Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
File: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft (raw, json)
Hash identifier: h8yaFvl3ugcXzWsFTo7ztpCUW6/cE95zS8Kg7/MrkSo=
Subject key identifier: 38:E5:E0:DB:A0:79:51:B8:4F:40:4E:1A:FE:97:9A:76:07:D4:4B:81
Authority key identifier: DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
Certificate issuer: /CN=df0198a7b3afdcdd7003562a0871878e238760ad
Certificate serial: 019DB0C62F8DE8B45DBAB243DC7FC3B2DDCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
Manifest number: 1381
Signing time: Tue 21 Apr 2026 16:01:11 +0000
Manifest this update: Tue 21 Apr 2026 16:01:11 +0000
Manifest next update: Wed 22 Apr 2026 16:01:11 +0000
Files and hashes: 1: 10zWBAG3yHk6LZ2cT_OBKxWFNWM.roa (hash: 3CyCzPInmv1M2HVwGxzJQ9jqmdcvQHPMZfCVee8QVmg=)
2: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl (hash: 7OnxOO3HRS5JK7tDaxwiscUMGo/iGAnOfTIlwut38fU=)
3: K7-F8r5HaixUXPBxPks_drLfCLM.roa (hash: IxrS8dpVCynttuxgWbJEvLUTdnUOcVknWjS85DsyGnY=)
4: RubVNCawFmtSSykZF5XcDH3aXBc.roa (hash: pb4UIOlvmHSq695BiD6WHLwCWaB/NLP+RzVFb75tWfs=)
5: csf31rqb-Vtp8DxAcvND5Xzia2g.roa (hash: tIcC2hzx8VFbqFhPv8CNA+NzwFonxl1ILY4nFDsUkqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 14:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:c6:2f:8d:e8:b4:5d:ba:b2:43:dc:7f:c3:b2:dd:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0198a7b3afdcdd7003562a0871878e238760ad
Validity
Not Before: Apr 21 16:01:11 2026 GMT
Not After : Apr 22 16:01:11 2026 GMT
Subject: CN=38e5e0dba07951b84f404e1afe979a7607d44b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:07:cf:72:49:bc:85:07:b6:1f:e4:e5:bd:48:
16:61:2a:54:db:db:00:53:57:93:bf:eb:d7:7d:05:
f4:03:09:ce:01:95:10:18:aa:53:fe:6d:18:43:58:
d0:19:eb:0f:e7:1b:72:56:e4:3f:31:f5:de:70:af:
9b:59:42:29:67:9d:91:43:34:22:d3:12:f9:ab:cb:
54:2a:30:e0:5e:77:8a:41:fe:04:85:f2:ff:68:3a:
91:23:60:a5:70:4a:f6:bd:bf:dc:c9:e7:b4:e3:9f:
c7:f2:02:12:a3:ef:86:e2:35:50:74:fb:ce:54:c2:
72:fc:df:0f:a5:06:73:ec:19:90:46:23:1a:63:06:
37:b9:95:5a:0c:b5:74:db:24:f6:c5:bc:85:df:b6:
c2:69:e8:40:0c:67:c4:c9:7f:63:8d:60:27:2e:78:
2c:bc:a3:73:ac:80:b9:d1:d8:60:5c:7f:61:86:3f:
1f:38:2e:75:9d:e5:dc:81:cd:d4:33:a2:33:65:f3:
d5:3d:7d:b1:e5:1b:20:f2:c4:8e:3a:86:e3:0a:c8:
79:9e:0a:ea:c9:40:cf:9d:04:34:f8:b8:fe:ff:49:
41:a8:f8:e1:d7:66:e9:f4:52:e9:7c:bc:f9:83:53:
06:91:78:df:fa:ae:b8:41:a5:52:b4:14:78:34:c9:
b0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E5:E0:DB:A0:79:51:B8:4F:40:4E:1A:FE:97:9A:76:07:D4:4B:81
X509v3 Authority Key Identifier:
