Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
File: 3WQWapEXkwjyU6kXVhbMxoKMRGM.mft (raw, json)
Hash identifier: qc1lvsGGjSGkMXwySoeyWso/mjYQF72OuYPkYt20es4=
Subject key identifier: FA:14:DF:B5:50:77:CB:B2:93:B0:FD:E7:D6:58:91:22:7A:8A:D6:6F
Authority key identifier: DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
Certificate issuer: /CN=dd64166a91179308f253a9175616ccc6828c4463
Certificate serial: 019DA6795DFB42CC1971A4ADA00CBA18E192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
Manifest number: 0340
Signing time: Sun 19 Apr 2026 16:01:04 +0000
Manifest this update: Sun 19 Apr 2026 16:01:04 +0000
Manifest next update: Mon 20 Apr 2026 16:01:04 +0000
Files and hashes: 1: 3WQWapEXkwjyU6kXVhbMxoKMRGM.crl (hash: 0CfV47dvsQWtZAZqE8uspjBgDhfQAad5/bZA6lHLaAc=)
2: 6Hz-graF3A3TzKiU9TF5SPg3ZbQ.roa (hash: we1nA+m/JuF6parbhnTAu1bIwfcY90Qs5ZbrZu/N/Qk=)
3: TDzYhYR5_4J8DClbCjisUdgEPKM.roa (hash: q8MSYnLeyisCD2ZYQYaB+7DHM1ybMXAx9Du9NWSkplg=)
4: b3m-2mGJNe4d4cYhhMKL2hutIBY.roa (hash: VFpxrLor0/kl7tjGcbBC6hfUr2SDw3xOvK2qT2usj7g=)
5: e5LvhMnHL2M5G3BrE94Wfd_Hw30.roa (hash: fkj3hwgOelPzkmjhksY0UuW0XF+MqihAQUzut5E2VZk=)
6: kx4dGEV1WCVdxmXSMMr56j_3lbs.roa (hash: /AeCPUE+7U+x0eAWjMncSzT2rSFqU0vKvVwI+dTpmZs=)
7: rFwq2nzQIEZ5NhQDePRqPCbQDko.roa (hash: bEqUY1ErOtavF/ybp/ETS33kos0+WHhMLq9SxRm4BB8=)
8: u4CvbG6TDnI1kr1EXShfypgQBBY.roa (hash: fEiQJgutiQRDfdSgs+8iwYmGcoNGvto7HDp1hJif0ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 12:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a6:79:5d:fb:42:cc:19:71:a4:ad:a0:0c:ba:18:e1:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd64166a91179308f253a9175616ccc6828c4463
Validity
Not Before: Apr 19 16:01:04 2026 GMT
Not After : Apr 20 16:01:04 2026 GMT
Subject: CN=fa14dfb55077cbb293b0fde7d65891227a8ad66f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:94:7a:67:da:a1:f0:8b:46:14:e4:08:57:59:
ef:e8:96:b9:2b:37:95:45:bd:3b:94:71:5c:f7:9f:
d6:d4:54:67:11:c9:c7:3c:40:21:34:b9:ec:aa:a1:
7a:3f:60:2c:74:e7:f7:39:ed:84:5b:b9:72:29:04:
f9:a0:d6:11:83:c8:0d:1d:00:09:88:cf:a4:c3:8a:
dc:bc:5e:db:db:55:a1:9a:03:12:81:0d:c8:c0:e6:
6d:b1:23:2c:f1:f0:64:5c:dc:dd:c0:72:ca:43:e5:
5f:04:cb:9e:23:3c:c7:13:12:30:80:da:cf:bf:a5:
2a:b3:75:67:70:7b:ac:74:93:60:ab:05:e2:bf:3e:
6a:02:b3:e5:23:88:b6:cf:37:db:26:c9:17:95:95:
e6:00:98:06:28:d1:72:25:b9:01:f5:e7:75:a8:41:
e7:8b:bc:5a:ab:1e:e6:85:de:93:f4:ef:73:91:c5:
eb:99:09:db:a1:c9:9b:87:5b:81:6a:e9:19:bd:ff:
6c:5e:e9:61:cd:bd:6e:1a:99:7e:b4:0c:97:68:81:
84:4e:1f:b9:19:f2:cd:b3:1d:f8:6b:c5:1e:8f:7e:
af:7b:d7:41:b2:de:5c:be:b6:64:b1:f8:69:2a:a1:
fd:94:7e:a4:d9:22:e7:80:c5:b1:e5:4e:93:2b:ad:
40:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:14:DF:B5:50:77:CB:B2:93:B0:FD:E7:D6:58:91:22:7A:8A:D6:6F
X509v3 Authority Key Identifier:
keyid:DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:0d:9e:68:4e:54:9f:05:d8:92:29:78:7b:13:07:34:d7:47:
1c:ab:e5:5f:f6:e7:41:9b:e3:b3:b2:b7:d2:da:36:59:87:d5:
2d:23:a1:43:e2:05:f4:08:2e:c8:48:60:91:bd:5e:03:a2:0c:
c3:6d:18:aa:13:bb:60:f6:d4:43:f8:08:41:28:f2:dc:a0:f4:
2e:67:19:ea:21:13:43:ca:46:45:53:e4:9e:5c:49:c9:69:b3:
08:bf:64:05:bd:bd:a8:ba:42:9d:6c:ff:78:68:ce:bc:1b:ce:
9c:e0:1d:37:77:d8:d9:44:e9:f6:94:51:d8:79:ed:d7:e4:89:
3b:c5:49:c3:10:57:a2:54:30:aa:13:88:00:52:14:b6:d5:91:
01:08:c2:0d:59:1e:7f:93:51:ed:b7:64:19:37:9c:33:37:65:
3c:75:f8:1d:e4:42:df:b9:28:67:f6:c0:0d:09:c2:c6:25:b9:
03:02:a8:85:bd:e3:01:f2:1a:70:1b:e5:a0:f1:84:16:67:25:
b0:53:01:74:0d:32:0b:1a:e0:df:b9:27:0e:2c:a3:80:bc:55:
b3:af:65:61:61:5e:e4:77:0c:71:3e:e8:20:22:4f:b8:93:0f:
95:9d:26:6f:28:0d:b1:3e:1c:16:f6:27:ea:e2:66:e7:41:d1:
0c:e5:9f:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2meV37QswZcaStoAy6GOGSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNjQxNjZhOTExNzkzMDhmMjUzYTkxNzU2MTZjY2M2ODI4
YzQ0NjMwHhcNMjYwNDE5MTYwMTA0WhcNMjYwNDIwMTYwMTA0WjAzMTEwLwYDVQQD
EyhmYTE0ZGZiNTUwNzdjYmIyOTNiMGZkZTdkNjU4OTEyMjdhOGFkNjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5R6Z9qh8ItGFOQIV1nv6Ja5KzeV
Rb07lHFc95/W1FRnEcnHPEAhNLnsqqF6P2AsdOf3Oe2EW7lyKQT5oNYRg8gNHQAJ
iM+kw4rcvF7b21WhmgMSgQ3IwOZtsSMs8fBkXNzdwHLKQ+VfBMueIzzHExIwgNrP
v6Uqs3VncHusdJNgqwXivz5qArPlI4i2zzfbJskXlZXmAJgGKNFyJbkB9ed1qEHn
i7xaqx7mhd6T9O9zkcXrmQnbocmbh1uBaukZvf9sXulhzb1uGpl+tAyXaIGETh+5
GfLNsx34a8Uej36ve9dBst5cvrZksfhpKqH9lH6k2SLngMWx5U6TK61A3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoU37VQd8uyk7D959ZYkSJ6itZvMB8GA1UdIwQY
MBaAFN1kFmqRF5MI8lOpF1YWzMaCjERjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1dRV2FwRVhrd2p5VTZrWFZoYk14b0tNUkdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8wYTQ4OWItOWQ5ZS00ZjZhLTg3Yzct
NzRkZTI1OGE3NmY4LzEvM1dRV2FwRVhrd2p5VTZrWFZoYk14b0tNUkdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8wYTQ4OWItOWQ5ZS00ZjZhLTg3YzctNzRkZTI1OGE3NmY4
LzEvM1dRV2FwRVhrd2p5VTZrWFZoYk14b0tNUkdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApQ2eaE5U
nwXYkil4exMHNNdHHKvlX/bnQZvjs7K30to2WYfVLSOhQ+IF9AguyEhgkb1eA6IM
w20YqhO7YPbUQ/gIQSjy3KD0LmcZ6iETQ8pGRVPknlxJyWmzCL9kBb29qLpCnWz/
eGjOvBvOnOAdN3fY2UTp9pRR2Hnt1+SJO8VJwxBXolQwqhOIAFIUttWRAQjCDVke
f5NR7bdkGTecMzdlPHX4HeRC37koZ/bADQnCxiW5AwKohb3jAfIacBvloPGEFmcl
sFMBdA0yCxrg37knDiyjgLxVs69lYWFe5HcMcT7oICJPuJMPlZ0mbygNsT4cFvYn
6uJm50HRDOWf0A==
-----END CERTIFICATE-----
Generated at Sun Apr 19 17:58:59 2026 by rpki-client