
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
File: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft (raw, json)
Hash identifier: NXXUaJ8Prwj+K0XZ8g55aIiNe2q8BG7JGKgAEJpuO54=
Subject key identifier: 6F:A1:0C:03:F3:F5:C8:C6:C2:54:28:B5:D0:D2:F6:2A:1F:08:FD:E2
Authority key identifier: DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
Certificate issuer: /CN=dda5a222acb99ab2398439eded7770a65ee66de6
Certificate serial: 01A00025C47EB245B12995B3295E713D1369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
Manifest number: 0FFC
Signing time: Fri 14 Aug 2026 12:01:10 +0000
Manifest this update: Fri 14 Aug 2026 12:01:10 +0000
Manifest next update: Sat 15 Aug 2026 12:01:10 +0000
Files and hashes: 1: 3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl (hash: 0k+f6lwReYqHhlm9LZPCCfWII+9lrqHHL3Iz70HirPE=)
2: wnLAy32iYG4i-ODs-rBRdtaa9Ss.roa (hash: zyR18oxh6Lhv0Acyg819Q0tTDooFJ+wpThACkE37g/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:25:c4:7e:b2:45:b1:29:95:b3:29:5e:71:3d:13:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dda5a222acb99ab2398439eded7770a65ee66de6
Validity
Not Before: Aug 14 12:01:10 2026 GMT
Not After : Aug 15 12:01:10 2026 GMT
Subject: CN=6fa10c03f3f5c8c6c25428b5d0d2f62a1f08fde2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:35:7b:b9:1f:30:65:4f:e0:cf:80:f7:c5:2e:
8a:ec:36:02:49:9e:a9:27:42:42:57:71:9d:a0:57:
a2:98:c3:79:d5:e9:21:2d:72:72:aa:81:db:c4:9b:
62:b6:09:32:23:e6:fb:53:8f:9d:74:63:15:fb:91:
a4:30:bb:7e:65:98:a4:a1:6e:a9:48:31:66:9b:ec:
40:0d:9b:e3:87:64:a3:b2:e3:39:c2:20:42:f8:91:
23:ad:06:1f:e3:c7:e6:0a:e5:ce:c8:aa:fc:74:7c:
d6:77:80:01:48:e8:f7:6f:06:57:bf:16:0a:76:67:
a7:a7:d8:67:3b:37:c8:77:a8:0f:24:fe:46:e8:97:
9b:d4:b4:1a:28:46:64:af:69:88:6f:ad:2c:aa:6e:
58:cf:95:f0:77:2b:b8:da:de:83:e6:3f:38:33:6b:
0b:dd:d3:93:d5:92:32:0a:d9:fe:34:3a:d0:bf:11:
04:41:16:8c:1f:77:b8:ed:7a:1f:b9:0a:54:c8:f6:
fc:ca:e4:82:50:6c:4c:c4:96:14:2d:cf:01:99:d2:
aa:ea:28:87:a1:8a:f6:19:92:a3:77:55:b4:ad:4a:
37:8e:32:63:a8:bd:13:ad:4f:89:c4:b7:5e:53:1e:
cf:ac:6a:9d:c8:a8:87:c1:0c:f5:bc:4d:f3:98:5a:
92:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A1:0C:03:F3:F5:C8:C6:C2:54:28:B5:D0:D2:F6:2A:1F:08:FD:E2
X509v3 Authority Key Identifier:
keyid:DD:A5:A2:22:AC:B9:9A:B2:39:84:39:ED:ED:77:70:A6:5E:E6:6D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ba4ad2-f40e-4f4b-a60d-753ab19687d8/1/3aWiIqy5mrI5hDnt7Xdwpl7mbeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b2:fa:e0:7a:c6:2d:a1:3d:69:8f:72:d7:24:f2:6d:59:3c:
66:b6:5b:f2:a2:b7:c0:aa:bb:ab:bf:7e:30:09:02:f1:1e:9a:
9c:ab:79:d7:7a:59:6b:bf:7f:3e:a9:ab:be:66:7d:b5:f1:f4:
de:15:e9:35:e4:8c:d6:e7:1d:f7:36:79:a6:ae:ab:e2:c1:07:
73:5e:61:28:1c:cc:98:e4:c2:8a:34:54:ea:09:91:01:51:88:
2a:ab:c4:2e:c2:9f:21:15:c7:2e:86:54:b6:3b:b2:a9:55:7f:
a1:df:2a:6b:86:4a:39:e7:1d:7f:f8:b3:3a:93:00:d9:0c:e7:
e2:3a:7f:ed:87:d9:9b:9c:e8:0f:c3:fb:0e:9c:b9:de:ae:51:
20:9e:f4:b8:f5:94:06:11:34:b0:67:83:7a:14:7f:21:82:5b:
f5:50:53:e8:d7:b6:16:f6:9f:92:d0:a1:3e:35:bd:d1:3f:cc:
c7:b9:3c:05:95:d6:5c:86:32:03:ec:50:04:df:95:d1:e6:ce:
00:1a:55:22:28:f3:0a:f2:25:41:d4:8d:91:aa:97:be:53:c2:
c1:06:36:6a:6c:c6:2f:f1:6a:92:c1:b0:c8:5b:2e:40:83:a0:
98:59:c2:4e:8e:b9:ca:88:18:65:3c:e3:71:85:79:a0:16:d8:
c5:07:18:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:23 2026 by rpki-client