Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
File: 3YqroPRrqhRP2wk46RwU-UxhZQw.mft (raw, json)
Hash identifier: zxJGChHUiIYgOA7PHpje3Fdgp33IXDT6jmmqWIIfrnA=
Subject key identifier: 1B:67:EE:3D:F8:CA:59:46:26:DD:0B:7B:92:09:BB:D4:DA:C7:32:52
Authority key identifier: DD:8A:AB:A0:F4:6B:AA:14:4F:DB:09:38:E9:1C:14:F9:4C:61:65:0C
Certificate issuer: /CN=dd8aaba0f46baa144fdb0938e91c14f94c61650c
Certificate serial: 019D2583DB523D0A35E6F56FDFAE6D0EDDD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
Manifest number: 0FE6
Signing time: Wed 25 Mar 2026 15:01:31 +0000
Manifest this update: Wed 25 Mar 2026 15:01:31 +0000
Manifest next update: Thu 26 Mar 2026 15:01:31 +0000
Files and hashes: 1: 3YqroPRrqhRP2wk46RwU-UxhZQw.crl (hash: a0NmE07uBTmhvVv3i4Pos9R0/8m8tEoluKugACvoRK4=)
2: ipwbth9z_kAmFFiQQC69LkO_nQw.roa (hash: NejJVwemsx7RaWRb+qhN37iXZFwIo50zil0wLKpDlFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:db:52:3d:0a:35:e6:f5:6f:df:ae:6d:0e:dd:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8aaba0f46baa144fdb0938e91c14f94c61650c
Validity
Not Before: Mar 25 15:01:31 2026 GMT
Not After : Mar 26 15:01:31 2026 GMT
Subject: CN=1b67ee3df8ca594626dd0b7b9209bbd4dac73252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:17:b2:1a:ae:d2:da:7f:b2:1f:60:63:fc:78:
44:28:df:63:58:06:be:ea:12:e8:a8:9e:75:dd:28:
45:c3:c0:2e:fc:f7:0b:68:16:3d:ba:25:3d:23:ce:
27:d2:27:ec:63:97:2d:d6:78:da:88:09:3f:17:a2:
59:16:f9:2c:bc:43:f5:dd:bf:aa:ac:6a:09:d1:df:
c2:bf:61:70:b7:9e:a1:88:61:57:0c:c7:12:4d:28:
2f:48:bf:61:8c:3c:91:33:79:eb:e1:e7:1c:67:74:
da:5a:11:8a:61:11:d1:91:03:2b:c4:80:c7:38:a5:
19:66:35:97:d1:33:4d:42:ec:60:29:e8:80:5c:73:
4c:84:68:c5:0d:cb:b6:bc:25:2b:93:15:4e:78:a8:
f4:3d:c0:c0:ae:fe:45:53:b2:14:ec:d9:d1:8e:55:
86:e7:03:ea:3c:27:c1:f7:6f:47:61:37:56:91:2b:
e9:ae:4b:f1:d8:e8:e0:28:32:87:16:28:bd:fc:7d:
2a:4c:e5:bf:fb:0e:04:d9:c3:94:92:5b:2e:68:46:
a8:5f:23:ee:08:07:7c:06:91:2a:82:e3:32:d9:02:
9d:0c:36:03:49:d4:e7:be:df:43:7f:eb:b9:32:a3:
0a:ce:60:0f:d9:3d:86:d0:a6:1c:5b:dc:af:1c:e5:
e9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:67:EE:3D:F8:CA:59:46:26:DD:0B:7B:92:09:BB:D4:DA:C7:32:52
X509v3 Authority Key Identifier:
keyid:DD:8A:AB:A0:F4:6B:AA:14:4F:DB:09:38:E9:1C:14:F9:4C:61:65:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:22:a2:14:78:91:50:83:57:ee:42:ad:93:99:1d:9c:6c:21:
10:ed:ea:4f:a0:55:b4:e0:61:f4:88:04:96:41:9f:d6:40:ef:
5d:1d:1e:dc:7e:83:a8:4e:b4:98:39:ff:19:ef:82:ec:05:39:
7d:e4:77:46:b8:4e:3c:28:2d:ba:86:2b:f7:54:d5:a0:f2:8b:
80:7c:67:e0:a0:1f:b2:81:c4:e2:04:dd:23:8b:8e:fa:79:c8:
d2:84:6f:8c:62:38:1c:d1:19:52:e8:93:47:59:87:5f:fd:74:
19:65:e6:7a:50:c2:e3:24:ac:0e:81:3f:75:a3:56:2d:c5:f6:
37:33:c5:51:27:f3:a7:6a:55:71:aa:46:d7:81:d7:46:e1:17:
a9:9b:5d:f0:47:ed:c0:91:9f:20:74:6e:ae:78:ba:b3:18:ff:
87:86:59:92:07:7c:2a:91:48:f9:51:2f:c7:9a:41:91:b1:02:
fe:01:34:69:a9:20:87:d6:8c:b2:7d:49:23:03:94:08:19:d1:
98:d2:c5:e2:7d:29:97:38:e9:ff:4d:c2:54:1a:ff:98:ac:b6:
54:e4:0c:56:1a:9e:b6:b9:d6:dc:b5:38:b1:6e:37:5e:55:18:
0d:06:be:3d:87:cf:45:9a:a5:d8:0c:09:dc:59:9a:37:48:af:
92:9a:5a:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lg9tSPQo15vVv365tDt3SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkOGFhYmEwZjQ2YmFhMTQ0ZmRiMDkzOGU5MWMxNGY5NGM2
MTY1MGMwHhcNMjYwMzI1MTUwMTMxWhcNMjYwMzI2MTUwMTMxWjAzMTEwLwYDVQQD
EygxYjY3ZWUzZGY4Y2E1OTQ2MjZkZDBiN2I5MjA5YmJkNGRhYzczMjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtReyGq7S2n+yH2Bj/HhEKN9jWAa+
6hLoqJ513ShFw8Au/PcLaBY9uiU9I84n0ifsY5ct1njaiAk/F6JZFvksvEP13b+q
rGoJ0d/Cv2Fwt56hiGFXDMcSTSgvSL9hjDyRM3nr4eccZ3TaWhGKYRHRkQMrxIDH
OKUZZjWX0TNNQuxgKeiAXHNMhGjFDcu2vCUrkxVOeKj0PcDArv5FU7IU7NnRjlWG
5wPqPCfB929HYTdWkSvprkvx2OjgKDKHFii9/H0qTOW/+w4E2cOUklsuaEaoXyPu
CAd8BpEqguMy2QKdDDYDSdTnvt9Df+u5MqMKzmAP2T2G0KYcW9yvHOXpQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtn7j34yllGJt0Le5IJu9TaxzJSMB8GA1UdIwQY
MBaAFN2Kq6D0a6oUT9sJOOkcFPlMYWUMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1lxcm9QUnJxaFJQMndrNDZSd1UtVXhoWlF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xZmEyN2UtYWFmMC00YmUyLWE1MjIt
YTgwYzk0NzYxZDIzLzEvM1lxcm9QUnJxaFJQMndrNDZSd1UtVXhoWlF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8xZmEyN2UtYWFmMC00YmUyLWE1MjItYTgwYzk0NzYxZDIz
LzEvM1lxcm9QUnJxaFJQMndrNDZSd1UtVXhoWlF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdiKiFHiR
UINX7kKtk5kdnGwhEO3qT6BVtOBh9IgElkGf1kDvXR0e3H6DqE60mDn/Ge+C7AU5
feR3RrhOPCgtuoYr91TVoPKLgHxn4KAfsoHE4gTdI4uO+nnI0oRvjGI4HNEZUuiT
R1mHX/10GWXmelDC4ySsDoE/daNWLcX2NzPFUSfzp2pVcapG14HXRuEXqZtd8Eft
wJGfIHRurni6sxj/h4ZZkgd8KpFI+VEvx5pBkbEC/gE0aakgh9aMsn1JIwOUCBnR
mNLF4n0plzjp/03CVBr/mKy2VOQMVhqetrnW3LU4sW43XlUYDQa+PYfPRZql2AwJ
3FmaN0ivkppapQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:56:48 2026 by rpki-client