Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
File: 3MstX7JThS8YI8ZUNOjydtBOTgw.mft (raw, json)
Hash identifier: rgUECDZs4ELK1tESyIPmR6p1xTQB9507mnnl5EZ9jXU=
Subject key identifier: 46:B4:05:D2:B4:E9:A8:0B:5D:CE:6F:31:7E:8C:66:45:42:1B:E9:FA
Authority key identifier: DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C
Certificate issuer: /CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
Certificate serial: 019E1D5956C12797BB29D423184A11C3A4F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
Manifest number: 1915
Signing time: Tue 12 May 2026 18:00:54 +0000
Manifest this update: Tue 12 May 2026 18:00:54 +0000
Manifest next update: Wed 13 May 2026 18:00:54 +0000
Files and hashes: 1: 3MstX7JThS8YI8ZUNOjydtBOTgw.crl (hash: hdohfOI9654E+XIsdYBHXe+bJFIc6L1YO6LPK76U2e0=)
2: 9zaCEl1SgGOc-A7zIR9SmhOUbCA.roa (hash: eFtzjl4+/9tlA7bC6sKrJsHMLsAxLeLlfmditC5aZTs=)
3: _QaXkGOzguH_3SYFNe1d3y7B2Tw.roa (hash: KztSdz5ODte8K6guWxzrXZlYDG1F2rVO/Vqml3J+Q0o=)
4: fsnKswSMyeM4OK2o8J_ZzwwYiiI.roa (hash: tWk+nFmUcDykdNhoUyVPw1UFkRx/3AJQMBQrLxH1g5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:56:c1:27:97:bb:29:d4:23:18:4a:11:c3:a4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dccb2d5fb253852f1823c65434e8f276d04e4e0c
Validity
Not Before: May 12 18:00:54 2026 GMT
Not After : May 13 18:00:54 2026 GMT
Subject: CN=46b405d2b4e9a80b5dce6f317e8c6645421be9fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:a1:dd:fe:47:65:c8:8b:59:a7:7e:46:bf:
9a:9a:53:88:0b:c9:c3:46:95:7a:4e:39:0a:7b:7e:
97:f4:4d:cc:be:2a:5e:78:5e:ed:fa:cc:50:ac:f3:
91:13:0b:1d:58:59:f1:3e:ec:39:37:be:f7:90:33:
96:3d:f1:14:3d:65:67:b0:8f:8d:3a:91:13:83:0d:
41:66:39:66:92:50:2d:23:82:46:71:a8:77:e6:9f:
19:48:02:92:f0:04:5c:78:24:22:18:e4:2d:e0:ef:
4d:f2:97:b2:85:72:97:5e:54:64:d7:07:e6:4a:bd:
42:fc:ce:71:e2:cf:de:48:ab:d0:41:10:de:89:d9:
0b:03:3c:5d:97:c5:dc:d5:83:c9:5d:c6:2a:d1:29:
90:ed:c2:6b:e2:f8:86:66:23:25:2c:a8:f7:28:3a:
d1:92:31:ef:27:8d:f6:3f:63:4a:61:90:54:9c:99:
5e:d1:2a:e5:0c:a3:cb:54:43:8a:ef:b7:d4:2d:39:
7b:72:37:56:87:11:2b:77:9a:6d:2f:e9:cb:01:00:
97:a3:21:4d:74:07:4e:24:c2:d5:a3:f4:34:30:ca:
37:54:3f:2b:03:69:84:aa:75:4d:d6:d9:89:ab:75:
06:93:60:62:db:90:33:c0:40:55:61:4d:88:aa:87:
8d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B4:05:D2:B4:E9:A8:0B:5D:CE:6F:31:7E:8C:66:45:42:1B:E9:FA
X509v3 Authority Key Identifier:
keyid:DC:CB:2D:5F:B2:53:85:2F:18:23:C6:54:34:E8:F2:76:D0:4E:4E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MstX7JThS8YI8ZUNOjydtBOTgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7c1c29-ca02-490b-aa84-e1a8a6f1d59a/1/3MstX7JThS8YI8ZUNOjydtBOTgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:84:a8:3b:39:ec:62:3d:13:a7:7c:20:69:c7:a7:34:6a:ba:
6a:19:0a:a0:e2:2d:9d:cd:4f:86:bf:c5:4b:94:01:a1:d7:ef:
56:70:ab:fa:02:83:c2:3b:7b:b0:3b:73:c1:55:fc:5e:f5:0f:
d8:5c:67:a5:88:a0:a2:f4:fa:3e:bd:b2:8f:d3:a9:f4:27:c6:
a3:bc:af:9c:26:58:ce:5d:d5:60:c8:3f:0a:11:46:33:25:29:
eb:00:d1:c6:32:2b:74:1c:57:75:27:db:ca:e7:81:3f:97:83:
f9:67:06:63:9d:92:b8:36:70:f4:a5:44:7c:c5:43:3d:23:b1:
0c:01:61:08:a2:09:67:4e:3e:c3:9f:47:ba:20:66:d3:42:e2:
86:d6:03:cc:dc:e3:e6:eb:a8:5a:6a:9d:cf:83:81:ea:88:ca:
6e:3f:08:c3:d7:77:fc:ce:f1:c0:7a:a5:6d:89:28:36:c3:4a:
8d:79:77:aa:c4:72:22:cf:ec:a9:80:29:a0:03:0b:ca:30:14:
92:fd:9a:8e:91:93:2b:ce:6c:3a:9a:81:43:e0:4b:65:0e:eb:
06:bb:1d:5f:6b:c5:c3:97:90:68:09:a1:fc:4d:04:c7:88:36:
0d:79:dd:20:7e:f3:e8:bf:97:49:5d:2b:a6:f9:85:9b:19:8d:
dc:53:4f:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWVbBJ5e7KdQjGEoRw6TwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjY2IyZDVmYjI1Mzg1MmYxODIzYzY1NDM0ZThmMjc2ZDA0
ZTRlMGMwHhcNMjYwNTEyMTgwMDU0WhcNMjYwNTEzMTgwMDU0WjAzMTEwLwYDVQQD
Eyg0NmI0MDVkMmI0ZTlhODBiNWRjZTZmMzE3ZThjNjY0NTQyMWJlOWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxih3f5HZciLWad+Rr+amlOIC8nD
RpV6TjkKe36X9E3MvipeeF7t+sxQrPOREwsdWFnxPuw5N773kDOWPfEUPWVnsI+N
OpETgw1BZjlmklAtI4JGcah35p8ZSAKS8ARceCQiGOQt4O9N8peyhXKXXlRk1wfm
Sr1C/M5x4s/eSKvQQRDeidkLAzxdl8Xc1YPJXcYq0SmQ7cJr4viGZiMlLKj3KDrR
kjHvJ432P2NKYZBUnJle0SrlDKPLVEOK77fULTl7cjdWhxErd5ptL+nLAQCXoyFN
dAdOJMLVo/Q0MMo3VD8rA2mEqnVN1tmJq3UGk2Bi25AzwEBVYU2IqoeNdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEa0BdK06agLXc5vMX6MZkVCG+n6MB8GA1UdIwQY
MBaAFNzLLV+yU4UvGCPGVDTo8nbQTk4MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM01zdFg3SlRoUzhZSThaVU5PanlkdEJPVGd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83YzFjMjktY2EwMi00OTBiLWFhODQt
ZTFhOGE2ZjFkNTlhLzEvM01zdFg3SlRoUzhZSThaVU5PanlkdEJPVGd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS83YzFjMjktY2EwMi00OTBiLWFhODQtZTFhOGE2ZjFkNTlh
LzEvM01zdFg3SlRoUzhZSThaVU5PanlkdEJPVGd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyYSoOzns
Yj0Tp3wgacenNGq6ahkKoOItnc1Phr/FS5QBodfvVnCr+gKDwjt7sDtzwVX8XvUP
2FxnpYigovT6Pr2yj9Op9CfGo7yvnCZYzl3VYMg/ChFGMyUp6wDRxjIrdBxXdSfb
yueBP5eD+WcGY52SuDZw9KVEfMVDPSOxDAFhCKIJZ04+w59HuiBm00LihtYDzNzj
5uuoWmqdz4OB6ojKbj8Iw9d3/M7xwHqlbYkoNsNKjXl3qsRyIs/sqYApoAMLyjAU
kv2ajpGTK85sOpqBQ+BLZQ7rBrsdX2vFw5eQaAmh/E0Ex4g2DXndIH7z6L+XSV0r
pvmFmxmN3FNPLg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:49:21 2026 by rpki-client