Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft
File: r3WOiP6vjWcFnch4ei5fMaBqwek.mft (raw, json)
Hash identifier: rN6Wlem31i6pxfATmdjGdJv/oyWH/xY1niwK/mwcJ1Y=
Subject key identifier: 9B:45:6E:8B:6E:42:96:76:F7:0B:23:FC:C4:72:0E:FF:86:3A:43:A5
Authority key identifier: AF:75:8E:88:FE:AF:8D:67:05:9D:C8:78:7A:2E:5F:31:A0:6A:C1:E9
Certificate issuer: /CN=af758e88feaf8d67059dc8787a2e5f31a06ac1e9
Certificate serial: 019D37C0C3534DFF1DA7FA40145AA268D881
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3WOiP6vjWcFnch4ei5fMaBqwek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft
Manifest number: 0F10
Signing time: Sun 29 Mar 2026 04:01:12 +0000
Manifest this update: Sun 29 Mar 2026 04:01:12 +0000
Manifest next update: Mon 30 Mar 2026 04:01:12 +0000
Files and hashes: 1: r3WOiP6vjWcFnch4ei5fMaBqwek.crl (hash: sussQsZQUygBV+XQHGQbPahXaf3QqbujjZFGn2cTT8g=)
2: s9paXHBMcHwPpUAhDzEk7fWyjI4.roa (hash: 6LvRMh7M/YPi7YR17wVKUzvm8pgqSzx1sR9wUzsZ/wE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3WOiP6vjWcFnch4ei5fMaBqwek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:c3:53:4d:ff:1d:a7:fa:40:14:5a:a2:68:d8:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af758e88feaf8d67059dc8787a2e5f31a06ac1e9
Validity
Not Before: Mar 29 04:01:12 2026 GMT
Not After : Mar 30 04:01:12 2026 GMT
Subject: CN=9b456e8b6e429676f70b23fcc4720eff863a43a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:0f:d5:a4:a7:5a:6d:97:5b:09:85:2b:0e:d0:
37:26:10:65:10:a2:86:0d:0c:8d:f3:be:45:61:1a:
e2:5c:ee:6b:bb:b6:e8:2a:2d:a6:ad:87:95:64:97:
85:dc:be:db:cf:7e:10:97:26:12:74:e5:5b:2c:2f:
d3:96:34:18:a4:56:ff:52:7d:96:c9:b8:17:df:0f:
77:82:29:a7:86:ff:92:a5:a1:e5:41:96:f3:4b:f6:
9d:5f:ba:0a:fb:3f:0b:4e:35:4e:b8:94:ba:1f:6c:
bc:11:c7:64:53:35:c2:22:f1:ea:b5:81:4c:f2:36:
33:da:63:e1:8f:88:4a:c5:bb:4f:74:12:fd:c6:cc:
e7:3a:23:07:ae:db:5c:87:2e:91:7a:4c:49:f0:20:
ab:92:b8:27:2c:04:b9:5a:51:de:cb:75:b7:48:f1:
42:ba:b9:19:bd:7a:93:c7:a6:0a:a4:bd:17:cd:a8:
ae:16:ec:05:00:71:41:ed:47:52:9d:7e:d5:a2:a5:
35:ef:02:92:59:69:b7:97:98:df:ff:a0:73:91:78:
c8:6e:99:c5:a1:d2:be:d4:ce:33:d1:98:4c:13:d3:
51:7a:10:c7:01:ea:07:4b:8e:97:80:e6:76:08:dd:
b0:3a:34:5f:c9:eb:c4:7c:c5:e8:7c:b9:2c:05:54:
7f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:45:6E:8B:6E:42:96:76:F7:0B:23:FC:C4:72:0E:FF:86:3A:43:A5
X509v3 Authority Key Identifier:
keyid:AF:75:8E:88:FE:AF:8D:67:05:9D:C8:78:7A:2E:5F:31:A0:6A:C1:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3WOiP6vjWcFnch4ei5fMaBqwek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:1e:3c:9f:1c:82:6e:40:a6:54:61:cc:14:91:da:47:64:b4:
