Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
File: 3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft (raw, json)
Hash identifier: dF/2aZDD6xmFQnsOtMxmK3GhiGqzmCUGAdQmI8vikzw=
Subject key identifier: CA:DB:B1:FB:03:41:79:08:B0:7D:EA:42:1F:D8:B0:6A:3D:76:3D:C9
Authority key identifier: DC:36:63:1C:A2:0E:C9:2D:19:5C:16:A8:D7:0A:63:F3:72:E5:9F:24
Certificate issuer: /CN=dc36631ca20ec92d195c16a8d70a63f372e59f24
Certificate serial: 019E1CB515868D1E6BF137B769EEDB43E119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
Manifest number: 083C
Signing time: Tue 12 May 2026 15:01:29 +0000
Manifest this update: Tue 12 May 2026 15:01:29 +0000
Manifest next update: Wed 13 May 2026 15:01:29 +0000
Files and hashes: 1: 3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl (hash: msbvYYc+pbHoxuyq9wXbrDPzt/uxXt9ee9DIcG8w6Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:15:86:8d:1e:6b:f1:37:b7:69:ee:db:43:e1:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc36631ca20ec92d195c16a8d70a63f372e59f24
Validity
Not Before: May 12 15:01:29 2026 GMT
Not After : May 13 15:01:29 2026 GMT
Subject: CN=cadbb1fb03417908b07dea421fd8b06a3d763dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c3:7a:c2:30:59:2d:f4:95:19:12:de:31:5e:
fe:7e:9a:81:d0:be:80:a0:13:fa:26:26:a3:8c:35:
d0:7f:99:81:7d:31:2e:a0:96:cd:9e:8c:44:38:d0:
9b:33:d3:a9:a1:83:c3:53:9c:0b:33:2d:03:eb:38:
8a:1f:b7:21:24:de:90:52:d6:d8:a8:82:cc:57:8d:
25:f3:80:e9:ae:cd:33:93:38:85:9a:fc:a8:72:76:
5c:91:d3:3e:b7:a6:1e:8d:af:b3:8b:68:80:78:c9:
95:16:aa:6a:6e:15:e5:03:b9:54:40:63:9a:d2:46:
78:59:e9:18:ac:57:1d:16:a9:ba:b6:2c:6a:79:99:
55:1e:e4:fa:44:ec:6e:53:30:20:a3:68:d7:47:84:
e0:72:31:c6:bf:cf:ba:79:d7:02:27:11:58:77:41:
c0:2d:11:dd:b7:5b:1e:c5:71:fe:c2:fb:f7:16:83:
da:ea:51:cd:f6:34:25:fd:cd:9c:66:7e:0a:ea:38:
d3:10:18:9e:98:7c:43:20:dd:c2:b0:68:a0:88:18:
e6:af:20:d5:45:07:20:b0:02:1a:10:d0:45:c1:d6:
25:af:1d:1f:6d:f2:37:4c:64:ab:88:c2:64:b3:c4:
6e:99:57:85:57:25:e5:39:af:dd:a7:0f:5d:51:46:
20:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DB:B1:FB:03:41:79:08:B0:7D:EA:42:1F:D8:B0:6A:3D:76:3D:C9
X509v3 Authority Key Identifier:
keyid:DC:36:63:1C:A2:0E:C9:2D:19:5C:16:A8:D7:0A:63:F3:72:E5:9F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DZjHKIOyS0ZXBao1wpj83LlnyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/4ac162-e16e-406e-b985-5ef56f86ab83/1/3DZjHKIOyS0ZXBao1wpj83LlnyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:09:c0:19:83:00:30:45:c5:ce:0c:4d:3d:9d:71:86:d7:42:
