFABlPlhkZlRg0kc5iknlXfinizXLMB8GA1UdIwQY
MBaAFN1kFmqRF5MI8lOpF1YWzMaCjERjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1dRV2FwRVhrd2p5VTZrWFZoYk14b0tNUkdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8wYTQ4OWItOWQ5ZS00ZjZhLTg3Yzct
NzRkZTI1OGE3NmY4LzEvM1dRV2FwRVhrd2p5VTZrWFZoYk14b0tNUkdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8wYTQ4OWItOWQ5ZS00ZjZhLTg3YzctNzRkZTI1OGE3NmY4
LzEvM1dRV2FwRVhrd2p5VTZrWFZoYk14b0tNUkdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk8cakcai
Rnhzo9OwCev9ra7V0p+Wo1LVDOS21F/ghcJdj0kx7nltEn4QcZGjFeq8jz19RGDf
NhhjC9yvDRVHUPKHtL4lY294pAhNYDg1GKxFPmh7IRVTcFhznPKeCOzVyYmDFHAe
bvN2OcCpmrLVdmilVI5PWzodBkXU51NaGvDq+GHG1y8iP2vy5oFCJNpHTJhrzVFx
vce1XRpXJ0J7Z6O2aS91oynbjJ2CwsyAT6exwkDY5D89j5X4M8INpp7U906M9NMe
wtHhWwtuKMUk+/+tt4SM6GDIz4OxiKY+ErPoFhd+aoMBebYh651e+OIqXSq903dW
fspKaZuupeE9Tg==
-----END CERTIFICATE-----
Generated at Tue Mar 3 05:30:13 2026 by rpki-client