Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
File: 3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft (raw, json)
Hash identifier: tFmKqOMGL2pB1goIiIfGr4MwAHeSoUlfxNViMISLO+c=
Subject key identifier: D8:62:7B:20:21:6E:F4:EE:78:DD:91:98:74:A3:CC:D8:71:23:16:5F
Authority key identifier: DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
Certificate issuer: /CN=dd640339e59addc75fd978101b40082b5d2b8796
Certificate serial: 019F111C63590978CB91FC0ECF19BDA7442D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
Manifest number: 116D
Signing time: Mon 29 Jun 2026 02:01:40 +0000
Manifest this update: Mon 29 Jun 2026 02:01:40 +0000
Manifest next update: Tue 30 Jun 2026 02:01:40 +0000
Files and hashes: 1: 3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl (hash: j1cxEzDWsELFlIW/l1I7b65jHeXCaSDlZIzQIe3OqNY=)
2: MxA928FQcjAkVCSjwwJv4JJaR-k.roa (hash: 5QkknIrAdDlN1xL+joC+ThR26We1aMoSSm0KuEF+lcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:1c:63:59:09:78:cb:91:fc:0e:cf:19:bd:a7:44:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd640339e59addc75fd978101b40082b5d2b8796
Validity
Not Before: Jun 29 02:01:40 2026 GMT
Not After : Jun 30 02:01:40 2026 GMT
Subject: CN=d8627b20216ef4ee78dd919874a3ccd87123165f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d5:26:ac:af:7a:07:be:5b:8b:96:5c:e8:5c:
a1:13:c8:00:e8:8a:86:9b:e1:5c:46:79:3e:70:4f:
06:e0:88:10:40:00:65:77:3b:ae:6e:69:d0:e8:90:
32:54:d4:12:aa:44:4b:45:44:64:d7:79:25:c5:a9:
9a:ac:53:d2:93:ef:27:8b:bf:20:66:04:56:37:43:
bc:a8:77:7a:7c:68:ee:3b:a7:10:73:07:a2:70:4f:
2d:23:c2:2d:07:37:dd:37:5e:ef:41:47:31:b7:c1:
b8:57:12:fc:d2:fc:5f:2f:45:58:c0:9e:55:f3:4b:
9f:6c:bc:cf:d2:2a:14:be:dd:18:3f:18:13:65:0e:
7c:65:db:a2:ea:a4:06:73:83:b3:f7:3a:5e:70:eb:
0e:28:b2:1f:30:89:2f:87:01:75:64:6a:20:c2:2f:
84:d8:f3:03:8a:68:24:cf:77:3d:90:53:5d:b8:fd:
ec:18:6b:51:c3:d3:96:c0:8b:06:57:9c:65:f5:66:
be:9b:ec:82:25:77:90:af:4b:2f:cd:03:03:d2:7f:
f2:f9:2d:93:3e:e8:52:b7:cd:21:78:09:15:fa:21:
a8:89:d7:58:90:cc:36:21:37:b1:42:4c:83:92:e9:
24:59:66:8c:43:20:a4:34:b8:a0:3a:d1:ba:38:29:
32:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:62:7B:20:21:6E:F4:EE:78:DD:91:98:74:A3:CC:D8:71:23:16:5F
X509v3 Authority Key Identifier:
keyid:DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:82:b7:4b:9c:08:25:f2:9d:1a:45:38:d4:31:20:6d:6b:ac:
94:a3:94:70:96:33:89:e8:75:f6:50:ec:fc:cf:a0:e8:03:ad:
21:e3:21:4a:85:a5:23:23:db:5a:eb:88:31:86:b8:67:73:e5:
18:27:ef:88:26:da:17:78:06:ec:84:23:4e:79:3d:c5:ba:59:
9e:72:e8:17:b2:18:9b:82:69:dc:e2:b2:31:1a:ef:49:1b:47:
0a:09:88:60:35:8e:2e:e1:f9:ee:16:24:e5:e2:90:ce:ef:53:
ed:dd:2a:f4:82:ef:e4:fd:d6:f9:df:30:a9:c8:41:27:b2:dc:
04:35:2a:5d:9f:7a:27:b4:f3:7c:9a:3c:af:6c:76:1c:a9:30:
dc:de:b6:54:6f:07:83:a9:f5:36:7f:b1:8f:81:e5:2b:8d:6b:
d6:02:c7:87:a8:7e:4b:62:53:ce:84:f4:25:5a:dc:3b:e8:b5:
a9:10:3f:75:5a:35:30:7f:f4:5d:d8:d4:0d:e3:95:18:af:20:
88:94:ac:0d:c5:d0:48:5b:13:8f:b2:35:0d:36:64:a2:6e:e3:
9b:e3:58:19:f4:ad:31:cb:39:aa:3e:25:f4:26:dc:6d:b8:99:
48:d1:a1:c2:07:05:11:0b:d7:58:39:da:e4:d1:d3:57:a4:ec:
87:31:6e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:09:39 2026 by rpki-client