keyid:DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:7e:33:f1:c1:bc:04:aa:4d:ae:21:cc:a4:11:1e:7a:77:e3:
c2:51:a2:f5:f0:f3:dd:d8:0e:dc:8e:29:0d:fc:32:cd:c1:a2:
cd:ab:cf:54:3b:1a:55:cb:6b:a4:a0:f5:cd:9c:dc:ae:52:25:
f7:8b:6f:fc:c2:96:98:c4:8e:1d:60:5c:01:91:50:1e:c1:4f:
56:34:0e:8e:bc:5f:57:c9:d0:cc:a2:ee:1c:72:38:01:5c:19:
ea:a9:d6:4e:e8:c1:1f:8c:17:03:c8:2f:de:07:86:07:a7:e2:
4d:a2:a3:04:b0:f6:01:dd:9a:0d:b6:a4:08:f4:5d:ac:bc:19:
80:93:fd:0b:c4:3f:98:90:7a:e9:67:c8:02:d0:8c:d7:5d:2b:
18:5e:a4:4c:88:c9:9f:43:0e:c4:82:99:d2:41:36:14:33:13:
e7:57:35:aa:d5:dc:9a:64:6f:90:ea:19:0b:62:ef:07:48:48:
ff:5d:73:62:76:5c:33:3f:6f:91:f5:bf:96:01:f9:0c:18:ed:
47:67:41:18:1e:c8:8e:59:9d:7d:6e:bd:af:28:8a:36:61:46:
6d:01:8c:08:9b:e3:31:d0:e7:4c:e6:25:d3:54:01:02:99:0c:
68:f7:04:b4:2a:ac:c6:25:89:92:7f:31:00:e2:64:d4:0c:48:
f8:58:2f:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2wxi+N6LRdurJD3H/Dst3LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMDE5OGE3YjNhZmRjZGQ3MDAzNTYyYTA4NzE4NzhlMjM4
NzYwYWQwHhcNMjYwNDIxMTYwMTExWhcNMjYwNDIyMTYwMTExWjAzMTEwLwYDVQQD
EygzOGU1ZTBkYmEwNzk1MWI4NGY0MDRlMWFmZTk3OWE3NjA3ZDQ0YjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAfPckm8hQe2H+TlvUgWYSpU29sA
U1eTv+vXfQX0AwnOAZUQGKpT/m0YQ1jQGesP5xtyVuQ/MfXecK+bWUIpZ52RQzQi
0xL5q8tUKjDgXneKQf4EhfL/aDqRI2ClcEr2vb/cyee045/H8gISo++G4jVQdPvO
VMJy/N8PpQZz7BmQRiMaYwY3uZVaDLV02yT2xbyF37bCaehADGfEyX9jjWAnLngs
vKNzrIC50dhgXH9hhj8fOC51neXcgc3UM6IzZfPVPX2x5Rsg8sSOOobjCsh5ngrq
yUDPnQQ0+Lj+/0lBqPjh12bp9FLpfLz5g1MGkXjf+q64QaVStBR4NMmwjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjl4NugeVG4T0BOGv6XmnYH1EuBMB8GA1UdIwQY
MBaAFN8BmKezr9zdcANWKghxh44jh2CtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3dHWXA3T3YzTjF3QTFZcUNIR0hqaU9IWUswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9kM2ZjYTYtZWNiNS00M2FhLThjOWQt
MGZjYzZjMzAxMWZjLzEvM3dHWXA3T3YzTjF3QTFZcUNIR0hqaU9IWUswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9kM2ZjYTYtZWNiNS00M2FhLThjOWQtMGZjYzZjMzAxMWZj
LzEvM3dHWXA3T3YzTjF3QTFZcUNIR0hqaU9IWUswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL34z8cG8
BKpNriHMpBEeenfjwlGi9fDz3dgO3I4pDfwyzcGizavPVDsaVctrpKD1zZzcrlIl
94tv/MKWmMSOHWBcAZFQHsFPVjQOjrxfV8nQzKLuHHI4AVwZ6qnWTujBH4wXA8gv
3geGB6fiTaKjBLD2Ad2aDbakCPRdrLwZgJP9C8Q/mJB66WfIAtCM110rGF6kTIjJ
n0MOxIKZ0kE2FDMT51c1qtXcmmRvkOoZC2LvB0hI/11zYnZcMz9vkfW/lgH5DBjt
R2dBGB7IjlmdfW69ryiKNmFGbQGMCJvjMdDnTOYl01QBApkMaPcEtCqsxiWJkn8x
AOJk1AxI+Fgv5w==
-----END CERTIFICATE-----
Generated at Tue Apr 21 19:08:58 2026 by rpki-client