Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/2a1d35-6e31-40e6-94b4-4ac856a8182d/1/3YXca2FDoX_rSYIOpSAEiVj0itw.mft
File: 3YXca2FDoX_rSYIOpSAEiVj0itw.mft (raw, json)
Hash identifier: yO+l6IJ/A6k3qWPra6WuyLscF8OCqTn0GeK3hmgUXDM=
Subject key identifier: AA:E1:60:9B:0A:07:62:BB:51:AC:0E:B7:17:DC:6D:D0:76:A5:C6:7D
Authority key identifier: DD:85:DC:6B:61:43:A1:7F:EB:49:82:0E:A5:20:04:89:58:F4:8A:DC
Certificate issuer: /CN=dd85dc6b6143a17feb49820ea520048958f48adc
Certificate serial: 01A001DD6CABD332E9484A2C0C4408296547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YXca2FDoX_rSYIOpSAEiVj0itw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/2a1d35-6e31-40e6-94b4-4ac856a8182d/1/3YXca2FDoX_rSYIOpSAEiVj0itw.mft
Manifest number: 149B
Signing time: Fri 14 Aug 2026 20:01:23 +0000
Manifest this update: Fri 14 Aug 2026 20:01:23 +0000
Manifest next update: Sat 15 Aug 2026 20:01:23 +0000
Files and hashes: 1: 3YXca2FDoX_rSYIOpSAEiVj0itw.crl (hash: IZiYbtBexS33bNcLRbLPKLp1Nnh9H0ikuPgieea0VcQ=)
2: BsyNzVaxxAwnI04Dd9aOhMe6ucE.roa (hash: 0aNXoEKl0ws+Toia/ObhW+i07V56stDq9dLrY8oS6mU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/2a1d35-6e31-40e6-94b4-4ac856a8182d/1/3YXca2FDoX_rSYIOpSAEiVj0itw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/2a1d35-6e31-40e6-94b4-4ac856a8182d/1/3YXca2FDoX_rSYIOpSAEiVj0itw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3YXca2FDoX_rSYIOpSAEiVj0itw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:6c:ab:d3:32:e9:48:4a:2c:0c:44:08:29:65:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd85dc6b6143a17feb49820ea520048958f48adc
Validity
Not Before: Aug 14 20:01:23 2026 GMT
Not After : Aug 15 20:01:23 2026 GMT
Subject: CN=aae1609b0a0762bb51ac0eb717dc6dd076a5c67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:99:eb:71:32:34:f4:9d:26:6c:74:9d:b2:a5:
8b:48:26:54:49:c8:c4:2b:6e:71:eb:6d:90:20:fc:
15:78:c8:c6:40:1f:a9:e9:b9:24:33:16:da:f1:7d:
82:35:34:d7:25:f8:60:1a:42:6c:f6:37:aa:db:f7:
7b:3c:3d:aa:82:db:eb:cb:82:92:51:9d:b5:02:8b:
96:af:31:71:ba:87:bd:b3:ec:27:c9:51:39:71:c6:
96:d6:36:31:85:80:01:fc:91:06:b9:4b:ca:78:75:
cf:69:2a:3c:d9:8f:cb:c2:16:2d:34:75:50:f6:c6:
0b:eb:1d:11:bb:78:ad:43:a4:03:b5:ae:54:75:a8:
3a:5a:a4:15:02:e5:19:bd:3c:39:ea:f2:f8:6e:a9:
a2:8d:1c:3f:8e:8e:7e:98:4b:11:24:32:17:72:78:
d1:4f:4b:d3:c8:e4:3a:ae:8f:c5:b3:f6:b4:9f:5d:
90:08:a5:e0:20:f5:de:18:8e:34:0e:ae:31:44:fd:
67:ac:ba:e4:ff:13:38:11:7e:ee:9b:91:28:d6:1f:
0b:b8:e5:be:f1:9d:d2:8d:9f:58:4d:a1:58:b4:93:
cf:96:21:3f:5d:65:4e:d3:d8:10:51:18:6f:ff:07:
55:7c:e3:ed:23:44:af:fc:6d:71:eb:78:78:5e:e2:
a3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E1:60:9B:0A:07:62:BB:51:AC:0E:B7:17:DC:6D:D0:76:A5:C6:7D
X509v3 Authority Key Identifier:
keyid:DD:85:DC:6B:61:43:A1:7F:EB:49:82:0E:A5:20:04:89:58:F4:8A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YXca2FDoX_rSYIOpSAEiVj0itw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2a1d35-6e31-40e6-94b4-4ac856a8182d/1/3YXca2FDoX_rSYIOpSAEiVj0itw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2a1d35-6e31-40e6-94b4-4ac856a8182d/1/3YXca2FDoX_rSYIOpSAEiVj0itw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:73:42:3a:51:7a:71:8e:6e:f0:2c:d5:d1:93:42:d4:f9:5b:
ed:45:b2:26:29:7d:60:42:f0:2c:1b:e2:ee:25:5e:c6:3f:60:
70:a5:09:f5:62:f8:f2:da:f8:bc:39:da:e0:bd:2c:32:7b:0d:
a6:f7:c4:b0:80:c0:31:ae:f1:97:8e:0f:7e:8e:e7:49:b7:42:
c6:34:3d:35:67:a4:ce:96:8d:9c:24:fb:08:06:e1:66:7e:ce:
2e:d7:46:81:05:24:da:41:6c:63:78:fd:1e:6f:b9:d8:cc:a7:
9d:1f:5d:dc:8b:91:25:4f:d0:34:41:a2:a9:e2:4f:3e:6a:c8:
c3:88:ae:7a:e9:d4:54:70:fe:9d:55:22:50:1b:96:3a:2b:a3:
db:b9:e3:d4:96:34:c6:a5:9b:80:55:c8:4d:02:53:0a:1c:a1:
be:e4:e8:79:0f:97:2d:36:37:ba:cb:41:c2:7f:06:d7:c5:a7:
4c:78:8a:9e:57:6b:d2:16:0f:61:41:d3:93:e2:4a:b9:99:5e:
3a:10:ef:97:9c:e7:e4:db:ec:3b:7d:18:21:29:ab:dd:4d:50:
3e:ab:f1:fe:bd:94:dc:fc:64:2f:7e:71:bd:8a:a9:d7:0c:ae:
fc:01:b1:b8:55:c8:d4:f9:7b:de:57:76:47:9c:95:54:de:94:
50:60:cf:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAB3Wyr0zLpSEosDEQIKWVHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkODVkYzZiNjE0M2ExN2ZlYjQ5ODIwZWE1MjAwNDg5NThm
NDhhZGMwHhcNMjYwODE0MjAwMTIzWhcNMjYwODE1MjAwMTIzWjAzMTEwLwYDVQQD
EyhhYWUxNjA5YjBhMDc2MmJiNTFhYzBlYjcxN2RjNmRkMDc2YTVjNjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5nrcTI09J0mbHSdsqWLSCZUScjE
K25x622QIPwVeMjGQB+p6bkkMxba8X2CNTTXJfhgGkJs9jeq2/d7PD2qgtvry4KS
UZ21AouWrzFxuoe9s+wnyVE5ccaW1jYxhYAB/JEGuUvKeHXPaSo82Y/LwhYtNHVQ
9sYL6x0Ru3itQ6QDta5Udag6WqQVAuUZvTw56vL4bqmijRw/jo5+mEsRJDIXcnjR
T0vTyOQ6ro/Fs/a0n12QCKXgIPXeGI40Dq4xRP1nrLrk/xM4EX7um5Eo1h8LuOW+
8Z3SjZ9YTaFYtJPPliE/XWVO09gQURhv/wdVfOPtI0Sv/G1x63h4XuKjFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKrhYJsKB2K7UawOtxfcbdB2pcZ9MB8GA1UdIwQY
MBaAFN2F3GthQ6F/60mCDqUgBIlY9IrcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1lYY2EyRkRvWF9yU1lJT3BTQUVpVmowaXR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8yYTFkMzUtNmUzMS00MGU2LTk0YjQt
NGFjODU2YTgxODJkLzEvM1lYY2EyRkRvWF9yU1lJT3BTQUVpVmowaXR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8yYTFkMzUtNmUzMS00MGU2LTk0YjQtNGFjODU2YTgxODJk
LzEvM1lYY2EyRkRvWF9yU1lJT3BTQUVpVmowaXR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtXNCOlF6
cY5u8CzV0ZNC1Plb7UWyJil9YELwLBvi7iVexj9gcKUJ9WL48tr4vDna4L0sMnsN
pvfEsIDAMa7xl44Pfo7nSbdCxjQ9NWekzpaNnCT7CAbhZn7OLtdGgQUk2kFsY3j9
Hm+52MynnR9d3IuRJU/QNEGiqeJPPmrIw4iueunUVHD+nVUiUBuWOiuj27nj1JY0
xqWbgFXITQJTChyhvuToeQ+XLTY3ustBwn8G18WnTHiKnldr0hYPYUHTk+JKuZle
OhDvl5zn5NvsO30YISmr3U1QPqvx/r2U3PxkL35xvYqp1wyu/AGxuFXI1Pl73ld2
R5yVVN6UUGDPMg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:02 2026 by rpki-client