Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
File: 3W5w5DbhwCWqDg4_uoUrmK07hBA.mft (raw, json)
Hash identifier: z+UgKYvORdgrqrL/zXtfseW3oe+7K2YBrCL96Fefiw4=
Subject key identifier: 5D:9D:EF:92:3D:A8:39:A0:ED:53:FC:94:62:E0:94:94:F0:1D:15:3F
Authority key identifier: DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
Certificate issuer: /CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Certificate serial: 01A001014F9259A895831BC44EE664A0269C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
Manifest number: 10E5
Signing time: Fri 14 Aug 2026 16:00:58 +0000
Manifest this update: Fri 14 Aug 2026 16:00:58 +0000
Manifest next update: Sat 15 Aug 2026 16:00:58 +0000
Files and hashes: 1: 3W5w5DbhwCWqDg4_uoUrmK07hBA.crl (hash: 4pc60hMKIqbnOVXKkDjkDMRIGVQ9sSox3pQLuN+fd4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:4f:92:59:a8:95:83:1b:c4:4e:e6:64:a0:26:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Validity
Not Before: Aug 14 16:00:58 2026 GMT
Not After : Aug 15 16:00:58 2026 GMT
Subject: CN=5d9def923da839a0ed53fc9462e09494f01d153f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5a:a1:9a:d5:25:0f:47:39:59:f1:88:75:b9:
02:ab:3b:1d:a2:ed:9e:d2:43:52:64:0b:04:06:be:
a7:cf:41:6c:6c:e3:e7:d9:ee:98:63:a3:01:03:99:
e0:c5:b4:c2:e7:b9:75:00:e9:ea:e7:6d:35:56:b1:
10:54:68:de:93:50:fa:2c:6d:3b:84:0c:45:e1:5f:
6a:2d:d1:64:d3:75:b8:d9:91:54:09:96:ab:87:46:
47:e1:46:7f:d6:55:a6:c8:6a:8b:c2:a8:4d:64:29:
a2:ff:72:e9:be:9f:45:8e:2a:8e:97:2e:88:be:4a:
f6:73:13:89:cc:73:ed:fc:d2:a3:c7:a1:5a:58:9a:
9a:40:5f:5d:5a:be:67:b0:00:82:ae:cb:0f:d8:1a:
44:bb:86:8a:ff:2b:a9:3d:2f:d7:95:79:cd:f3:32:
ba:ef:c1:9e:33:cc:37:12:c9:4e:6b:0d:b5:bf:e3:
8f:e0:b8:e6:ce:41:68:75:a2:be:87:cd:1f:89:27:
e7:a9:55:41:e2:c6:eb:17:90:81:72:21:5b:d2:75:
53:62:dd:5f:90:10:5e:f5:df:49:47:b7:e6:65:e4:
e8:11:66:da:5e:31:cf:47:4a:55:2a:10:a8:ed:c0:
ad:da:52:2c:d4:dc:12:77:0e:71:83:bd:70:f4:f7:
dd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9D:EF:92:3D:A8:39:A0:ED:53:FC:94:62:E0:94:94:F0:1D:15:3F
X509v3 Authority Key Identifier:
keyid:DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:15:b5:96:c5:1c:be:50:e7:f0:44:b8:b0:28:aa:f6:76:91:
b0:ed:5a:97:e3:66:e3:af:97:1d:7b:a9:a5:33:fa:ab:d7:cb:
94:b0:06:3a:d8:9a:82:be:d3:c3:95:68:9b:5d:3d:21:95:6f:
