Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
File: 3AOqmk_p1gxc-FOpJIIiafHMdFI.mft (raw, json)
Hash identifier: 4XF0a9fmZQVnnmBkcxeu1OqwntVh7Wt0e2W9mgv1JNM=
Subject key identifier: 41:61:B7:AF:72:86:C5:88:6E:6E:A8:47:C9:81:B1:30:39:BE:5D:0E
Authority key identifier: DC:03:AA:9A:4F:E9:D6:0C:5C:F8:53:A9:24:82:22:69:F1:CC:74:52
Certificate issuer: /CN=dc03aa9a4fe9d60c5cf853a924822269f1cc7452
Certificate serial: 01A13DEF5C96ACB44FB49E81E10660E7AB29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
Manifest number: 1050
Signing time: Thu 15 Oct 2026 05:00:59 +0000
Manifest this update: Thu 15 Oct 2026 05:00:59 +0000
Manifest next update: Fri 16 Oct 2026 05:00:59 +0000
Files and hashes: 1: 3AOqmk_p1gxc-FOpJIIiafHMdFI.crl (hash: A3lD7+PirkLGpUghY2XD+ikRWy5CWHbXRPeFpUxgdT4=)
2: 7TZLT2P2zuuPjzUmClw3kX64yXM.roa (hash: fnAcb1tn2nnIoVX24Iibq3Ab9gwSJ7WX+AekjhFSNg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ef:5c:96:ac:b4:4f:b4:9e:81:e1:06:60:e7:ab:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc03aa9a4fe9d60c5cf853a924822269f1cc7452
Validity
Not Before: Oct 15 05:00:59 2026 GMT
Not After : Oct 16 05:00:59 2026 GMT
Subject: CN=4161b7af7286c5886e6ea847c981b13039be5d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ae:08:39:06:70:6e:bf:fa:1f:e4:62:c0:f5:
0b:5a:03:d4:66:d7:c2:75:c3:99:f5:1e:f4:70:0e:
4c:12:33:c8:3e:7c:8c:59:3d:37:4c:a5:64:aa:ea:
5c:35:dd:db:78:75:17:df:b2:0a:87:64:f3:b2:2b:
5f:10:30:a7:b7:1a:d1:3c:ab:fd:4d:f0:9e:e6:ca:
2d:c7:23:fe:91:02:52:6a:c5:13:0c:0d:6b:1b:8a:
c0:ad:28:b7:42:d3:b8:79:c7:f4:d8:2e:d7:0b:52:
7a:d5:a6:e1:5c:20:2e:d7:c5:e6:fb:c9:24:f4:c6:
d4:87:73:bc:4f:2d:1d:a2:76:28:bb:0b:4c:26:fe:
77:23:ab:a6:46:e5:7c:e0:bf:ba:25:02:96:bf:9b:
0e:a0:7a:d9:95:77:7c:e0:4e:fd:48:a4:3f:8a:1a:
53:ef:d8:2c:58:a0:be:58:29:34:63:13:70:2b:f7:
25:06:a5:78:54:3d:30:4d:10:ae:17:2c:23:14:d3:
2b:15:b9:5d:56:24:71:ba:26:03:88:20:06:4f:e1:
fb:d3:b2:79:9c:69:b2:d7:92:e3:52:aa:1e:61:51:
82:d5:f5:fd:6c:c7:5b:a8:10:0b:df:d3:43:e4:9d:
ac:1e:04:52:d0:f9:2e:c3:57:77:7b:71:88:60:03:
86:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:61:B7:AF:72:86:C5:88:6E:6E:A8:47:C9:81:B1:30:39:BE:5D:0E
X509v3 Authority Key Identifier:
keyid:DC:03:AA:9A:4F:E9:D6:0C:5C:F8:53:A9:24:82:22:69:F1:CC:74:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:13:74:87:b1:b5:af:e8:6d:1c:22:c5:af:64:5b:c0:0a:b0:
fc:35:e2:5c:c2:d9:31:41:fb:fd:71:49:eb:29:a4:cb:28:66:
4e:43:c7:cc:8a:31:13:41:0e:90:07:dd:25:ce:9d:9e:b4:52:
cd:57:24:3d:cd:40:c0:88:9e:f0:a9:cd:68:00:0e:e0:7d:8c:
ae:95:dd:fa:1d:67:4f:fb:57:76:23:3e:0d:64:72:88:d0:bf:
c8:66:9d:6d:80:55:e5:01:dc:04:a0:3a:2b:4d:37:0b:f5:22:
b5:8f:b4:6c:1d:88:6c:65:fb:2a:b5:aa:6e:ad:39:02:2a:87:
32:81:69:03:d7:78:f2:22:e7:d8:82:23:71:aa:8d:75:bb:01:
77:72:01:4c:f9:bc:a0:a2:c4:58:1f:7a:d4:c9:28:c6:30:de:
39:89:54:f9:a1:25:ec:e9:54:d0:8c:8b:bb:cb:c2:0e:db:9f:
96:a6:1f:f8:b6:cd:c9:15:be:7b:71:0b:a2:c1:95:2a:1e:7e:
16:a0:cd:b1:0e:67:f5:c0:c5:3a:ec:54:b9:04:10:a9:84:16:
36:38:db:21:0f:34:f9:4b:81:8f:bb:21:50:db:b8:10:ee:a3:
fe:2e:fa:e2:44:5e:96:9a:5f:23:25:a0:3e:d0:5c:4c:52:35:
39:68:5e:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE971yWrLRPtJ6B4QZg56spMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMDNhYTlhNGZlOWQ2MGM1Y2Y4NTNhOTI0ODIyMjY5ZjFj
Yzc0NTIwHhcNMjYxMDE1MDUwMDU5WhcNMjYxMDE2MDUwMDU5WjAzMTEwLwYDVQQD
Eyg0MTYxYjdhZjcyODZjNTg4NmU2ZWE4NDdjOTgxYjEzMDM5YmU1ZDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK4IOQZwbr/6H+RiwPULWgPUZtfC
dcOZ9R70cA5MEjPIPnyMWT03TKVkqupcNd3beHUX37IKh2TzsitfEDCntxrRPKv9
TfCe5sotxyP+kQJSasUTDA1rG4rArSi3QtO4ecf02C7XC1J61abhXCAu18Xm+8kk
9MbUh3O8Ty0donYouwtMJv53I6umRuV84L+6JQKWv5sOoHrZlXd84E79SKQ/ihpT
79gsWKC+WCk0YxNwK/clBqV4VD0wTRCuFywjFNMrFbldViRxuiYDiCAGT+H707J5
nGmy15LjUqoeYVGC1fX9bMdbqBAL39ND5J2sHgRS0Pkuw1d3e3GIYAOGhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEFht69yhsWIbm6oR8mBsTA5vl0OMB8GA1UdIwQY
MBaAFNwDqppP6dYMXPhTqSSCImnxzHRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0FPcW1rX3AxZ3hjLUZPcEpJSWlhZkhNZEZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kODRlMWUtY2M1My00Y2MyLWFhYjkt
MWNhNzY2ZmJlZWJhLzEvM0FPcW1rX3AxZ3hjLUZPcEpJSWlhZkhNZEZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9kODRlMWUtY2M1My00Y2MyLWFhYjktMWNhNzY2ZmJlZWJh
LzEvM0FPcW1rX3AxZ3hjLUZPcEpJSWlhZkhNZEZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcRN0h7G1
r+htHCLFr2RbwAqw/DXiXMLZMUH7/XFJ6ymkyyhmTkPHzIoxE0EOkAfdJc6dnrRS
zVckPc1AwIie8KnNaAAO4H2MrpXd+h1nT/tXdiM+DWRyiNC/yGadbYBV5QHcBKA6
K003C/UitY+0bB2IbGX7KrWqbq05AiqHMoFpA9d48iLn2IIjcaqNdbsBd3IBTPm8
oKLEWB961MkoxjDeOYlU+aEl7OlU0IyLu8vCDtuflqYf+LbNyRW+e3ELosGVKh5+
FqDNsQ5n9cDFOuxUuQQQqYQWNjjbIQ80+UuBj7shUNu4EO6j/i764kRelppfIyWg
PtBcTFI1OWhesQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 14:06:12 2026 by rpki-client