Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
File: 3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft (raw, json)
Hash identifier: balPZspsvT7IEgfFI6hXFjXIeo93DVpB2anQfYjYTJU=
Subject key identifier: 83:F7:75:0A:D2:D1:1C:28:54:F6:C7:71:AA:DF:59:C5:2C:B1:0D:07
Authority key identifier: DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8
Certificate issuer: /CN=dd52ad090b54678e0968e69955c25049434d96c8
Certificate serial: 019D29CEDB8C585F85481FCAF429475EB1D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
Manifest number: 0E88
Signing time: Thu 26 Mar 2026 11:01:55 +0000
Manifest this update: Thu 26 Mar 2026 11:01:55 +0000
Manifest next update: Fri 27 Mar 2026 11:01:55 +0000
Files and hashes: 1: 1-aGDqZW0qQT1CMUWfY2StRi45As.roa (hash: B8Rl9Gai4vi9Uu6NQRhUSO+YTREX6IaIlJN6RMt60oA=)
2: 3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl (hash: awaePT5jTGwEC8vu2T1Qht1BXJRTpm3d1dTg+KvBl1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:db:8c:58:5f:85:48:1f:ca:f4:29:47:5e:b1:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd52ad090b54678e0968e69955c25049434d96c8
Validity
Not Before: Mar 26 11:01:55 2026 GMT
Not After : Mar 27 11:01:55 2026 GMT
Subject: CN=83f7750ad2d11c2854f6c771aadf59c52cb10d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:32:22:ea:10:20:e1:5b:5d:9f:b1:9d:fc:ba:
03:1a:5e:7a:65:51:7f:b0:69:c5:b5:ff:2a:27:bd:
15:50:12:df:77:6a:19:f7:3b:a8:2b:d7:d3:bf:d0:
b8:dd:52:df:0a:4b:d5:1c:8d:7f:ca:9a:63:36:fc:
1e:62:e2:3f:2f:83:52:5a:e4:f0:0b:ea:13:8d:9e:
52:10:0b:44:a7:22:e6:a1:4c:5a:87:10:89:5e:8c:
26:6b:02:d9:9d:e9:c2:9f:a6:9c:ed:f1:dc:07:70:
d7:e0:de:95:ed:35:ac:44:91:c8:88:74:c7:d3:92:
b8:b5:78:33:26:82:28:78:9f:24:aa:5b:f3:5e:d0:
e8:19:d5:d0:1c:ea:0f:9e:f1:3e:3b:b3:b8:39:1c:
28:8f:24:5c:fb:fc:dd:09:11:bf:36:a7:0a:ce:ee:
15:eb:45:76:e7:60:8e:a2:68:e7:1c:7c:d0:09:d7:
d2:ab:f7:67:0e:77:0b:60:7e:97:f8:25:d7:e6:84:
81:ef:9c:3f:84:ce:a9:ef:b1:07:0f:07:12:c4:e1:
bb:a9:18:69:b0:6e:58:55:07:3c:ab:66:98:ab:a5:
c9:d6:a6:17:58:6f:a8:8c:87:19:19:24:3e:c1:c2:
18:c8:cc:f0:25:bc:df:a1:08:5d:c8:3f:6a:8f:10:
8e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F7:75:0A:D2:D1:1C:28:54:F6:C7:71:AA:DF:59:C5:2C:B1:0D:07
X509v3 Authority Key Identifier:
keyid:DD:52:AD:09:0B:54:67:8E:09:68:E6:99:55:C2:50:49:43:4D:96:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VKtCQtUZ44JaOaZVcJQSUNNlsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/3VKtCQtUZ44JaOaZVcJQSUNNlsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:eb:02:82:1a:bf:9a:0c:c5:a2:b3:bc:26:3d:38:3d:c4:b9:
