Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
File: 3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft (raw, json)
Hash identifier: MZ4EpOFSDxoOGit+qD57Cd/E6K0+qIb6TjyxFtXO0mY=
Subject key identifier: B8:7E:2C:A8:2E:F4:07:70:8C:37:D9:08:1C:AD:BC:B6:F6:C7:F4:02
Authority key identifier: DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
Certificate issuer: /CN=dd640339e59addc75fd978101b40082b5d2b8796
Certificate serial: 01A146F28D7A3EE1C86B2BEF2F7C4E53B252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
Manifest number: 1293
Signing time: Fri 16 Oct 2026 23:01:03 +0000
Manifest this update: Fri 16 Oct 2026 23:01:03 +0000
Manifest next update: Sat 17 Oct 2026 23:01:03 +0000
Files and hashes: 1: 1-CWEKe6QSYYXBm5T6xMBPCzX5ao.roa (hash: OJS5BF4vZAK0MWbrUqmSMeUGDPRYp6S9E7QNpVkocFM=)
2: 3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl (hash: Kj5SMD0yoQHV3woyzRF8zXwLgZWirpIr8I3/T9spxrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:46:f2:8d:7a:3e:e1:c8:6b:2b:ef:2f:7c:4e:53:b2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd640339e59addc75fd978101b40082b5d2b8796
Validity
Not Before: Oct 16 23:01:03 2026 GMT
Not After : Oct 17 23:01:03 2026 GMT
Subject: CN=b87e2ca82ef407708c37d9081cadbcb6f6c7f402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:ce:7b:9c:d7:24:5e:49:83:5c:44:d4:ae:e1:
09:d8:87:06:ee:3a:22:8f:01:3d:07:04:35:cc:41:
7b:02:a3:a4:00:45:11:0a:3b:55:0f:cb:b9:55:84:
52:8d:ba:1d:89:63:8a:d4:fb:98:f0:ce:e7:be:af:
07:10:84:8c:03:2e:c4:2c:b8:7d:ca:26:db:58:04:
ca:c9:d6:7b:b0:67:f7:b9:c0:d6:82:43:69:1a:22:
10:37:fb:d2:ba:5a:9e:eb:f2:44:78:09:05:cc:80:
7f:bb:52:f3:4b:ee:e4:e9:aa:d4:0d:29:73:8f:17:
8f:fc:1f:9d:a2:a9:61:5a:fc:1f:c4:b9:68:21:79:
1f:d8:fa:ab:f3:cf:2a:71:ae:74:c6:d6:1b:09:76:
48:8d:8c:df:57:da:52:40:93:2b:27:b1:82:fd:7a:
a3:8e:c5:5c:a9:8f:19:55:7d:65:5b:02:e7:c8:9c:
46:41:c9:7a:36:99:85:f2:d6:b8:d3:aa:0c:9a:64:
fa:e1:8d:09:82:b6:56:84:f5:0f:d5:1e:f0:a2:c7:
d4:1a:80:a6:ad:5b:c8:26:fd:67:1a:ad:9a:74:2f:
a3:4e:da:9c:13:ad:4f:02:a0:d0:ad:0f:63:23:f2:
2c:6c:72:96:9e:f7:6a:ec:05:0a:ce:4c:d8:ba:12:
43:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7E:2C:A8:2E:F4:07:70:8C:37:D9:08:1C:AD:BC:B6:F6:C7:F4:02
X509v3 Authority Key Identifier:
keyid:DD:64:03:39:E5:9A:DD:C7:5F:D9:78:10:1B:40:08:2B:5D:2B:87:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQDOeWa3cdf2XgQG0AIK10rh5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7616e5-a8cc-45d1-b3d0-61b73354abdb/1/3WQDOeWa3cdf2XgQG0AIK10rh5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:c5:c5:96:47:79:eb:9d:2e:c4:55:9f:f2:67:7d:cf:5e:54:
ee:ad:06:ca:30:54:ba:23:02:89:63:9c:37:82:cb:4b:c4:c6:
1a:12:a2:99:3a:cb:99:c2:5d:5d:03:04:bc:61:cb:2e:60:8b:
82:5b:bf:17:73:16:a8:d6:d0:9c:bf:09:3a:ba:e1:74:53:22:
db:db:69:6e:79:ae:79:8d:1d:57:d9:15:20:8a:55:76:7c:d5:
4e:21:1d:95:94:5e:ff:cb:13:e1:13:f1:a0:91:cb:2e:16:0a:
b4:74:22:e8:bf:d9:e5:25:4a:10:f5:2c:e7:f7:c9:2a:1c:03:
3c:be:e2:a5:eb:a1:8c:bd:9c:4b:6b:db:46:30:2e:67:d8:c9:
ed:4a:32:ec:d5:c5:70:ae:45:7a:e0:81:77:ff:53:5a:86:2d:
3e:34:fc:8f:09:e4:d2:73:15:ab:f6:7e:10:5b:7c:98:5a:b2:
46:16:d1:b2:cf:d0:69:d1:a8:6f:a2:41:48:50:ac:74:39:60:
b1:a7:db:3b:a3:7f:38:f7:8c:f2:6d:bc:70:c7:a2:cc:bb:49:
17:f1:fd:52:ce:f5:84:43:12:ce:24:03:de:e1:1f:cc:8c:e5:
bb:71:85:d1:bf:bc:e0:49:d3:b8:62:06:e8:4a:0d:d1:29:5a:
12:e0:20:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:58:54 2026 by rpki-client