Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
File: 3plxFn-T_DSzvEebsh_2LTvzyYQ.mft (raw, json)
Hash identifier: 4BzNo9boyYhJwhf4GPHrmL3K87SzGDb3wygSiAtjuuc=
Subject key identifier: 86:A1:B9:C9:77:01:95:28:D1:27:E7:AD:4A:00:07:85:9B:79:50:8A
Authority key identifier: DE:99:71:16:7F:93:FC:34:B3:BC:47:9B:B2:1F:F6:2D:3B:F3:C9:84
Certificate issuer: /CN=de9971167f93fc34b3bc479bb21ff62d3bf3c984
Certificate serial: 019D265FB00621B3D05E9425A473083334CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
Manifest number: 0487
Signing time: Wed 25 Mar 2026 19:01:38 +0000
Manifest this update: Wed 25 Mar 2026 19:01:38 +0000
Manifest next update: Thu 26 Mar 2026 19:01:38 +0000
Files and hashes: 1: 3plxFn-T_DSzvEebsh_2LTvzyYQ.crl (hash: Jec9it1EmtnkuO72pz7u0Iqr7oWrrgzE7vrWPItJz1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:b0:06:21:b3:d0:5e:94:25:a4:73:08:33:34:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9971167f93fc34b3bc479bb21ff62d3bf3c984
Validity
Not Before: Mar 25 19:01:38 2026 GMT
Not After : Mar 26 19:01:38 2026 GMT
Subject: CN=86a1b9c977019528d127e7ad4a0007859b79508a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bf:c8:36:1b:ad:8f:7e:93:05:15:67:44:1d:
65:d0:b4:67:ff:33:90:b6:1b:58:bc:c9:e4:91:c9:
41:70:24:97:0c:70:27:93:c2:f7:0d:4b:bd:6a:d1:
ad:5d:56:15:83:ac:ad:88:8c:da:47:da:e5:c7:77:
ef:60:91:40:62:d4:cf:27:21:08:eb:85:52:ca:b9:
f0:a5:98:f8:fd:bb:2d:e7:8e:b6:23:b3:b9:58:30:
e9:a4:1a:ec:62:1b:5f:11:b6:2d:cc:f7:b0:b9:19:
3a:f8:92:96:f3:03:ef:cc:e8:66:5e:f4:0a:d8:6f:
a6:7f:d1:b2:dc:21:48:95:cd:88:dc:33:cf:54:19:
1a:3d:3a:d0:7e:38:f0:b7:08:21:6f:4a:e4:c4:62:
56:9c:79:01:51:36:ca:fd:af:3b:6b:ec:ea:2b:0f:
ef:b6:a8:54:65:d6:6e:7a:f6:c5:9f:b8:64:66:b7:
03:46:0d:de:13:4b:9c:1d:7d:9c:a0:bd:52:ab:b6:
76:f5:9d:fc:22:af:34:b7:59:ce:60:a8:e7:86:80:
62:17:a9:5b:22:9b:66:69:d5:af:56:8d:5a:c0:1a:
b1:2d:6d:5b:4a:34:74:c2:49:1a:84:9f:de:39:63:
dc:99:cd:d7:58:32:36:35:bf:aa:92:80:7d:b5:5a:
3e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A1:B9:C9:77:01:95:28:D1:27:E7:AD:4A:00:07:85:9B:79:50:8A
X509v3 Authority Key Identifier:
keyid:DE:99:71:16:7F:93:FC:34:B3:BC:47:9B:B2:1F:F6:2D:3B:F3:C9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:e5:e6:5e:25:df:7c:d9:cc:75:dd:49:8a:08:4a:62:cf:54:
83:03:d7:84:20:d3:fa:a3:80:c7:e5:2e:42:dd:c0:ab:e2:fa:
05:0f:01:b5:81:11:6c:3e:74:ef:f5:df:7f:28:e9:53:c5:39:
e2:88:e9:c2:bf:a8:40:a4:9d:d9:16:1d:5d:02:22:f7:22:c3:
47:91:61:ba:f9:fb:ea:bb:34:f9:5f:a4:9f:26:92:37:b2:1d:
d8:b7:20:01:4a:21:d3:f5:83:5c:65:38:0b:d8:2e:06:a2:f4:
a3:36:4a:d0:58:c3:e4:63:3d:f6:dc:bc:a9:5c:98:a5:b7:f5:
f1:fe:79:68:69:3e:c6:c6:ed:41:3f:bd:98:05:c9:04:91:a6:
b2:88:ee:79:21:2c:f4:5e:5b:3f:f0:dc:a7:a2:53:4a:27:eb:
6c:d7:3d:e7:f2:4c:42:a0:ab:f4:14:47:b5:90:58:5b:25:dd:
6f:9e:5d:ac:eb:09:9b:03:54:fe:ea:c9:03:b9:45:18:30:0c:
31:5c:21:fb:fc:ed:e6:6d:60:99:f6:3a:37:15:55:6e:3a:62:
5a:10:56:47:83:ec:b4:fd:5d:b9:31:90:12:2b:cc:fd:b5:1a:
3f:44:aa:80:28:5f:b9:e7:71:91:5d:7b:af:d9:9b:5f:4f:e9:
b6:a9:8b:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX7AGIbPQXpQlpHMIMzTMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOTk3MTE2N2Y5M2ZjMzRiM2JjNDc5YmIyMWZmNjJkM2Jm
M2M5ODQwHhcNMjYwMzI1MTkwMTM4WhcNMjYwMzI2MTkwMTM4WjAzMTEwLwYDVQQD
Eyg4NmExYjljOTc3MDE5NTI4ZDEyN2U3YWQ0YTAwMDc4NTliNzk1MDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL/INhutj36TBRVnRB1l0LRn/zOQ
thtYvMnkkclBcCSXDHAnk8L3DUu9atGtXVYVg6ytiIzaR9rlx3fvYJFAYtTPJyEI
64VSyrnwpZj4/bst5462I7O5WDDppBrsYhtfEbYtzPewuRk6+JKW8wPvzOhmXvQK
2G+mf9Gy3CFIlc2I3DPPVBkaPTrQfjjwtwghb0rkxGJWnHkBUTbK/a87a+zqKw/v
tqhUZdZuevbFn7hkZrcDRg3eE0ucHX2coL1Sq7Z29Z38Iq80t1nOYKjnhoBiF6lb
IptmadWvVo1awBqxLW1bSjR0wkkahJ/eOWPcmc3XWDI2Nb+qkoB9tVo+mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIahucl3AZUo0SfnrUoAB4WbeVCKMB8GA1UdIwQY
MBaAFN6ZcRZ/k/w0s7xHm7If9i0788mEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3BseEZuLVRfRFN6dkVlYnNoXzJMVHZ6eVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9kOWJlNDAtY2Q0Mi00YTZjLTlkNGUt
MWRmYmQxZWZkNWQ0LzEvM3BseEZuLVRfRFN6dkVlYnNoXzJMVHZ6eVlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9kOWJlNDAtY2Q0Mi00YTZjLTlkNGUtMWRmYmQxZWZkNWQ0
LzEvM3BseEZuLVRfRFN6dkVlYnNoXzJMVHZ6eVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy+XmXiXf
fNnMdd1JighKYs9UgwPXhCDT+qOAx+UuQt3Aq+L6BQ8BtYERbD507/XffyjpU8U5
4ojpwr+oQKSd2RYdXQIi9yLDR5Fhuvn76rs0+V+knyaSN7Id2LcgAUoh0/WDXGU4
C9guBqL0ozZK0FjD5GM99ty8qVyYpbf18f55aGk+xsbtQT+9mAXJBJGmsojueSEs
9F5bP/Dcp6JTSifrbNc95/JMQqCr9BRHtZBYWyXdb55drOsJmwNU/urJA7lFGDAM
MVwh+/zt5m1gmfY6NxVVbjpiWhBWR4PstP1duTGQEivM/bUaP0SqgChfuedxkV17
r9mbX0/ptqmLxQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:53:06 2026 by rpki-client