Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
File: 3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft (raw, json)
Hash identifier: pwzTJNmJiJuuBHZhQzaaMfKXGc39PIMxj0va888xh70=
Subject key identifier: C2:84:1E:FB:34:C7:14:65:B8:62:0E:50:29:EB:D7:88:83:F2:9F:05
Authority key identifier: DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6
Certificate issuer: /CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6
Certificate serial: 019D2470FA99EFCA9B5E79F4F39DCFFB821B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
Manifest number: 0F94
Signing time: Wed 25 Mar 2026 10:01:17 +0000
Manifest this update: Wed 25 Mar 2026 10:01:17 +0000
Manifest next update: Thu 26 Mar 2026 10:01:17 +0000
Files and hashes: 1: 3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl (hash: cUzhP5qmgw20vGrxHF+5dy/nZRQYQ6GDQJ0Sk3N/8+s=)
2: G0H1NZGAbtsyoA2e--eIMeks25w.asa (hash: hXpme5X4li6UsZQl1l4A/uCi4ohrlAjpSmRIc/a8sgw=)
3: MJozjNqLnPQyzg6RwUr67wJnDj0.roa (hash: GrVcVPg8QNDGergH76PpUDqLKrseVEoNPTuvrqjQXRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:70:fa:99:ef:ca:9b:5e:79:f4:f3:9d:cf:fb:82:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6
Validity
Not Before: Mar 25 10:01:17 2026 GMT
Not After : Mar 26 10:01:17 2026 GMT
Subject: CN=c2841efb34c71465b8620e5029ebd78883f29f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b0:22:68:2c:5e:84:c1:d4:ad:5b:f1:7a:16:
88:0a:cd:70:f7:f2:7e:9c:ea:54:e4:1f:c5:28:21:
dc:8c:90:96:07:b1:f0:bb:c8:83:83:e4:2e:57:c7:
5a:29:b3:13:c5:f6:9c:75:c7:43:64:47:53:0f:2e:
cf:3e:35:16:2c:92:d8:9a:7b:4d:ea:8e:18:7c:19:
12:98:aa:02:94:cc:30:8a:b1:45:f6:0d:2e:8b:64:
44:cb:3a:57:20:44:2d:7f:d9:bd:7a:df:34:28:ca:
aa:8d:13:fe:c2:da:98:b2:ba:f7:68:9a:8f:18:5c:
10:89:1c:ea:a8:69:99:43:5e:83:64:62:27:36:ba:
73:8c:aa:c7:36:fb:c4:ab:92:fa:71:0d:6f:e2:bc:
b4:b0:cb:40:e1:5a:15:8a:db:18:0e:79:e1:50:84:
d3:dc:59:e1:1b:9c:6b:61:15:75:6d:bf:87:51:bc:
f3:33:9e:71:24:01:79:60:d3:e8:80:e2:e4:82:68:
f7:ac:6b:36:e3:e3:f8:15:c8:13:40:a0:f7:52:79:
1f:c2:f2:34:59:f6:bf:50:e1:a0:eb:32:55:e5:3f:
43:df:9d:45:0a:52:6f:0f:91:75:8d:12:90:b9:c5:
c3:78:a7:1e:70:11:c9:4e:02:70:9c:a1:fc:4a:0a:
b1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:84:1E:FB:34:C7:14:65:B8:62:0E:50:29:EB:D7:88:83:F2:9F:05
X509v3 Authority Key Identifier:
keyid:DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:e6:aa:1e:03:d4:47:01:af:b5:e2:5a:ca:e5:91:4e:e2:ff:
16:dc:e0:b1:ba:6d:71:27:ea:40:53:74:73:05:8b:db:3a:f8:
e7:09:e4:97:3c:c0:15:67:0a:e8:e7:eb:ca:48:fa:c7:2f:90:
42:46:56:0a:60:d0:0d:f8:0d:ce:6a:50:01:cb:58:61:80:80:
e8:6b:e7:f6:98:71:93:fe:24:d4:0b:b2:ce:1f:57:59:ee:0f:
09:11:4a:6f:f0:6a:67:5f:6a:11:63:d6:6b:a0:11:76:8e:0a:
94:06:a1:78:14:f7:55:5a:dc:2a:b0:a3:b6:3b:89:76:8f:5a:
17:14:a9:79:32:d4:a5:4f:87:0d:32:3d:ac:02:97:ca:7d:76:
d8:de:fd:94:f3:55:21:fc:88:09:35:9a:4a:7a:e8:21:ad:46:
8b:84:25:a4:ff:72:b2:51:37:37:2b:61:cc:17:b7:6d:56:d5:
7e:2b:ff:a7:3a:9f:43:cf:d7:1d:d0:48:98:d1:a9:8c:6a:d5:
89:76:32:ea:81:cf:27:1c:3a:df:d1:10:2d:ba:de:f2:c8:1a:
46:51:c8:b1:ed:e3:c6:f5:02:89:d9:2c:75:75:40:4f:44:bd:
cb:2d:13:95:f7:a7:7f:92:90:27:39:65:60:92:47:7c:26:72:
3e:ee:bb:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0kcPqZ78qbXnn0853P+4IbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNWU2YzIzMzA5MTFiYzFkYzhjODNkNDExZWY2YjEyMDhi
M2JiZDYwHhcNMjYwMzI1MTAwMTE3WhcNMjYwMzI2MTAwMTE3WjAzMTEwLwYDVQQD
EyhjMjg0MWVmYjM0YzcxNDY1Yjg2MjBlNTAyOWViZDc4ODgzZjI5ZjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47AiaCxehMHUrVvxehaICs1w9/J+
nOpU5B/FKCHcjJCWB7Hwu8iDg+QuV8daKbMTxfacdcdDZEdTDy7PPjUWLJLYmntN
6o4YfBkSmKoClMwwirFF9g0ui2REyzpXIEQtf9m9et80KMqqjRP+wtqYsrr3aJqP
GFwQiRzqqGmZQ16DZGInNrpzjKrHNvvEq5L6cQ1v4ry0sMtA4VoVitsYDnnhUITT
3FnhG5xrYRV1bb+HUbzzM55xJAF5YNPogOLkgmj3rGs24+P4FcgTQKD3UnkfwvI0
Wfa/UOGg6zJV5T9D351FClJvD5F1jRKQucXDeKcecBHJTgJwnKH8SgqxlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKEHvs0xxRluGIOUCnr14iD8p8FMB8GA1UdIwQY
MBaAFN5ebCMwkRvB3IyD1BHvaxIIs7vWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2w1c0l6Q1JHOEhjaklQVUVlOXJFZ2l6dTlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kZTlkNzItZmNkNC00YzdjLTg5Y2Et
ZGU0YmE3ODZmODcyLzEvM2w1c0l6Q1JHOEhjaklQVUVlOXJFZ2l6dTlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9kZTlkNzItZmNkNC00YzdjLTg5Y2EtZGU0YmE3ODZmODcy
LzEvM2w1c0l6Q1JHOEhjaklQVUVlOXJFZ2l6dTlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAruaqHgPU
RwGvteJayuWRTuL/FtzgsbptcSfqQFN0cwWL2zr45wnklzzAFWcK6Ofrykj6xy+Q
QkZWCmDQDfgNzmpQActYYYCA6Gvn9phxk/4k1Auyzh9XWe4PCRFKb/BqZ19qEWPW
a6ARdo4KlAaheBT3VVrcKrCjtjuJdo9aFxSpeTLUpU+HDTI9rAKXyn122N79lPNV
IfyICTWaSnroIa1Gi4QlpP9yslE3NythzBe3bVbVfiv/pzqfQ8/XHdBImNGpjGrV
iXYy6oHPJxw639EQLbre8sgaRlHIse3jxvUCidksdXVAT0S9yy0Tlfenf5KQJzll
YJJHfCZyPu67RA==
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:26:06 2026 by rpki-client