Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
File: 3A3qTqJUbXoBmk74JDtetjVlyEc.mft (raw, json)
Hash identifier: z98fqG3natLWC93r6p9lMtO32kiLkIe+2tsSUgzishg=
Subject key identifier: F3:66:6C:F3:52:A0:F8:3E:85:CA:35:4B:88:73:E0:E9:87:F7:7C:C6
Authority key identifier: DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
Certificate issuer: /CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Certificate serial: 019D27044880371B93DE0CBBF4E40F10C8E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
Manifest number: 181A
Signing time: Wed 25 Mar 2026 22:01:25 +0000
Manifest this update: Wed 25 Mar 2026 22:01:25 +0000
Manifest next update: Thu 26 Mar 2026 22:01:25 +0000
Files and hashes: 1: 3A3qTqJUbXoBmk74JDtetjVlyEc.crl (hash: GkB3oofipQWyWVU4QzDzxOWV2TSfUmRXi68gHtc+yXA=)
2: gmn2k3f32tfDXu2zwYzVyGe8JSs.roa (hash: W9sjDbpYZWeZAU/ChNMb2ZUNyZYk9yxty8Xm+AfcIh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:48:80:37:1b:93:de:0c:bb:f4:e4:0f:10:c8:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Validity
Not Before: Mar 25 22:01:25 2026 GMT
Not After : Mar 26 22:01:25 2026 GMT
Subject: CN=f3666cf352a0f83e85ca354b8873e0e987f77cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e8:a3:e0:81:3f:cd:e3:6f:0b:28:d0:f1:08:
59:04:c5:f6:b1:0e:53:15:b4:02:c8:d8:a4:bd:aa:
26:dd:46:49:c2:ed:c2:af:dd:17:21:b4:1d:b9:a4:
4c:e5:d2:ec:ca:f6:0b:16:a2:21:6c:a6:af:46:53:
2c:08:3c:9c:3e:9e:5a:4c:2a:11:b2:6e:83:6d:c0:
76:4f:cb:2a:51:46:48:ee:1b:bf:11:b6:29:cf:38:
1e:7c:ad:9f:0b:fb:02:2e:e3:24:4d:0c:b5:17:86:
80:37:97:b6:5a:0c:2b:ac:f7:88:fd:3a:49:6f:77:
ea:99:9d:12:d1:29:87:a5:94:0f:ba:c5:e6:b6:aa:
1b:46:ff:da:c5:ca:26:3c:27:50:44:5d:e0:6f:e1:
89:57:73:4d:d4:f3:ba:7d:aa:57:f2:ef:11:2f:ac:
1d:70:a2:56:1e:67:73:a0:b5:73:ff:3b:87:96:a0:
fb:f0:ea:43:46:be:9a:87:44:3a:3e:bb:51:4d:76:
50:88:18:1f:67:6d:dc:7e:0c:6e:43:20:99:9c:67:
51:4c:3c:a0:7a:e0:77:04:00:0d:77:1f:ff:86:23:
47:d7:dd:02:c3:a0:8a:18:c0:66:8f:d6:59:06:ab:
2a:9e:23:02:94:03:05:b8:f7:b9:b6:e4:94:8a:df:
2d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:66:6C:F3:52:A0:F8:3E:85:CA:35:4B:88:73:E0:E9:87:F7:7C:C6
X509v3 Authority Key Identifier:
keyid:DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:0b:60:96:c5:32:0e:ef:5e:80:17:be:e2:b8:52:db:ae:8b:
81:d1:62:19:bd:e2:a4:00:e7:a8:cf:55:73:01:5d:9e:64:9b:
00:3b:c4:13:cf:49:f7:07:fc:77:71:c6:c1:bf:82:8a:62:47:
d1:5a:15:4c:e3:2e:ad:ee:a8:db:55:d2:05:8b:cd:f5:ed:c7:
3e:dd:11:7a:c4:59:74:83:a3:b2:b0:16:2e:7d:a4:19:bb:e7:
2f:37:91:a2:cc:d8:4d:58:0b:11:3e:3d:b5:96:1c:39:44:cd:
38:a4:9e:f2:2b:1d:13:1b:91:f4:1a:f4:68:1e:f3:41:fb:a2:
3c:b3:8a:95:2b:87:80:15:34:98:57:0d:92:64:a0:c1:ad:0d:
a1:6b:b4:74:de:22:e0:82:75:dc:a7:d3:7a:65:51:2f:91:d0:
50:d6:51:0a:0e:dc:68:53:c0:4d:b0:66:20:06:1b:0f:dc:ef:
56:9f:65:7c:92:b6:37:c4:c4:60:e9:37:8e:d9:65:d7:b1:28:
a1:d5:60:9c:2f:f4:48:90:8a:39:2f:5a:e8:63:6d:e7:91:fb:
2a:91:10:59:6f:46:92:18:c3:a9:1e:d7:64:f7:a5:a5:38:be:
88:f5:b8:38:b4:e2:9a:04:66:f8:b5:f0:9e:e7:86:60:5a:bc:
1b:77:b7:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBEiANxuT3gy79OQPEMjkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMGRlYTRlYTI1NDZkN2EwMTlhNGVmODI0M2I1ZWI2MzU2
NWM4NDcwHhcNMjYwMzI1MjIwMTI1WhcNMjYwMzI2MjIwMTI1WjAzMTEwLwYDVQQD
EyhmMzY2NmNmMzUyYTBmODNlODVjYTM1NGI4ODczZTBlOTg3Zjc3Y2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeij4IE/zeNvCyjQ8QhZBMX2sQ5T
FbQCyNikvaom3UZJwu3Cr90XIbQduaRM5dLsyvYLFqIhbKavRlMsCDycPp5aTCoR
sm6DbcB2T8sqUUZI7hu/EbYpzzgefK2fC/sCLuMkTQy1F4aAN5e2WgwrrPeI/TpJ
b3fqmZ0S0SmHpZQPusXmtqobRv/axcomPCdQRF3gb+GJV3NN1PO6fapX8u8RL6wd
cKJWHmdzoLVz/zuHlqD78OpDRr6ah0Q6PrtRTXZQiBgfZ23cfgxuQyCZnGdRTDyg
euB3BAANdx//hiNH190Cw6CKGMBmj9ZZBqsqniMClAMFuPe5tuSUit8tkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPNmbPNSoPg+hco1S4hz4OmH93zGMB8GA1UdIwQY
MBaAFNwN6k6iVG16AZpO+CQ7XrY1ZchHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0EzcVRxSlViWG9CbWs3NEpEdGV0alZseUVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zNWE2ZTUtMzM2NC00YTc0LTk2NGMt
M2Q0YjI4M2YzMjJkLzEvM0EzcVRxSlViWG9CbWs3NEpEdGV0alZseUVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zNWE2ZTUtMzM2NC00YTc0LTk2NGMtM2Q0YjI4M2YzMjJk
LzEvM0EzcVRxSlViWG9CbWs3NEpEdGV0alZseUVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1gtglsUy
Du9egBe+4rhS266LgdFiGb3ipADnqM9VcwFdnmSbADvEE89J9wf8d3HGwb+CimJH
0VoVTOMure6o21XSBYvN9e3HPt0ResRZdIOjsrAWLn2kGbvnLzeRoszYTVgLET49
tZYcOUTNOKSe8isdExuR9Br0aB7zQfuiPLOKlSuHgBU0mFcNkmSgwa0NoWu0dN4i
4IJ13KfTemVRL5HQUNZRCg7caFPATbBmIAYbD9zvVp9lfJK2N8TEYOk3jtll17Eo
odVgnC/0SJCKOS9a6GNt55H7KpEQWW9GkhjDqR7XZPelpTi+iPW4OLTimgRm+LXw
nueGYFq8G3e32w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:44 2026 by rpki-client