4b:13:17:1b:7b:57:48:f7:5d:77:35:d9:87:2d:60:8d:71:25:
3e:93:82:c4:d2:63:88:90:6a:73:79:5c:70:70:c1:68:bc:98:
97:78:2d:ed:ac:91:30:60:14:c6:ea:8e:7c:31:e3:af:d9:c1:
b2:e8:c7:10:22:c5:1a:a7:97:c4:9c:04:75:4c:17:ce:0d:37:
d0:6a:67:3c:0d:45:c0:b8:b4:cb:d3:0a:3b:65:53:1b:02:6d:
ab:e8:66:fd:5e:ad:d1:dc:f5:92:a5:9b:24:6e:65:db:dd:e4:
81:e3:90:df:af:a7:3a:66:30:03:a7:b8:49:f2:ee:86:10:b2:
7b:02:f5:50:28:cf:34:40:c9:72:2a:d4:66:c5:e4:32:da:03:
2a:7c:3e:bf:3b:43:ca:5f:dc:d6:13:58:e9:65:3f:aa:1e:f0:
d5:8e:06:c6:62:60:21:8a:81:22:3d:70:d4:b0:57:b7:3b:58:
ea:cd:13:d3:0e:56:ff:ac:8d:61:43:d0:3c:a8:22:49:5d:a7:
1c:27:db:b5:d3:c4:00:a5:cf:63:44:93:5b:fc:1a:ca:80:1f:
d2:af:d9:aa:d8:29:3e:40:70:b4:36:1a:93:37:26:db:35:19:
3d:5d:7e:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ctRWGjR5r8Te3ae7bQ+EZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMzY2MzFjYTIwZWM5MmQxOTVjMTZhOGQ3MGE2M2YzNzJl
NTlmMjQwHhcNMjYwNTEyMTUwMTI5WhcNMjYwNTEzMTUwMTI5WjAzMTEwLwYDVQQD
EyhjYWRiYjFmYjAzNDE3OTA4YjA3ZGVhNDIxZmQ4YjA2YTNkNzYzZGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MN6wjBZLfSVGRLeMV7+fpqB0L6A
oBP6JiajjDXQf5mBfTEuoJbNnoxEONCbM9OpoYPDU5wLMy0D6ziKH7chJN6QUtbY
qILMV40l84Dprs0zkziFmvyocnZckdM+t6Yeja+zi2iAeMmVFqpqbhXlA7lUQGOa
0kZ4WekYrFcdFqm6tixqeZlVHuT6ROxuUzAgo2jXR4TgcjHGv8+6edcCJxFYd0HA
LRHdt1sexXH+wvv3FoPa6lHN9jQl/c2cZn4K6jjTEBiemHxDIN3CsGigiBjmryDV
RQcgsAIaENBFwdYlrx0fbfI3TGSriMJks8RumVeFVyXlOa/dpw9dUUYgRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMrbsfsDQXkIsH3qQh/YsGo9dj3JMB8GA1UdIwQY
MBaAFNw2YxyiDsktGVwWqNcKY/Ny5Z8kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0RaakhLSU95UzBaWEJhbzF3cGo4M0xsbnlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS80YWMxNjItZTE2ZS00MDZlLWI5ODUt
NWVmNTZmODZhYjgzLzEvM0RaakhLSU95UzBaWEJhbzF3cGo4M0xsbnlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS80YWMxNjItZTE2ZS00MDZlLWI5ODUtNWVmNTZmODZhYjgz
LzEvM0RaakhLSU95UzBaWEJhbzF3cGo4M0xsbnlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVgnAGYMA
MEXFzgxNPZ1xhtdCSxMXG3tXSPdddzXZhy1gjXElPpOCxNJjiJBqc3lccHDBaLyY
l3gt7ayRMGAUxuqOfDHjr9nBsujHECLFGqeXxJwEdUwXzg030GpnPA1FwLi0y9MK
O2VTGwJtq+hm/V6t0dz1kqWbJG5l293kgeOQ36+nOmYwA6e4SfLuhhCyewL1UCjP
NEDJcirUZsXkMtoDKnw+vztDyl/c1hNY6WU/qh7w1Y4GxmJgIYqBIj1w1LBXtztY
6s0T0w5W/6yNYUPQPKgiSV2nHCfbtdPEAKXPY0STW/wayoAf0q/ZqtgpPkBwtDYa
kzcm2zUZPV1+Ag==
-----END CERTIFICATE-----
Generated at Wed May 13 01:26:19 2026 by rpki-client