17:cd:be:f5:6f:00:8c:f6:1e:7c:5b:95:85:17:4f:4b:36:b5:
8f:70:20:5a:73:71:cf:59:79:b9:68:16:72:b6:87:ca:13:45:
dd:84:f2:88:a4:a8:ff:97:97:d1:8d:84:15:ca:33:28:d8:a9:
3d:f3:e6:bf:76:1a:25:66:22:70:e5:1d:f2:c5:1a:a0:4f:d3:
32:53:86:e1:86:46:48:ca:1b:b5:d6:33:0d:83:cf:c5:29:29:
c2:ec:d2:61:32:69:76:1f:eb:93:ce:89:b0:56:e6:dd:b0:7f:
a4:26:c2:8b:cf:4d:fb:8b:68:ca:da:44:24:ec:fe:f8:0a:9d:
38:eb:16:d1:19:37:af:71:21:66:f4:83:4f:af:e2:d4:c4:69:
af:67:53:5b:0e:a5:5b:9f:3d:24:b7:8a:24:e7:5c:4f:32:59:
22:36:f2:19:6e:84:24:ef:14:70:b6:be:c7:3e:db:40:94:8a:
3b:2c:da:06:f4:45:fc:5e:7c:56:fe:89:5d:e5:62:fd:e2:2a:
27:86:2b:04:c3:67:cf:a9:d1:13:c0:98:c9:34:7c:9a:5c:b7:
74:37:41:7e:a9:42:1e:b2:23:ea:bc:bc:16:90:ae:5f:da:1b:
05:57:e9:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pztuMWF+FSB/K9ClHXrHXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNTJhZDA5MGI1NDY3OGUwOTY4ZTY5OTU1YzI1MDQ5NDM0
ZDk2YzgwHhcNMjYwMzI2MTEwMTU1WhcNMjYwMzI3MTEwMTU1WjAzMTEwLwYDVQQD
Eyg4M2Y3NzUwYWQyZDExYzI4NTRmNmM3NzFhYWRmNTljNTJjYjEwZDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTIi6hAg4Vtdn7Gd/LoDGl56ZVF/
sGnFtf8qJ70VUBLfd2oZ9zuoK9fTv9C43VLfCkvVHI1/yppjNvweYuI/L4NSWuTw
C+oTjZ5SEAtEpyLmoUxahxCJXowmawLZnenCn6ac7fHcB3DX4N6V7TWsRJHIiHTH
05K4tXgzJoIoeJ8kqlvzXtDoGdXQHOoPnvE+O7O4ORwojyRc+/zdCRG/NqcKzu4V
60V252COomjnHHzQCdfSq/dnDncLYH6X+CXX5oSB75w/hM6p77EHDwcSxOG7qRhp
sG5YVQc8q2aYq6XJ1qYXWG+ojIcZGSQ+wcIYyMzwJbzfoQhdyD9qjxCO4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIP3dQrS0RwoVPbHcarfWcUssQ0HMB8GA1UdIwQY
MBaAFN1SrQkLVGeOCWjmmVXCUElDTZbIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1ZLdENRdFVaNDRKYU9hWlZjSlFTVU5ObHNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84MTgxNDItYzEzOC00NGJiLTkyMmIt
ZDMwNTczMGI1MzY4LzEvM1ZLdENRdFVaNDRKYU9hWlZjSlFTVU5ObHNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi84MTgxNDItYzEzOC00NGJiLTkyMmItZDMwNTczMGI1MzY4
LzEvM1ZLdENRdFVaNDRKYU9hWlZjSlFTVU5ObHNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc+sCghq/
mgzForO8Jj04PcS5F82+9W8AjPYefFuVhRdPSza1j3AgWnNxz1l5uWgWcraHyhNF
3YTyiKSo/5eX0Y2EFcozKNipPfPmv3YaJWYicOUd8sUaoE/TMlOG4YZGSMobtdYz
DYPPxSkpwuzSYTJpdh/rk86JsFbm3bB/pCbCi89N+4toytpEJOz++AqdOOsW0Rk3
r3EhZvSDT6/i1MRpr2dTWw6lW589JLeKJOdcTzJZIjbyGW6EJO8UcLa+xz7bQJSK
OyzaBvRF/F58Vv6JXeVi/eIqJ4YrBMNnz6nRE8CYyTR8mly3dDdBfqlCHrIj6ry8
FpCuX9obBVfpiw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:08:56 2026 by rpki-client