Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
File: 3WQWapEXkwjyU6kXVhbMxoKMRGM.mft (raw, json)
Hash identifier: tNLWKzoCbH7nKGp/Ky3KVslDzpWtcWs7rXspap/liWs=
Subject key identifier: B3:7F:DD:CA:EE:8E:D2:7B:6A:A6:A2:CE:1A:CA:F1:42:DC:83:0A:62
Authority key identifier: DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
Certificate issuer: /CN=dd64166a91179308f253a9175616ccc6828c4463
Certificate serial: 019D3978123A52ED1C23EA0FF0F1E2C15770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
Manifest number: 0305
Signing time: Sun 29 Mar 2026 12:01:03 +0000
Manifest this update: Sun 29 Mar 2026 12:01:03 +0000
Manifest next update: Mon 30 Mar 2026 12:01:03 +0000
Files and hashes: 1: 3WQWapEXkwjyU6kXVhbMxoKMRGM.crl (hash: 4/tQzN7ysL21soc0z5RXSnv5nHWHozFMuB1C72igKFg=)
2: 9GlAd--ziJn6zEERuSI1wMxCVUI.roa (hash: yW98a8lXMRGOAvXCAcelUQyydp3bl59KXdnIoFgiRQU=)
3: P3KJe-KpvIfVnSus9dYEd9IB5is.roa (hash: yzKFnPXT/yf225Fng2cCAnIlvWFQn++5Nl5/aoZu65M=)
4: b3m-2mGJNe4d4cYhhMKL2hutIBY.roa (hash: VFpxrLor0/kl7tjGcbBC6hfUr2SDw3xOvK2qT2usj7g=)
5: e4sjM1fXWk_A_ZzXaZBRZzVlSZE.roa (hash: 5c/2d20TsHc5uK5yVLQ9OB9Bt6Agm7Sts7MBlakKwT8=)
6: e5LvhMnHL2M5G3BrE94Wfd_Hw30.roa (hash: fkj3hwgOelPzkmjhksY0UuW0XF+MqihAQUzut5E2VZk=)
7: kx4dGEV1WCVdxmXSMMr56j_3lbs.roa (hash: /AeCPUE+7U+x0eAWjMncSzT2rSFqU0vKvVwI+dTpmZs=)
8: rFwq2nzQIEZ5NhQDePRqPCbQDko.roa (hash: bEqUY1ErOtavF/ybp/ETS33kos0+WHhMLq9SxRm4BB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:12:3a:52:ed:1c:23:ea:0f:f0:f1:e2:c1:57:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd64166a91179308f253a9175616ccc6828c4463
Validity
Not Before: Mar 29 12:01:03 2026 GMT
Not After : Mar 30 12:01:03 2026 GMT
Subject: CN=b37fddcaee8ed27b6aa6a2ce1acaf142dc830a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cb:64:eb:0a:76:96:19:7f:08:f4:bc:aa:71:
de:d0:c3:65:59:93:0f:74:ef:2f:81:c0:31:c0:20:
2c:2d:2d:68:55:9a:ad:fa:ee:13:85:9f:14:5b:f4:
db:f1:c7:89:c7:da:75:29:39:62:3b:e7:49:be:de:
39:52:ae:4c:79:8e:fe:7e:10:98:0a:ab:15:03:75:
34:83:84:27:be:86:93:9a:1a:1f:d4:d6:f5:3a:c7:
0f:9a:31:41:e3:04:90:40:15:68:e4:ba:b3:47:b5:
05:7a:79:f2:e0:24:ab:bd:42:7c:ab:e9:f3:df:be:
20:f5:3c:dd:ac:aa:40:2f:8a:a9:7d:c1:a4:12:c5:
2f:dc:c3:52:b5:c2:bd:85:98:82:d1:d3:4a:78:32:
bb:4c:c5:35:29:fd:97:d8:cc:6e:17:2b:66:ae:af:
54:32:eb:fb:fb:44:06:9b:93:bf:0b:f8:a4:04:9d:
41:b4:8a:7a:47:90:48:28:d2:6d:93:08:4f:b1:61:
67:fe:94:50:3d:c7:d4:17:8a:a9:d1:38:ad:98:a0:
41:7d:e8:fe:de:56:ce:04:c2:62:a6:65:1e:b9:71:
e9:56:c9:10:97:0f:fc:ee:f3:ae:ea:16:8f:f9:2b:
c7:dc:02:0c:01:6e:0d:bc:c2:ec:ef:18:a6:23:66:
6e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7F:DD:CA:EE:8E:D2:7B:6A:A6:A2:CE:1A:CA:F1:42:DC:83:0A:62
X509v3 Authority Key Identifier:
keyid:DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ca:30:a8:c8:96:ae:b5:7c:4a:0e:dd:17:e2:b7:5c:21:ce:
b7:22:18:a2:77:8c:6a:15:aa:5d:8f:93:8f:3b:3e:7c:66:a4:
1d:8d:b1:04:ca:91:ab:5b:4d:42:1f:09:c8:70:3e:13:b5:52:
04:4b:1e:37:4d:91:26:b8:cb:85:59:e4:0d:86:ae:31:e1:ff:
56:6c:9e:58:90:06:01:0e:15:81:26:d8:b1:30:46:dc:f3:bb:
39:f0:87:14:68:06:a3:9d:ff:d4:4d:17:01:97:10:73:a2:7d:
cf:2c:ca:df:ab:e4:e1:ca:cb:95:37:c6:a8:a9:1f:14:64:7a:
ad:8a:dc:cc:59:77:36:54:4c:5c:9e:41:d4:02:3c:23:92:26:
28:07:75:c0:03:af:bf:ef:57:6b:60:6b:d2:1a:99:67:ee:90:
54:13:bf:be:ea:75:e7:e5:9e:7f:71:b7:84:93:e6:ed:0c:39:
64:a4:d9:e3:67:2d:86:84:6a:f3:7c:9c:e1:14:74:79:81:f5:
69:50:ae:aa:bf:6e:de:69:04:86:5f:4d:9a:9e:69:24:81:74:
fd:a0:23:7c:9b:d6:70:0d:86:d3:e3:77:cc:a1:8c:fc:b1:d9:
25:dc:7a:27:2b:69:78:94:d7:ed:bf:33:f9:35:1d:92:14:c4:
8a:71:d5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:53:11 2026 by rpki-client