
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
File: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft (raw, json)
Hash identifier: 8VggLFyLzQFh4lFxkMwX5i4wgarqt8LAjJGD2cU5t3U=
Subject key identifier: 7E:EB:AB:EC:F8:17:AC:F7:63:1D:D4:60:90:C0:C0:74:AD:75:D8:73
Authority key identifier: DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
Certificate issuer: /CN=dda5a222acb99ab2398439eded7770a65ee66de6
Certificate serial: 019E30A95B7AF3944480353A70C663799B80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
Manifest number: 0F0C
Signing time: Sat 16 May 2026 12:01:05 +0000
Manifest this update: Sat 16 May 2026 12:01:05 +0000
Manifest next update: Sun 17 May 2026 12:01:05 +0000
Files and hashes: 1: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl (hash: CqriuODigQrUdZKCLcGK3za4IWgDeS7tCp5fNcBakBA=)
2: wnLAy32iYG4i-ODs-rBRdtaa9Ss.roa (hash: zyR18oxh6Lhv0Acyg819Q0tTDooFJ+wpThACkE37g/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:5b:7a:f3:94:44:80:35:3a:70:c6:63:79:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dda5a222acb99ab2398439eded7770a65ee66de6
Validity
Not Before: May 16 12:01:05 2026 GMT
Not After : May 17 12:01:05 2026 GMT
Subject: CN=7eebabecf817acf7631dd46090c0c074ad75d873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e5:b3:7a:3e:66:10:08:e8:91:c0:df:21:be:
5f:38:41:3a:f9:64:1e:00:58:69:a6:ff:12:64:2c:
6e:5d:40:f3:d8:ec:0f:7f:02:ff:99:31:9c:61:b2:
cd:ae:25:bb:71:fe:0a:c6:19:63:35:40:94:3b:50:
cd:d2:65:81:c0:8c:95:bd:57:b3:e0:c4:6a:0d:39:
ac:90:5c:46:ff:d5:af:a6:5b:46:ee:99:e1:02:42:
2d:9c:d9:da:13:85:0b:3c:43:45:87:a1:bd:d3:74:
c9:5a:2f:ea:52:67:98:13:60:90:be:40:2e:10:e5:
cc:71:01:17:65:92:43:3f:89:27:57:0f:a4:0e:14:
a7:60:49:7a:ec:28:ca:ab:3f:80:70:8d:a6:f1:39:
23:79:f5:88:e0:47:15:e6:12:86:bd:6e:02:fa:6b:
95:c3:24:2b:0d:71:0f:a7:4d:cf:3c:02:cc:62:1a:
d6:28:12:da:5d:f4:e6:ca:85:67:da:d1:19:04:f9:
95:b9:df:5d:40:b1:06:bd:86:d3:ee:58:22:94:d1:
71:4c:38:d7:89:16:b5:94:8e:2e:62:43:60:4f:8d:
e9:d7:89:53:cd:e0:7a:c6:6e:0d:2c:48:fc:a4:7c:
8a:2e:90:59:00:27:26:00:c3:d3:d1:85:c0:4b:c1:
e8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:EB:AB:EC:F8:17:AC:F7:63:1D:D4:60:90:C0:C0:74:AD:75:D8:73
X509v3 Authority Key Identifier:
keyid:DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:9c:99:47:e1:0c:bf:59:42:fe:ab:21:40:4e:df:a8:d9:e5:
5c:a6:c5:6c:de:03:ee:fb:34:b0:cf:5c:c0:69:02:19:fc:c2:
88:46:a3:35:72:0f:2d:a4:3e:82:74:11:e5:ac:19:39:22:81:
e7:75:2f:8b:f3:b0:fd:29:46:04:2a:69:fe:07:27:60:fc:e5:
4f:41:7b:ff:e8:e9:3c:1d:6c:e1:0e:93:44:74:1e:7f:a8:69:
e0:7e:21:e8:80:30:31:21:e4:d7:b7:3f:30:be:0a:3f:75:bd:
fd:cb:c8:8e:65:8e:1e:32:93:67:38:da:28:48:6b:40:8b:e4:
76:9d:5e:16:e5:cb:67:d5:bd:43:a0:65:52:7c:57:a2:63:6b:
1d:c9:b8:1e:9d:20:4e:ad:2a:75:51:2d:45:26:65:16:5f:19:
ae:72:29:1f:5a:ae:44:10:cb:22:6d:99:35:25:59:ad:85:17:
ab:96:0f:02:c4:24:9f:96:cc:db:d1:14:42:0a:3f:1c:58:26:
7f:9b:53:c2:2a:61:41:58:67:df:69:37:52:15:92:04:6f:d9:
fe:00:11:02:85:ca:0c:c1:94:c0:5c:d7:d5:da:0c:ba:ab:80:
c0:37:67:9a:9c:59:d7:43:00:1d:40:b7:00:3d:47:f6:ec:74:
d1:7e:97:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:56:08 2026 by rpki-client