Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
File: 3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft (raw, json)
Hash identifier: J0QHS0iON+5rYhY/H6mmBALJiO++j5ePRwkfTPIHs5w=
Subject key identifier: 91:D1:5F:5B:57:FF:7E:EE:FC:DC:24:BC:DE:94:0A:68:66:EF:DB:36
Authority key identifier: DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
Certificate issuer: /CN=dd640339e59addc75fd978101b40082b5d2b8796
Certificate serial: 019E29CC1CA329EFDA97FFC340077ECA4E27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
Manifest number: 10F5
Signing time: Fri 15 May 2026 04:01:43 +0000
Manifest this update: Fri 15 May 2026 04:01:43 +0000
Manifest next update: Sat 16 May 2026 04:01:43 +0000
Files and hashes: 1: 3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl (hash: Ew47nxYbUbZ9+HhC4nyXUU18o1hnEktSlYI/unLfYA4=)
2: 41nL5ZV4qJFS5Q2xxQRuLMPoip0.roa (hash: BJiNQu65WQwhnTLfbv69MpyE5IwMrQPr3mJhDc7s1uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:cc:1c:a3:29:ef:da:97:ff:c3:40:07:7e:ca:4e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd640339e59addc75fd978101b40082b5d2b8796
Validity
Not Before: May 15 04:01:43 2026 GMT
Not After : May 16 04:01:43 2026 GMT
Subject: CN=91d15f5b57ff7eeefcdc24bcde940a6866efdb36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1b:fc:09:8d:d6:f3:24:4b:4a:47:36:81:c5:
63:e5:01:c4:a6:68:a0:92:ce:45:7d:1d:3c:6b:c5:
d4:51:80:2b:32:f1:91:5a:9d:cd:51:c9:bc:b0:a1:
2d:40:16:dd:0a:a5:9f:b5:4c:44:5e:e7:e5:3d:a1:
5a:ed:78:94:64:35:d8:bd:1b:95:ab:7e:b9:9f:e5:
f5:c4:3a:d2:64:e3:01:53:13:43:f4:27:49:91:92:
94:d8:a0:06:6c:ce:4e:ee:a4:fa:fd:14:b5:2a:b6:
5b:54:32:e4:47:67:e8:ae:68:48:73:e1:63:ce:30:
93:38:18:4b:75:ff:0a:bb:6b:6c:f3:d1:a8:b8:0c:
36:32:13:13:90:5b:a7:f5:47:da:19:1c:42:40:e3:
67:3d:89:c7:ce:75:22:f0:7b:c8:4d:5e:2e:38:ea:
b7:44:25:a8:f5:e3:ef:ee:70:86:e8:12:f7:c6:2c:
2f:29:ec:69:13:a9:86:f2:01:dc:50:a2:9e:6f:51:
b4:c6:cb:7c:49:39:06:f2:f7:ae:15:d7:6f:6e:ad:
18:96:3d:2e:2a:9b:b9:00:5f:13:08:1e:7b:3a:dc:
90:36:f8:d9:aa:17:05:4e:b9:03:60:e1:4b:ba:aa:
35:eb:1f:cd:74:bb:4e:52:86:f1:13:44:e3:57:54:
22:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D1:5F:5B:57:FF:7E:EE:FC:DC:24:BC:DE:94:0A:68:66:EF:DB:36
X509v3 Authority Key Identifier:
keyid:DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a1:23:84:35:02:f9:f2:ca:bf:ee:dc:ca:06:f5:6a:5e:77:
bd:2d:07:2b:6e:a7:2e:54:11:ab:c9:a5:7b:ac:55:a7:0b:ec:
59:b9:cf:79:61:c5:1b:da:83:4e:6d:7b:d5:8e:bd:17:6e:fa:
f4:3c:3d:e9:49:21:66:f8:2a:5e:f0:8f:d9:c9:9f:bf:09:e5:
7c:9c:98:aa:fa:0c:44:0f:39:74:05:df:6c:08:5f:a5:2a:f0:
dd:01:70:49:9e:24:1f:94:84:67:c9:a0:e5:bc:c7:f1:ba:ff:
eb:69:84:fb:4d:4a:68:60:47:27:b8:07:ec:ee:25:6f:63:e3:
ab:f5:17:20:6c:af:a5:a6:ae:f4:c4:53:81:dd:3b:34:42:07:
de:36:ed:21:f6:26:48:38:b6:ef:75:23:31:06:4d:84:5a:ca:
a2:56:c8:c9:80:9c:c6:52:d5:38:8b:74:22:d8:aa:2d:66:98:
05:fc:ec:84:3d:58:20:60:e4:e2:c6:0b:b3:8a:22:84:53:e8:
99:33:32:cf:d1:f3:49:54:b7:b7:45:45:e9:3e:2d:d6:e6:fe:
6b:12:28:98:d5:48:d8:8e:e2:11:3c:c2:c6:a2:d0:ec:c4:3c:
da:db:79:e6:c5:2e:a2:b2:10:5d:27:db:ef:c0:1f:1a:5e:ef:
52:b3:d9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 09:51:16 2026 by rpki-client