d0:d9:14:99:9e:91:8a:40:95:7f:1d:f1:8e:34:91:36:06:a2:
12:44:4b:f5:bc:19:fd:7d:fc:56:92:19:fa:70:80:07:04:0f:
1c:57:d4:0e:21:b5:6e:25:27:7e:10:33:79:3f:7d:2d:1c:8c:
f9:4c:01:4d:23:b7:f9:7a:e1:d7:85:62:f7:3d:e3:f2:7c:11:
bb:9b:d2:c8:8a:fa:d5:7b:2a:ba:23:c0:6b:2b:df:7c:dc:77:
d6:b2:d1:ee:3d:e6:b7:54:c3:fb:ff:3a:b7:5a:50:80:a4:ee:
3f:ac:e5:de:af:8d:a2:ff:14:7f:7f:9f:3a:e7:71:3c:cd:78:
ff:6c:ab:68:e5:60:46:90:64:54:ee:33:66:88:41:5e:09:17:
82:e4:85:32:7d:d6:44:e6:81:6d:9f:44:09:aa:d5:5a:5d:06:
af:90:4d:3b:3f:44:58:0f:0a:0e:c5:43:ff:80:e1:c3:12:bd:
9f:30:5a:99:62:d1:57:e2:99:9b:03:fe:1f:3c:54:21:1e:56:
b9:89:42:47:b4:d4:da:b3:5d:45:cf:29:b0:73:92:1a:07:c3:
d3:ed:0c:04:2d:8d:65:e8:f9:8a:6d:d5:e0:c6:2a:4d:23:91:
be:c2:4a:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wMNTTf8dp/pAFFqiaNiBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNzU4ZTg4ZmVhZjhkNjcwNTlkYzg3ODdhMmU1ZjMxYTA2
YWMxZTkwHhcNMjYwMzI5MDQwMTEyWhcNMjYwMzMwMDQwMTEyWjAzMTEwLwYDVQQD
Eyg5YjQ1NmU4YjZlNDI5Njc2ZjcwYjIzZmNjNDcyMGVmZjg2M2E0M2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8w/VpKdabZdbCYUrDtA3JhBlEKKG
DQyN875FYRriXO5ru7boKi2mrYeVZJeF3L7bz34QlyYSdOVbLC/TljQYpFb/Un2W
ybgX3w93gimnhv+SpaHlQZbzS/adX7oK+z8LTjVOuJS6H2y8EcdkUzXCIvHqtYFM
8jYz2mPhj4hKxbtPdBL9xsznOiMHrttchy6RekxJ8CCrkrgnLAS5WlHey3W3SPFC
urkZvXqTx6YKpL0XzaiuFuwFAHFB7UdSnX7VoqU17wKSWWm3l5jf/6BzkXjIbpnF
odK+1M4z0ZhME9NRehDHAeoHS46XgOZ2CN2wOjRfyevEfMXofLksBVR/NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtFbotuQpZ29wsj/MRyDv+GOkOlMB8GA1UdIwQY
MBaAFK91joj+r41nBZ3IeHouXzGgasHpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjNXT2lQNnZqV2NGbmNoNGVpNWZNYUJxd2VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS81NThjMzktNzUxMC00YjYzLWFhNTct
MWUyMjMwZGYwNzQ2LzEvcjNXT2lQNnZqV2NGbmNoNGVpNWZNYUJxd2VrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS81NThjMzktNzUxMC00YjYzLWFhNTctMWUyMjMwZGYwNzQ2
LzEvcjNXT2lQNnZqV2NGbmNoNGVpNWZNYUJxd2VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKB48nxyC
bkCmVGHMFJHaR2S00NkUmZ6RikCVfx3xjjSRNgaiEkRL9bwZ/X38VpIZ+nCABwQP
HFfUDiG1biUnfhAzeT99LRyM+UwBTSO3+Xrh14Vi9z3j8nwRu5vSyIr61XsquiPA
ayvffNx31rLR7j3mt1TD+/86t1pQgKTuP6zl3q+Nov8Uf3+fOudxPM14/2yraOVg
RpBkVO4zZohBXgkXguSFMn3WROaBbZ9ECarVWl0Gr5BNOz9EWA8KDsVD/4DhwxK9
nzBamWLRV+KZmwP+HzxUIR5WuYlCR7TU2rNdRc8psHOSGgfD0+0MBC2NZej5im3V
4MYqTSORvsJKQA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:29 2026 by rpki-client