a8:1e:3d:7e:f7:d5:0c:c0:c6:83:80:32:f0:c6:e7:4d:01:66:
e2:02:e9:47:28:9e:65:7e:01:d6:6f:b9:8e:7c:a3:b5:85:e7:
1f:52:ca:3e:6a:50:2c:f4:e7:ec:f5:06:24:12:fb:57:2f:db:
61:4b:f7:ac:6d:91:9e:4f:b2:50:b8:6b:f2:d2:f8:bd:00:b6:
c3:a9:9c:be:93:3a:13:b2:61:2d:bd:b5:19:7f:57:ab:ee:b1:
3e:47:fa:84:55:fe:a7:a5:52:b1:3f:57:37:ad:f8:b7:94:39:
f2:9a:1d:11:43:f8:f3:48:cb:77:70:ba:d2:84:b7:9f:f0:c9:
e3:b0:03:c7:f0:f9:97:6e:4d:cb:ba:4b:56:7b:49:99:e7:9c:
ac:c8:1e:4d:fa:f6:71:b1:e8:4f:de:0c:48:b5:ee:bf:34:ed:
d4:8e:22:d1:a0:53:61:fe:30:8e:16:5a:76:d2:b6:e0:0a:84:
b5:7d:4f:8d:d3:84:75:aa:ab:a1:77:76:97:f9:91:7c:02:f7:
0f:52:3e:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABAU+SWaiVgxvETuZkoCacMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNmU3MGU0MzZlMWMwMjVhYTBlMGUzZmJhODUyYjk4YWQz
Yjg0MTAwHhcNMjYwODE0MTYwMDU4WhcNMjYwODE1MTYwMDU4WjAzMTEwLwYDVQQD
Eyg1ZDlkZWY5MjNkYTgzOWEwZWQ1M2ZjOTQ2MmUwOTQ5NGYwMWQxNTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVqhmtUlD0c5WfGIdbkCqzsdou2e
0kNSZAsEBr6nz0FsbOPn2e6YY6MBA5ngxbTC57l1AOnq5201VrEQVGjek1D6LG07
hAxF4V9qLdFk03W42ZFUCZarh0ZH4UZ/1lWmyGqLwqhNZCmi/3Lpvp9FjiqOly6I
vkr2cxOJzHPt/NKjx6FaWJqaQF9dWr5nsACCrssP2BpEu4aK/yupPS/XlXnN8zK6
78GeM8w3EslOaw21v+OP4LjmzkFodaK+h80fiSfnqVVB4sbrF5CBciFb0nVTYt1f
kBBe9d9JR7fmZeToEWbaXjHPR0pVKhCo7cCt2lIs1NwSdw5xg71w9Pfd+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2d75I9qDmg7VP8lGLglJTwHRU/MB8GA1UdIwQY
MBaAFN1ucOQ24cAlqg4OP7qFK5itO4QQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1c1dzVEYmh3Q1dxRGc0X3VvVXJtSzA3aEJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9iNmFmYmItNWE2Yi00MzQ1LTkwYWUt
N2I2MWE2OTVkMTMyLzEvM1c1dzVEYmh3Q1dxRGc0X3VvVXJtSzA3aEJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9iNmFmYmItNWE2Yi00MzQ1LTkwYWUtN2I2MWE2OTVkMTMy
LzEvM1c1dzVEYmh3Q1dxRGc0X3VvVXJtSzA3aEJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJRW1lsUc
vlDn8ES4sCiq9naRsO1al+Nm46+XHXuppTP6q9fLlLAGOtiagr7Tw5Vom109IZVv
qB49fvfVDMDGg4Ay8MbnTQFm4gLpRyieZX4B1m+5jnyjtYXnH1LKPmpQLPTn7PUG
JBL7Vy/bYUv3rG2Rnk+yULhr8tL4vQC2w6mcvpM6E7JhLb21GX9Xq+6xPkf6hFX+
p6VSsT9XN634t5Q58podEUP480jLd3C60oS3n/DJ47ADx/D5l25Ny7pLVntJmeec
rMgeTfr2cbHoT94MSLXuvzTt1I4i0aBTYf4wjhZadtK24AqEtX1PjdOEdaqroXd2
l/mRfAL3D1I+hw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:58 2026 by rpki-client