Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft
File: 3GIdzcetC-Mx18mkR_KhZOQupP0.mft (raw, json)
Hash identifier: VkWllWWel4HI9o4kDlOn6Zlu4YmLtbmPDDosk5P549w=
Subject key identifier: 21:7C:24:18:D8:C0:DD:75:A9:00:3D:D2:43:47:F6:B1:12:27:22:F5
Authority key identifier: DC:62:1D:CD:C7:AD:0B:E3:31:D7:C9:A4:47:F2:A1:64:E4:2E:A4:FD
Certificate issuer: /CN=dc621dcdc7ad0be331d7c9a447f2a164e42ea4fd
Certificate serial: 019D28BB1DAB0CF45B3821681B9A7D520828
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft
Manifest number: 0110
Signing time: Thu 26 Mar 2026 06:00:44 +0000
Manifest this update: Thu 26 Mar 2026 06:00:44 +0000
Manifest next update: Fri 27 Mar 2026 06:00:44 +0000
Files and hashes: 1: 3GIdzcetC-Mx18mkR_KhZOQupP0.crl (hash: /V2SjW8H4e1yun5H99laqmxmn7Pyw0DUlywBXVdHKZg=)
2: 5AOG4kUiGD70wVs_XxJDRgh1PMY.roa (hash: MRYcI9nU4eBASWsWUt6T36KO1+qAGLyatjU9/qm4WUA=)
3: op71npEadOyd07159Wej77YQILI.roa (hash: eD5sjYOJWPP4UoIDZC6vYDF6ENzBilI2Pagr2VoIOrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:1d:ab:0c:f4:5b:38:21:68:1b:9a:7d:52:08:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc621dcdc7ad0be331d7c9a447f2a164e42ea4fd
Validity
Not Before: Mar 26 06:00:44 2026 GMT
Not After : Mar 27 06:00:44 2026 GMT
Subject: CN=217c2418d8c0dd75a9003dd24347f6b1122722f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7b:be:e2:db:f2:d4:8f:45:5b:d3:51:50:74:
c8:c8:71:a8:ea:b4:e4:fe:07:54:0d:60:6d:1d:97:
2d:3b:de:eb:a2:77:cc:20:81:ca:d0:e4:36:19:36:
64:a2:f1:df:1a:6e:ce:5b:0c:d7:b7:bf:9f:29:b0:
89:c3:18:33:4f:3e:0d:7a:b9:55:6b:cb:b6:55:c2:
69:4a:cd:ff:ed:c0:3d:c7:ba:16:25:c8:52:6f:9f:
ba:f5:b5:ea:0c:07:94:e5:1d:71:3d:28:19:b2:26:
a4:50:f2:18:8c:8a:21:34:b6:e9:07:68:9e:e8:ec:
9a:b8:20:d0:cd:da:8b:a5:76:58:49:b9:1c:ba:20:
6b:e3:9a:69:1a:d7:73:32:49:2f:4f:a4:e0:9f:37:
01:7c:34:01:50:cc:63:85:25:4e:f9:12:55:6b:54:
93:f6:86:57:97:4e:b5:d3:f3:e1:5d:ec:16:f6:f9:
4e:2f:1a:0d:23:69:17:07:8a:32:55:28:6c:44:f7:
04:91:3b:4a:53:58:58:68:c1:0c:e4:ea:92:1f:53:
05:9a:40:99:63:2d:4d:7c:07:be:c3:1a:a7:28:5b:
ad:6b:07:50:7f:77:92:1c:2d:50:01:0c:42:0f:d1:
36:9c:c2:d0:b1:0e:cb:f4:02:0a:47:c9:bd:db:99:
1e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7C:24:18:D8:C0:DD:75:A9:00:3D:D2:43:47:F6:B1:12:27:22:F5
X509v3 Authority Key Identifier:
keyid:DC:62:1D:CD:C7:AD:0B:E3:31:D7:C9:A4:47:F2:A1:64:E4:2E:A4:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GIdzcetC-Mx18mkR_KhZOQupP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/120084-c886-47ce-9040-9621b2088c2d/1/3GIdzcetC-Mx18mkR_KhZOQupP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:a2:84:02:43:45:84:77:e3:e0:9d:fe:84:0e:24:04:df:bb:
72:b3:80:a2:92:11:91:6f:ca:5c:8f:72:08:96:e9:2b:8e:3c:
ce:5f:4d:5d:39:f3:7a:d9:60:3e:2c:80:48:4a:35:84:17:2a:
9b:70:6d:6e:84:c8:77:12:d1:c9:ac:ad:7b:f0:44:b1:87:32:
da:88:75:3d:d7:63:bf:52:2d:fb:1c:ef:81:61:cb:ec:45:66:
3a:35:99:87:ca:0c:6d:5d:d9:cb:fb:11:92:c7:b6:44:b5:0c:
99:32:90:6c:a6:de:1d:f3:ff:47:a9:0c:d0:58:15:47:c1:c6:
f2:ce:db:47:d0:1e:fd:ea:98:58:3f:cb:a6:e0:a5:97:dd:fa:
f8:dd:f2:d4:97:09:74:f4:37:27:d7:b8:8d:5a:61:79:bd:a8:
61:76:e1:1f:54:21:f9:de:42:ab:dc:ba:a9:aa:a8:66:5d:48:
a9:52:a6:47:16:6c:a6:97:d1:33:55:0a:fa:6c:48:9d:d6:94:
8f:8f:25:4c:47:ed:10:bf:63:c1:d2:b1:22:37:3f:d5:76:6e:
ab:a4:cb:34:dc:67:37:85:99:9e:67:bc:a2:a1:83:cd:1d:53:
af:47:67:73:2b:5c:a3:b5:fd:ce:29:12:a1:2c:d1:ae:92:4a:
5e:06:ef:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oux2rDPRbOCFoG5p9UggoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNjIxZGNkYzdhZDBiZTMzMWQ3YzlhNDQ3ZjJhMTY0ZTQy
ZWE0ZmQwHhcNMjYwMzI2MDYwMDQ0WhcNMjYwMzI3MDYwMDQ0WjAzMTEwLwYDVQQD
EygyMTdjMjQxOGQ4YzBkZDc1YTkwMDNkZDI0MzQ3ZjZiMTEyMjcyMmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXu+4tvy1I9FW9NRUHTIyHGo6rTk
/gdUDWBtHZctO97ronfMIIHK0OQ2GTZkovHfGm7OWwzXt7+fKbCJwxgzTz4NerlV
a8u2VcJpSs3/7cA9x7oWJchSb5+69bXqDAeU5R1xPSgZsiakUPIYjIohNLbpB2ie
6OyauCDQzdqLpXZYSbkcuiBr45ppGtdzMkkvT6TgnzcBfDQBUMxjhSVO+RJVa1ST
9oZXl0610/PhXewW9vlOLxoNI2kXB4oyVShsRPcEkTtKU1hYaMEM5OqSH1MFmkCZ
Yy1NfAe+wxqnKFutawdQf3eSHC1QAQxCD9E2nMLQsQ7L9AIKR8m925keAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCF8JBjYwN11qQA90kNH9rESJyL1MB8GA1UdIwQY
MBaAFNxiHc3HrQvjMdfJpEfyoWTkLqT9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0dJZHpjZXRDLU14MThta1JfS2haT1F1cFAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8xMjAwODQtYzg4Ni00N2NlLTkwNDAt
OTYyMWIyMDg4YzJkLzEvM0dJZHpjZXRDLU14MThta1JfS2haT1F1cFAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8xMjAwODQtYzg4Ni00N2NlLTkwNDAtOTYyMWIyMDg4YzJk
LzEvM0dJZHpjZXRDLU14MThta1JfS2haT1F1cFAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxaKEAkNF
hHfj4J3+hA4kBN+7crOAopIRkW/KXI9yCJbpK448zl9NXTnzetlgPiyASEo1hBcq
m3BtboTIdxLRyayte/BEsYcy2oh1Pddjv1It+xzvgWHL7EVmOjWZh8oMbV3Zy/sR
kse2RLUMmTKQbKbeHfP/R6kM0FgVR8HG8s7bR9Ae/eqYWD/LpuCll936+N3y1JcJ
dPQ3J9e4jVpheb2oYXbhH1Qh+d5Cq9y6qaqoZl1IqVKmRxZsppfRM1UK+mxIndaU
j48lTEftEL9jwdKxIjc/1XZuq6TLNNxnN4WZnme8oqGDzR1Tr0dncytco7X9zikS
oSzRrpJKXgbvng==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:00:10 2026 by rpki-client