Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
File: a3GzSTijGjS_WGag8914w4qsYRk.mft (raw, json)
Hash identifier: qAnkPpIVkRIa6MBiv/P+74xsvLvYSHzRnmEsQe+yYLk=
Subject key identifier: 68:10:0F:99:FF:43:D4:57:33:E9:DD:FA:8B:F5:0B:9F:A7:A1:CE:62
Authority key identifier: 6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
Certificate issuer: /CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Certificate serial: 019D9217D2C5A36CFDACE43D99B14CED4AE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
Manifest number: 0D01
Signing time: Wed 15 Apr 2026 17:02:07 +0000
Manifest this update: Wed 15 Apr 2026 17:02:07 +0000
Manifest next update: Thu 16 Apr 2026 17:02:07 +0000
Files and hashes: 1: DcrRJgqRNpvoCWRPJq-gfZ9cTSc.roa (hash: yUfzqdMRmL7jGSUFq4lCB6EMNimufWLo4OnIOxNcjvs=)
2: RMhbqoJGcate0VVn940rqvh6JQo.roa (hash: tV3B6fI/7FtYuPDuoEQuH+0EeXQe9vPcgT9Mi8Zibns=)
3: a3GzSTijGjS_WGag8914w4qsYRk.crl (hash: bG5xSEEV6OIHA+bXj3hBs2MZT6Xbyes+kcwThMSXBJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Apr 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:92:17:d2:c5:a3:6c:fd:ac:e4:3d:99:b1:4c:ed:4a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Validity
Not Before: Apr 15 17:02:07 2026 GMT
Not After : Apr 16 17:02:07 2026 GMT
Subject: CN=68100f99ff43d45733e9ddfa8bf50b9fa7a1ce62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:80:e8:90:22:8b:3e:c4:f9:e6:22:bc:a9:21:
40:37:d9:3e:bb:ee:47:3e:13:09:14:9c:5d:81:23:
5f:e2:31:15:38:79:a2:83:80:ee:27:c5:90:fe:2d:
49:14:e5:64:ae:b8:a3:41:e9:64:c4:3e:f6:67:93:
3a:a2:89:35:89:11:09:ad:25:21:89:12:1a:7b:20:
82:ae:1d:b2:f3:a8:d3:7f:6a:4e:5a:2f:38:5d:6c:
48:96:74:c4:37:b1:ee:a0:57:11:fe:cb:1c:0f:e4:
69:f3:d6:04:cc:e3:e3:d5:be:e2:e6:f6:d9:18:a3:
82:33:f7:f6:2f:39:94:f2:ea:19:ef:83:7d:36:2b:
2c:f8:3e:b0:52:a4:f1:e4:f5:96:9f:b7:fd:5f:c8:
fe:74:5f:1d:fa:9b:a6:76:96:fc:40:a4:80:41:6c:
9d:c1:c4:4c:23:94:a1:d1:b8:df:fb:61:f4:ea:ea:
6a:fd:81:ab:e8:28:b9:91:74:0a:c7:23:2a:63:96:
3f:bd:5d:b0:b4:7c:03:9e:84:c6:05:a2:f6:cb:d8:
b7:15:39:a2:28:94:5a:ce:a4:b8:c4:05:63:70:7d:
28:8a:c5:c2:85:c3:38:f5:ff:5e:97:44:85:24:ce:
2d:5a:10:53:a9:2c:e4:30:1b:57:c4:fd:27:6f:be:
6d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:10:0F:99:FF:43:D4:57:33:E9:DD:FA:8B:F5:0B:9F:A7:A1:CE:62
X509v3 Authority Key Identifier:
keyid:6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:80:68:f8:e5:dc:4e:f3:66:4e:bc:dd:98:0b:dd:7a:b5:fe:
f9:07:d4:d0:b8:64:c0:77:d0:e9:c9:4b:68:5f:f8:d4:6b:03:
42:3e:e1:fb:b4:8a:f7:1c:09:ec:f6:95:27:f8:30:39:50:b4:
fa:41:38:02:54:10:da:5d:ae:ec:2d:05:de:0f:5b:8b:c0:1a:
ab:91:ad:2e:6e:44:42:e4:df:23:74:eb:62:97:a9:d2:92:77:
5c:cf:ba:86:c9:53:5a:5b:29:91:38:e6:b9:f3:c0:3d:89:d0:
05:11:34:3f:25:b6:cb:22:50:ef:1c:20:ac:df:a0:3b:f4:c6:
fb:60:9f:ba:d5:11:fc:7d:8f:cf:29:72:b8:01:7f:58:6e:60:
74:32:d8:7e:6c:3b:19:9d:60:83:52:68:15:a6:45:d5:c6:23:
05:3e:7d:21:7e:10:4c:04:7e:2a:ed:19:04:ee:a9:f6:e2:c9:
48:a2:59:a1:4a:fb:02:e4:fa:cc:fd:ee:8c:18:69:72:fa:50:
2b:64:f7:2e:05:d4:b7:c1:56:fb:a0:30:79:a2:e5:f5:ac:a9:
35:65:28:8e:f4:f6:77:4a:b0:ea:5e:19:29:05:d8:20:24:6d:
49:59:ce:85:a5:da:12:d5:58:4b:53:8b:b8:f3:9f:61:2c:1a:
1c:07:b1:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2SF9LFo2z9rOQ9mbFM7UrpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNzFiMzQ5MzhhMzFhMzRiZjU4NjZhMGYzZGQ3OGMzOGFh
YzYxMTkwHhcNMjYwNDE1MTcwMjA3WhcNMjYwNDE2MTcwMjA3WjAzMTEwLwYDVQQD
Eyg2ODEwMGY5OWZmNDNkNDU3MzNlOWRkZmE4YmY1MGI5ZmE3YTFjZTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IDokCKLPsT55iK8qSFAN9k+u+5H
PhMJFJxdgSNf4jEVOHmig4DuJ8WQ/i1JFOVkrrijQelkxD72Z5M6ook1iREJrSUh
iRIaeyCCrh2y86jTf2pOWi84XWxIlnTEN7HuoFcR/sscD+Rp89YEzOPj1b7i5vbZ
GKOCM/f2LzmU8uoZ74N9Niss+D6wUqTx5PWWn7f9X8j+dF8d+pumdpb8QKSAQWyd
wcRMI5Sh0bjf+2H06upq/YGr6Ci5kXQKxyMqY5Y/vV2wtHwDnoTGBaL2y9i3FTmi
KJRazqS4xAVjcH0oisXChcM49f9el0SFJM4tWhBTqSzkMBtXxP0nb75tOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgQD5n/Q9RXM+nd+ov1C5+noc5iMB8GA1UdIwQY
MBaAFGtxs0k4oxo0v1hmoPPdeMOKrGEZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTNHelNUaWpHalNfV0dhZzg5MTR3NHFzWVJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83MzEwMzQtNWZkNS00OTJiLTlkYWYt
NmY1NmUxZmEwMjMwLzEvYTNHelNUaWpHalNfV0dhZzg5MTR3NHFzWVJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS83MzEwMzQtNWZkNS00OTJiLTlkYWYtNmY1NmUxZmEwMjMw
LzEvYTNHelNUaWpHalNfV0dhZzg5MTR3NHFzWVJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD4Bo+OXc
TvNmTrzdmAvderX++QfU0LhkwHfQ6clLaF/41GsDQj7h+7SK9xwJ7PaVJ/gwOVC0
+kE4AlQQ2l2u7C0F3g9bi8Aaq5GtLm5EQuTfI3TrYpep0pJ3XM+6hslTWlspkTjm
ufPAPYnQBRE0PyW2yyJQ7xwgrN+gO/TG+2CfutUR/H2PzylyuAF/WG5gdDLYfmw7
GZ1gg1JoFaZF1cYjBT59IX4QTAR+Ku0ZBO6p9uLJSKJZoUr7AuT6zP3ujBhpcvpQ
K2T3LgXUt8FW+6AweaLl9aypNWUojvT2d0qw6l4ZKQXYICRtSVnOhaXaEtVYS1OL
uPOfYSwaHAexrQ==
-----END CERTIFICATE-----
Generated at Wed Apr 15 20:47:59 2026 by rpki-client