Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
File: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft (raw, json)
Hash identifier: CmAyK/0hIM04S7ZQtouXVRxbodMUJ+ZLdsDaI0neVaQ=
Subject key identifier: FA:F3:42:C2:9B:FD:C1:92:3B:5F:1C:A2:0A:47:54:E8:61:07:76:23
Authority key identifier: DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
Certificate issuer: /CN=dda5a222acb99ab2398439eded7770a65ee66de6
Certificate serial: 01A13CDC2559B9A8369AAA9C698384A2120D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
Manifest number: 10A0
Signing time: Thu 15 Oct 2026 00:00:22 +0000
Manifest this update: Thu 15 Oct 2026 00:00:22 +0000
Manifest next update: Fri 16 Oct 2026 00:00:22 +0000
Files and hashes: 1: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl (hash: 9pmlryIazCiwLK6W0g5ZVjNUeOO+y8kh/3S5DZI5a7k=)
2: wnLAy32iYG4i-ODs-rBRdtaa9Ss.roa (hash: zyR18oxh6Lhv0Acyg819Q0tTDooFJ+wpThACkE37g/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:dc:25:59:b9:a8:36:9a:aa:9c:69:83:84:a2:12:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dda5a222acb99ab2398439eded7770a65ee66de6
Validity
Not Before: Oct 15 00:00:22 2026 GMT
Not After : Oct 16 00:00:22 2026 GMT
Subject: CN=faf342c29bfdc1923b5f1ca20a4754e861077623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:43:45:43:3b:20:cf:00:f7:7c:8b:aa:a1:e4:
a1:9c:ad:9d:ce:68:d7:50:9a:26:af:a6:d8:c0:54:
eb:29:30:24:05:7c:ee:84:34:42:7c:83:27:e6:62:
05:2e:e0:b2:d2:1c:10:69:a9:3a:38:94:02:86:1e:
44:be:ad:17:c6:9c:a9:e5:cf:e0:2b:fd:e1:7f:7a:
ce:8d:bd:1e:96:f5:da:9d:c1:96:a1:b1:bb:06:d2:
45:1a:ef:ab:46:87:00:5d:c4:87:dc:87:e3:0a:f3:
a4:24:8d:ee:5a:86:a9:2a:7a:ca:30:0c:d2:3f:a7:
4a:f1:93:eb:50:44:96:0b:55:20:2d:43:c5:ec:d4:
5d:7b:ae:1f:59:57:44:db:97:5c:89:5a:95:1b:82:
35:c2:ab:d7:78:43:47:b8:45:f6:94:37:9c:01:50:
85:67:cd:0f:d5:b8:c8:5b:0a:a7:c5:27:70:1a:84:
fd:70:af:c7:34:e8:2d:f9:17:9c:a7:0a:fd:29:a3:
6d:71:6a:38:c0:8b:40:19:5b:f3:b0:89:c1:26:29:
63:2a:98:10:98:51:f2:74:eb:7b:6b:ff:64:25:7e:
fe:27:49:42:b4:cd:0a:5f:8f:8c:a1:17:5b:28:37:
13:c1:28:cf:8a:8a:7f:e5:7c:4a:26:c0:a6:93:94:
87:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F3:42:C2:9B:FD:C1:92:3B:5F:1C:A2:0A:47:54:E8:61:07:76:23
X509v3 Authority Key Identifier:
keyid:DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:1d:2d:28:be:c0:46:cb:c0:32:6f:11:84:87:47:8a:9c:39:
d8:93:50:15:b1:2e:fd:95:a2:77:dd:1c:99:ef:2b:39:4c:86:
