Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
File: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft (raw, json)
Hash identifier: Yugqva2JiPTDkyoCbeqUcYgdzh60c4NenbBx7zxaNlQ=
Subject key identifier: 9E:65:DF:9C:3A:42:7C:BD:C9:AE:1C:D8:63:4A:4A:FC:76:7C:4C:50
Authority key identifier: DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
Certificate issuer: /CN=df0198a7b3afdcdd7003562a0871878e238760ad
Certificate serial: 019CC786E6DEEDB97E861CDBA51F3760965D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
Manifest number: 1308
Signing time: Sat 07 Mar 2026 09:00:32 +0000
Manifest this update: Sat 07 Mar 2026 09:00:32 +0000
Manifest next update: Sun 08 Mar 2026 09:00:32 +0000
Files and hashes: 1: 10zWBAG3yHk6LZ2cT_OBKxWFNWM.roa (hash: 3CyCzPInmv1M2HVwGxzJQ9jqmdcvQHPMZfCVee8QVmg=)
2: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl (hash: QTGd35syJgXdiaMjYGlWyt3odO5/moyMDbN1Y2c2oQs=)
3: K7-F8r5HaixUXPBxPks_drLfCLM.roa (hash: IxrS8dpVCynttuxgWbJEvLUTdnUOcVknWjS85DsyGnY=)
4: RubVNCawFmtSSykZF5XcDH3aXBc.roa (hash: pb4UIOlvmHSq695BiD6WHLwCWaB/NLP+RzVFb75tWfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c7:86:e6:de:ed:b9:7e:86:1c:db:a5:1f:37:60:96:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0198a7b3afdcdd7003562a0871878e238760ad
Validity
Not Before: Mar 7 09:00:32 2026 GMT
Not After : Mar 8 09:00:32 2026 GMT
Subject: CN=9e65df9c3a427cbdc9ae1cd8634a4afc767c4c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c0:4e:50:24:3d:06:85:1d:51:93:5f:6a:0c:
21:97:67:00:ff:53:36:54:80:f5:35:2d:b6:b2:a9:
b8:3c:4e:05:02:96:a4:40:f2:32:87:e6:fe:4b:96:
05:f9:09:9d:a7:7a:56:79:97:a6:0b:a2:8c:61:2c:
b3:1b:0f:d5:a8:98:5c:08:c9:c8:ee:a5:f7:51:e6:
a4:34:7d:1e:72:ef:8d:76:56:c7:46:6f:53:dd:fe:
99:c5:8e:96:c1:31:28:df:f0:8d:71:9f:1d:fd:c1:
8d:b6:da:fd:1e:f7:65:9f:7e:05:b3:69:96:03:0f:
3b:7d:30:b9:c7:f6:09:c7:cc:53:3b:8c:1d:99:be:
9f:8d:67:1f:ca:c0:7e:ef:1c:99:98:b1:19:30:0d:
06:d9:cc:2b:76:65:54:ea:c9:78:85:03:ce:7a:cd:
8b:bb:29:a9:55:ed:78:83:23:6b:32:13:05:93:6a:
d3:56:92:77:08:2a:15:35:98:2c:84:b9:35:1f:d2:
03:6d:0f:27:66:48:bf:60:b8:6a:51:46:c4:98:e0:
a0:b2:37:58:f4:30:b2:72:2b:af:1e:f8:4e:53:08:
7f:08:1d:0a:94:b0:5b:ba:61:89:b0:09:56:a4:2e:
58:59:2f:01:a0:b4:95:4f:a5:c9:c5:90:d3:00:0e:
d8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:65:DF:9C:3A:42:7C:BD:C9:AE:1C:D8:63:4A:4A:FC:76:7C:4C:50
X509v3 Authority Key Identifier:
keyid:DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:4c:51:91:49:f5:80:6c:25:e2:bf:f3:21:e0:49:6a:9c:77:
1c:d8:59:7a:b2:1b:0c:40:3e:27:7f:67:5f:36:b9:c4:42:5f:
70:c7:00:3d:8c:eb:2a:c1:93:32:b7:86:a1:c0:05:3e:af:8d:
41:f1:b5:c0:9b:36:58:95:c3:82:73:51:32:d8:39:c9:96:c1:
b0:5f:26:43:b0:41:50:fb:17:30:58:38:13:0c:b1:7d:89:b4:
f8:fa:8c:55:25:70:ca:14:d5:9b:b0:46:39:c8:a0:69:17:0f:
b9:c7:63:d2:27:4f:85:b1:1b:34:0d:ea:54:8d:c8:cc:df:cf:
fe:f4:fd:d7:9c:62:7e:30:ce:e8:3e:43:28:05:a7:b9:91:c1:
7e:3c:46:f5:d5:7d:a2:68:2d:11:7a:9d:87:eb:e9:68:c1:e9:
f9:0b:50:d3:99:27:e4:50:37:93:23:74:89:d0:de:f1:9a:ba:
e9:3c:1b:42:d1:13:2c:90:17:66:01:7c:01:5c:be:27:fd:f3:
17:b4:fd:af:af:00:84:d1:77:2c:d5:66:d6:5f:f5:7c:f1:81:
83:2d:ef:12:fa:17:90:1f:be:0c:7d:ab:a3:22:43:b8:5c:b3:
09:7f:b4:58:97:7d:26:ad:c5:75:0a:d3:bc:39:0c:d8:3c:76:
86:a6:30:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzHhube7bl+hhzbpR83YJZdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMDE5OGE3YjNhZmRjZGQ3MDAzNTYyYTA4NzE4NzhlMjM4
NzYwYWQwHhcNMjYwMzA3MDkwMDMyWhcNMjYwMzA4MDkwMDMyWjAzMTEwLwYDVQQD
Eyg5ZTY1ZGY5YzNhNDI3Y2JkYzlhZTFjZDg2MzRhNGFmYzc2N2M0YzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sBOUCQ9BoUdUZNfagwhl2cA/1M2
VID1NS22sqm4PE4FApakQPIyh+b+S5YF+Qmdp3pWeZemC6KMYSyzGw/VqJhcCMnI
7qX3UeakNH0ecu+NdlbHRm9T3f6ZxY6WwTEo3/CNcZ8d/cGNttr9Hvdln34Fs2mW
Aw87fTC5x/YJx8xTO4wdmb6fjWcfysB+7xyZmLEZMA0G2cwrdmVU6sl4hQPOes2L
uympVe14gyNrMhMFk2rTVpJ3CCoVNZgshLk1H9IDbQ8nZki/YLhqUUbEmOCgsjdY
9DCyciuvHvhOUwh/CB0KlLBbumGJsAlWpC5YWS8BoLSVT6XJxZDTAA7YBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5l35w6Qny9ya4c2GNKSvx2fExQMB8GA1UdIwQY
MBaAFN8BmKezr9zdcANWKghxh44jh2CtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3dHWXA3T3YzTjF3QTFZcUNIR0hqaU9IWUswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9kM2ZjYTYtZWNiNS00M2FhLThjOWQt
MGZjYzZjMzAxMWZjLzEvM3dHWXA3T3YzTjF3QTFZcUNIR0hqaU9IWUswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9kM2ZjYTYtZWNiNS00M2FhLThjOWQtMGZjYzZjMzAxMWZj
LzEvM3dHWXA3T3YzTjF3QTFZcUNIR0hqaU9IWUswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIExRkUn1
gGwl4r/zIeBJapx3HNhZerIbDEA+J39nXza5xEJfcMcAPYzrKsGTMreGocAFPq+N
QfG1wJs2WJXDgnNRMtg5yZbBsF8mQ7BBUPsXMFg4EwyxfYm0+PqMVSVwyhTVm7BG
OcigaRcPucdj0idPhbEbNA3qVI3IzN/P/vT915xifjDO6D5DKAWnuZHBfjxG9dV9
omgtEXqdh+vpaMHp+QtQ05kn5FA3kyN0idDe8Zq66TwbQtETLJAXZgF8AVy+J/3z
F7T9r68AhNF3LNVm1l/1fPGBgy3vEvoXkB++DH2royJDuFyzCX+0WJd9Jq3FdQrT
vDkM2Dx2hqYwfA==
-----END CERTIFICATE-----
Generated at Sat Mar 7 12:44:16 2026 by rpki-client