Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
File: 3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft (raw, json)
Hash identifier: DFOyv4kBA9xnB+iUBvMd/N+OivpOgdyLEAKOOJycJPQ=
Subject key identifier: 0D:66:E9:92:91:2B:D7:F4:6D:8F:34:94:3E:3E:4A:05:A3:A4:C7:3F
Authority key identifier: DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
Certificate issuer: /CN=dd640339e59addc75fd978101b40082b5d2b8796
Certificate serial: 019FFAC8CFB34ACC5E24671A7A4C1DE5A050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
Manifest number: 11E7
Signing time: Thu 13 Aug 2026 11:01:32 +0000
Manifest this update: Thu 13 Aug 2026 11:01:32 +0000
Manifest next update: Fri 14 Aug 2026 11:01:32 +0000
Files and hashes: 1: 1-CWEKe6QSYYXBm5T6xMBPCzX5ao.roa (hash: OJS5BF4vZAK0MWbrUqmSMeUGDPRYp6S9E7QNpVkocFM=)
2: 3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl (hash: aRPaXWtSFbyQ45hZ66Iooba3vXtgVLsRkLzaTKlBJuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:c8:cf:b3:4a:cc:5e:24:67:1a:7a:4c:1d:e5:a0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd640339e59addc75fd978101b40082b5d2b8796
Validity
Not Before: Aug 13 11:01:32 2026 GMT
Not After : Aug 14 11:01:32 2026 GMT
Subject: CN=0d66e992912bd7f46d8f34943e3e4a05a3a4c73f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:29:a5:32:50:05:97:e7:84:f7:d7:40:97:d8:
c1:7f:d6:52:b5:f5:fa:28:4c:d6:6f:46:a0:70:0b:
4b:fc:ac:7a:8d:34:bb:99:a5:f4:af:84:d6:78:bd:
22:71:70:cf:a1:be:9d:b4:79:a5:0f:86:54:b7:83:
a7:c9:be:59:76:9f:68:1d:53:70:56:53:fd:bc:03:
a9:77:19:94:65:57:a7:a0:c1:3d:df:07:ea:32:4f:
55:c0:b0:b5:54:19:2c:62:55:e3:a2:b7:e7:dc:f3:
cb:20:92:26:11:85:99:32:dc:89:11:3e:61:bc:72:
64:8d:48:25:48:70:ee:dc:c1:df:3e:5c:03:84:ce:
cc:a2:71:d9:9f:e8:8a:19:e2:38:f6:c1:cf:15:08:
5f:da:cb:c0:1d:23:cb:7d:24:be:c5:73:bc:b3:63:
06:57:e5:a3:f7:33:ae:86:30:b3:8a:e4:cc:1a:d5:
92:68:e6:3a:bf:ea:2f:99:2a:66:59:44:17:3d:0b:
f8:c6:92:36:76:cd:5e:c4:99:41:c1:72:f4:c9:21:
ee:b0:fc:16:eb:af:7a:d0:67:9b:48:f3:02:fc:6a:
09:7f:d8:a0:3b:40:2c:40:bb:56:7a:ed:37:c5:3d:
5c:49:19:f5:89:93:d6:3c:0c:aa:24:37:74:50:b8:
eb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:66:E9:92:91:2B:D7:F4:6D:8F:34:94:3E:3E:4A:05:A3:A4:C7:3F
X509v3 Authority Key Identifier:
keyid:DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e2:b7:8c:90:f0:72:64:65:d3:c1:a5:47:af:a8:37:15:6a:
0d:84:dc:fe:c7:86:82:75:a5:34:7c:00:a3:f5:86:eb:95:71:
22:e1:fc:e0:0d:90:0f:51:00:f7:63:32:a2:9c:52:47:7c:e3:
f8:08:ac:42:97:26:06:2d:80:78:11:61:59:c9:86:db:17:1b:
a3:9b:66:c0:67:b7:68:10:df:32:49:f7:fa:7b:e9:1a:61:e1:
b7:fc:3a:69:4a:af:af:e2:8d:2c:37:f9:80:fa:13:68:ab:bd:
bd:f4:01:57:8e:26:6c:6c:7c:c8:01:09:3c:67:47:f0:90:e1:
5a:db:a4:e5:65:34:c0:71:04:89:03:b5:c6:d4:08:fc:17:d3:
b6:91:b0:4a:31:cb:79:b8:7e:17:2b:1f:c3:57:d9:85:b0:9b:
78:18:ff:88:be:94:a5:ca:6c:12:01:74:8c:74:7b:4d:be:e9:
25:24:94:b1:72:8d:9c:17:7b:0b:65:f1:25:41:58:ba:ea:f3:
9b:4a:d3:ec:db:51:18:5f:95:26:d5:b7:ad:eb:3a:96:c5:24:
5d:8f:bf:42:5e:ee:26:c4:37:7b:a2:38:e4:fc:07:45:67:ab:
a3:a7:59:5e:91:72:90:89:ed:54:31:bc:87:cb:60:9d:eb:e8:
2c:70:9a:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/6yM+zSsxeJGcaekwd5aBQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNjQwMzM5ZTU5YWRkYzc1ZmQ5NzgxMDFiNDAwODJiNWQy
Yjg3OTYwHhcNMjYwODEzMTEwMTMyWhcNMjYwODE0MTEwMTMyWjAzMTEwLwYDVQQD
EygwZDY2ZTk5MjkxMmJkN2Y0NmQ4ZjM0OTQzZTNlNGEwNWEzYTRjNzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArimlMlAFl+eE99dAl9jBf9ZStfX6
KEzWb0agcAtL/Kx6jTS7maX0r4TWeL0icXDPob6dtHmlD4ZUt4Onyb5Zdp9oHVNw
VlP9vAOpdxmUZVenoME93wfqMk9VwLC1VBksYlXjorfn3PPLIJImEYWZMtyJET5h
vHJkjUglSHDu3MHfPlwDhM7MonHZn+iKGeI49sHPFQhf2svAHSPLfSS+xXO8s2MG
V+Wj9zOuhjCziuTMGtWSaOY6v+ovmSpmWUQXPQv4xpI2ds1exJlBwXL0ySHusPwW
66960GebSPMC/GoJf9igO0AsQLtWeu03xT1cSRn1iZPWPAyqJDd0ULjrHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1m6ZKRK9f0bY80lD4+SgWjpMc/MB8GA1UdIwQY
MBaAFN1kAznlmt3HX9l4EBtACCtdK4eWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1dRRE9lV2EzY2RmMlhnUUcwQUlLMTByaDVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy83NjE2ZTUtYThjYy00NWQxLWIzZDAt
NjFiNzMzNTRhYmRiLzEvM1dRRE9lV2EzY2RmMlhnUUcwQUlLMTByaDVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy83NjE2ZTUtYThjYy00NWQxLWIzZDAtNjFiNzMzNTRhYmRi
LzEvM1dRRE9lV2EzY2RmMlhnUUcwQUlLMTByaDVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKuK3jJDw
cmRl08GlR6+oNxVqDYTc/seGgnWlNHwAo/WG65VxIuH84A2QD1EA92MyopxSR3zj
+AisQpcmBi2AeBFhWcmG2xcbo5tmwGe3aBDfMkn3+nvpGmHht/w6aUqvr+KNLDf5
gPoTaKu9vfQBV44mbGx8yAEJPGdH8JDhWtuk5WU0wHEEiQO1xtQI/BfTtpGwSjHL
ebh+Fysfw1fZhbCbeBj/iL6UpcpsEgF0jHR7Tb7pJSSUsXKNnBd7C2XxJUFYuurz
m0rT7NtRGF+VJtW3res6lsUkXY+/Ql7uJsQ3e6I45PwHRWero6dZXpFykIntVDG8
h8tgnevoLHCaHg==
-----END CERTIFICATE-----
Generated at Thu Aug 13 13:24:11 2026 by rpki-client