a5:d3:f3:c3:81:8f:d5:92:9a:7b:0a:45:4d:f4:76:92:b1:a2:
da:0b:18:ce:37:3b:0c:24:6a:0c:e1:a6:02:f8:97:77:12:14:
51:ee:54:56:b9:38:18:d3:51:ee:ce:2f:5d:c1:fc:56:78:1d:
9b:dc:92:71:92:b1:7e:fa:ae:54:bf:51:86:b6:98:48:86:6e:
be:93:a7:cc:87:30:7f:9a:82:0c:45:dd:1b:2a:ed:d2:5d:27:
f1:29:68:b1:19:65:bb:a6:c0:8c:d0:f6:c5:c3:85:82:86:ea:
ff:bb:ed:29:38:9b:2f:dd:86:ab:84:ed:47:90:b6:d7:b6:59:
ec:f3:ed:2d:42:51:4e:fb:ac:4a:44:27:33:64:75:8f:e2:a7:
fb:c0:cc:b4:de:38:df:ae:26:0b:46:7a:74:ea:cf:91:98:4a:
7c:c6:e7:b4:70:b9:8e:0e:69:f2:48:7e:a7:0f:47:08:f5:9d:
e2:87:74:29:2b:d5:4d:ae:94:e1:19:5b:9a:6a:ab:0a:93:64:
a9:45:57:72:03:91:68:93:3d:36:97:5a:61:1f:9f:2d:b7:70:
13:5b:e5:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE83CVZuag2mqqcaYOEohINMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkYTVhMjIyYWNiOTlhYjIzOTg0MzllZGVkNzc3MGE2NWVl
NjZkZTYwHhcNMjYxMDE1MDAwMDIyWhcNMjYxMDE2MDAwMDIyWjAzMTEwLwYDVQQD
EyhmYWYzNDJjMjliZmRjMTkyM2I1ZjFjYTIwYTQ3NTRlODYxMDc3NjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtENFQzsgzwD3fIuqoeShnK2dzmjX
UJomr6bYwFTrKTAkBXzuhDRCfIMn5mIFLuCy0hwQaak6OJQChh5Evq0Xxpyp5c/g
K/3hf3rOjb0elvXancGWobG7BtJFGu+rRocAXcSH3IfjCvOkJI3uWoapKnrKMAzS
P6dK8ZPrUESWC1UgLUPF7NRde64fWVdE25dciVqVG4I1wqvXeENHuEX2lDecAVCF
Z80P1bjIWwqnxSdwGoT9cK/HNOgt+Recpwr9KaNtcWo4wItAGVvzsInBJiljKpgQ
mFHydOt7a/9kJX7+J0lCtM0KX4+MoRdbKDcTwSjPiop/5XxKJsCmk5SH4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPrzQsKb/cGSO18cogpHVOhhB3YjMB8GA1UdIwQY
MBaAFN2loiKsuZqyOYQ57e13cKZe5m3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2FXaUlxeTVtckk1aERudDdYZHdwbDdtYmVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9iYTRhZDItZjQwZS00ZjRiLWE2MGQt
NzUzYWIxOTY4N2Q4LzEvM2FXaUlxeTVtckk1aERudDdYZHdwbDdtYmVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9iYTRhZDItZjQwZS00ZjRiLWE2MGQtNzUzYWIxOTY4N2Q4
LzEvM2FXaUlxeTVtckk1aERudDdYZHdwbDdtYmVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASB0tKL7A
RsvAMm8RhIdHipw52JNQFbEu/ZWid90cme8rOUyGpdPzw4GP1ZKaewpFTfR2krGi
2gsYzjc7DCRqDOGmAviXdxIUUe5UVrk4GNNR7s4vXcH8Vngdm9yScZKxfvquVL9R
hraYSIZuvpOnzIcwf5qCDEXdGyrt0l0n8SlosRllu6bAjND2xcOFgobq/7vtKTib
L92Gq4TtR5C217ZZ7PPtLUJRTvusSkQnM2R1j+Kn+8DMtN44364mC0Z6dOrPkZhK
fMbntHC5jg5p8kh+pw9HCPWd4od0KSvVTa6U4RlbmmqrCpNkqUVXcgORaJM9Npda
YR+fLbdwE1vlJA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:59 2026 by rpki-client