Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
File: 3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft (raw, json)
Hash identifier: Lztnnx69OGwEEAOn3/0KSLnYLhZPvq0r0emzdPwEuRE=
Subject key identifier: FD:53:51:77:CD:4A:B9:FE:E2:70:0F:AD:5C:EF:AA:7D:D8:3F:DF:35
Authority key identifier: DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89
Certificate issuer: /CN=ded55569177a889d337f03f2e698acabcccbb589
Certificate serial: 019D26CCD1C4E452437D51930A7010531EE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
Manifest number: 150F
Signing time: Wed 25 Mar 2026 21:00:50 +0000
Manifest this update: Wed 25 Mar 2026 21:00:50 +0000
Manifest next update: Thu 26 Mar 2026 21:00:50 +0000
Files and hashes: 1: 3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl (hash: 98txllC9HdCtLFwfPqbO2sZzkD99LxsetHLHTP2BCIA=)
2: PjoIBGbk9FD7bZGLP8eN3ezf2Uo.roa (hash: gwcdk+V9+YDh37eh6agaRz1L3hMZa0x8O24FJTvNrKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:d1:c4:e4:52:43:7d:51:93:0a:70:10:53:1e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded55569177a889d337f03f2e698acabcccbb589
Validity
Not Before: Mar 25 21:00:50 2026 GMT
Not After : Mar 26 21:00:50 2026 GMT
Subject: CN=fd535177cd4ab9fee2700fad5cefaa7dd83fdf35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fd:2b:70:8e:c5:82:a2:a8:34:5c:0e:5e:f1:
c0:57:54:2d:7c:49:3a:a5:54:19:c2:d6:57:12:b1:
05:f3:eb:30:4d:ca:fd:cd:93:51:49:cb:4e:1f:9a:
e7:0b:6e:35:d9:46:d4:6e:cb:91:fe:94:0f:46:54:
24:e0:04:68:61:bf:c7:d3:89:68:76:40:2a:40:8f:
61:57:84:39:a3:69:9c:59:c4:20:98:a3:23:63:43:
bb:05:db:f5:20:c9:56:b5:0a:74:21:7a:53:74:29:
dc:37:0e:b5:9d:83:18:68:76:da:71:3d:53:30:50:
8c:b3:01:d4:4b:82:38:50:39:b5:d9:91:d4:36:74:
f0:f3:8e:82:da:8d:9a:5f:a5:22:48:5d:f1:89:bb:
58:37:20:9c:df:47:87:9e:fe:34:67:cf:42:0d:1a:
c2:53:bb:d0:8e:66:ac:28:6e:07:de:50:9f:ee:ff:
84:e5:72:45:60:dd:fe:d9:ae:ae:e1:0c:47:10:e2:
7e:14:5d:fd:ae:a6:c9:ef:7b:7b:ea:e0:c8:90:93:
d2:4c:98:79:56:4f:e4:fe:8b:53:c0:48:e9:4d:04:
9c:e4:0b:d7:e0:3b:1d:b8:95:49:77:9a:20:85:94:
48:06:3f:ea:3a:24:26:81:36:f9:5f:b8:22:8d:b7:
7d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:53:51:77:CD:4A:B9:FE:E2:70:0F:AD:5C:EF:AA:7D:D8:3F:DF:35
X509v3 Authority Key Identifier:
keyid:DE:D5:55:69:17:7A:88:9D:33:7F:03:F2:E6:98:AC:AB:CC:CB:B5:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tVVaRd6iJ0zfwPy5pisq8zLtYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b6ac2c-ba6c-4e55-b17c-84a1fe9d4b78/1/3tVVaRd6iJ0zfwPy5pisq8zLtYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a2:ce:07:51:fc:11:a2:7e:cf:07:cd:d9:c3:41:94:7d:96:
02:93:98:ec:86:51:8f:87:f1:6e:17:e8:27:b1:b2:02:bc:22:
a6:46:ad:f8:20:b6:36:46:0c:56:48:b4:c6:39:a5:89:d1:3c:
d0:38:76:89:5a:16:c0:f5:89:5f:ce:ca:2c:fa:8c:98:9e:b1:
23:fa:8c:01:6b:92:4e:4e:63:d5:44:ab:02:51:e0:c6:7c:84:
70:a9:59:94:68:f4:18:7c:a3:d8:ea:46:71:5e:5f:ea:be:a5:
aa:de:c7:5b:3d:96:46:bd:65:75:11:0c:70:be:ad:92:93:2a:
14:e0:f4:69:98:e2:ad:d0:20:29:af:5b:b1:0e:47:21:cc:74:
04:d6:4d:b2:71:81:7c:4d:4d:a1:8c:bb:93:a5:71:76:5c:31:
be:49:f5:a9:5a:9b:97:a6:4f:22:c6:a5:84:7a:f1:2c:c8:15:
ab:09:c7:02:1d:5c:c4:13:ca:5c:af:a4:0c:f9:81:95:06:3e:
60:75:1f:02:67:92:b7:af:55:5f:9a:26:27:96:77:54:35:a6:
a1:22:fa:ab:91:59:29:2c:5d:14:9c:40:f7:34:5c:a8:2c:b7:
7e:19:23:df:df:6b:66:f8:f5:03:c9:d6:75:48:ed:56:d2:36:
01:c6:ca:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzNHE5FJDfVGTCnAQUx7jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZDU1NTY5MTc3YTg4OWQzMzdmMDNmMmU2OThhY2FiY2Nj
YmI1ODkwHhcNMjYwMzI1MjEwMDUwWhcNMjYwMzI2MjEwMDUwWjAzMTEwLwYDVQQD
EyhmZDUzNTE3N2NkNGFiOWZlZTI3MDBmYWQ1Y2VmYWE3ZGQ4M2ZkZjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwP0rcI7FgqKoNFwOXvHAV1QtfEk6
pVQZwtZXErEF8+swTcr9zZNRSctOH5rnC2412UbUbsuR/pQPRlQk4ARoYb/H04lo
dkAqQI9hV4Q5o2mcWcQgmKMjY0O7Bdv1IMlWtQp0IXpTdCncNw61nYMYaHbacT1T
MFCMswHUS4I4UDm12ZHUNnTw846C2o2aX6UiSF3xibtYNyCc30eHnv40Z89CDRrC
U7vQjmasKG4H3lCf7v+E5XJFYN3+2a6u4QxHEOJ+FF39rqbJ73t76uDIkJPSTJh5
Vk/k/otTwEjpTQSc5AvX4DsduJVJd5oghZRIBj/qOiQmgTb5X7gijbd9PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1TUXfNSrn+4nAPrVzvqn3YP981MB8GA1UdIwQY
MBaAFN7VVWkXeoidM38D8uaYrKvMy7WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3RWVmFSZDZpSjB6ZndQeTVwaXNxOHpMdFlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9iNmFjMmMtYmE2Yy00ZTU1LWIxN2Mt
ODRhMWZlOWQ0Yjc4LzEvM3RWVmFSZDZpSjB6ZndQeTVwaXNxOHpMdFlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9iNmFjMmMtYmE2Yy00ZTU1LWIxN2MtODRhMWZlOWQ0Yjc4
LzEvM3RWVmFSZDZpSjB6ZndQeTVwaXNxOHpMdFlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVKLOB1H8
EaJ+zwfN2cNBlH2WApOY7IZRj4fxbhfoJ7GyArwipkat+CC2NkYMVki0xjmlidE8
0Dh2iVoWwPWJX87KLPqMmJ6xI/qMAWuSTk5j1USrAlHgxnyEcKlZlGj0GHyj2OpG
cV5f6r6lqt7HWz2WRr1ldREMcL6tkpMqFOD0aZjirdAgKa9bsQ5HIcx0BNZNsnGB
fE1NoYy7k6Vxdlwxvkn1qVqbl6ZPIsalhHrxLMgVqwnHAh1cxBPKXK+kDPmBlQY+
YHUfAmeSt69VX5omJ5Z3VDWmoSL6q5FZKSxdFJxA9zRcqCy3fhkj399rZvj1A8nW
dUjtVtI2AcbK3Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:23:04 2026 by rpki-client