Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
File: V3zQhta4KSWruLuBXmWIUlIuCSE.mft (raw, json)
Hash identifier: BrdBfVgRYwWDo9DB7r1KUI3KvRWL5VFpiIhuHGp4L7Y=
Subject key identifier: 8D:54:01:77:69:0C:18:FA:08:84:F2:2A:75:0B:2F:36:74:1B:FE:88
Authority key identifier: 57:7C:D0:86:D6:B8:29:25:AB:B8:BB:81:5E:65:88:52:52:2E:09:21
Certificate issuer: /CN=577cd086d6b82925abb8bb815e658852522e0921
Certificate serial: 019D284D575A1795BA22CC84CF0E0E0F91E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 04:00:50 +0000
Manifest this update: Thu 26 Mar 2026 04:00:50 +0000
Manifest next update: Fri 27 Mar 2026 04:00:50 +0000
Files and hashes: 1: V3zQhta4KSWruLuBXmWIUlIuCSE.crl (hash: XvPNn+9XlmJ8nurVYnN4F2DSpWsHxxRne+LboI664pU=)
2: pLGoFC89pNsr7Py4cTyjK2qhEfg.roa (hash: E5aXP60TZFECYX5WU/DbcrY7n3oYD2lgvk9iR+kGxes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:57:5a:17:95:ba:22:cc:84:cf:0e:0e:0f:91:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577cd086d6b82925abb8bb815e658852522e0921
Validity
Not Before: Mar 26 04:00:50 2026 GMT
Not After : Mar 27 04:00:50 2026 GMT
Subject: CN=8d540177690c18fa0884f22a750b2f36741bfe88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:38:ad:83:11:a8:48:ea:aa:a8:95:f0:65:5b:
84:db:f1:8f:8c:5a:4d:24:53:dd:ad:03:3d:43:bd:
0e:9d:4a:38:6d:9a:80:eb:58:75:25:4e:1f:85:a9:
76:8b:78:e5:96:e6:5a:63:07:ea:a4:f9:47:75:eb:
b2:60:fb:34:55:7a:d2:02:94:84:04:dc:6a:4e:7b:
cf:2c:ef:3a:0d:15:0a:db:86:19:bd:5c:fa:06:09:
1e:50:c3:46:d1:90:46:cc:fb:a0:7f:84:87:71:c0:
f2:c8:41:8b:4e:95:6d:be:cd:7a:9f:fd:31:14:b6:
48:82:ff:8a:33:2a:92:70:fb:e5:05:76:5b:88:26:
de:c4:ba:f5:b7:3c:c4:b1:d5:9e:bf:fc:39:6b:07:
2a:fb:48:f1:cc:e5:26:7e:37:af:c7:8f:0e:ac:4b:
75:06:5e:07:3c:14:32:f7:1e:d9:14:f9:33:b1:60:
3a:8b:f2:dc:16:d8:3b:16:ce:2c:69:ca:aa:1e:bc:
e4:54:0f:b1:65:45:74:b4:63:0d:53:09:13:c8:63:
3f:44:86:6b:6c:b4:31:f3:9e:ae:cd:67:d0:59:02:
77:cd:34:67:a2:3c:1c:67:53:d7:32:4b:b4:f6:53:
0e:a1:76:4d:2f:5d:75:a0:e0:a9:72:3c:5b:8a:7e:
5f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:54:01:77:69:0C:18:FA:08:84:F2:2A:75:0B:2F:36:74:1B:FE:88
X509v3 Authority Key Identifier:
keyid:57:7C:D0:86:D6:B8:29:25:AB:B8:BB:81:5E:65:88:52:52:2E:09:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:aa:95:c8:50:c2:19:16:f5:5f:bf:30:48:83:25:ff:cd:bc:
0e:4e:b9:35:0e:a4:fb:76:eb:ad:46:33:5a:d1:cf:ae:f0:24:
3b:d7:b9:d7:29:12:7d:3d:a1:59:49:a5:a3:d2:7d:19:7e:0c:
0e:4e:d9:6b:53:e1:a0:d3:fc:5c:93:8e:80:07:55:70:1d:44:
76:fc:dc:98:06:e9:c4:1a:c2:cf:20:73:0f:32:5c:ab:92:18:
61:71:f7:a3:cc:f6:80:34:95:c1:1d:e2:81:f6:0e:c9:e1:38:
ee:38:6b:c0:52:f4:2a:0c:7a:af:fc:ac:3c:b8:7f:43:92:f2:
8e:fc:9f:d7:7a:50:d2:0e:58:5f:2f:a6:79:4c:27:5f:9a:c0:
30:eb:0d:4c:80:c2:62:48:2b:9a:f3:03:75:c9:ac:36:fe:79:
e9:db:16:a9:4b:59:f5:29:4f:f0:15:cd:1f:db:8b:84:9c:d4:
ee:2d:90:8e:3b:42:be:38:2e:ae:b2:b4:5f:1e:54:e7:56:ff:
10:28:15:1c:bc:30:c1:58:d3:35:8f:43:cf:24:fb:f3:a9:96:
69:4f:f0:c3:a4:fc:ea:75:60:8a:6b:cb:41:3d:f7:75:3b:97:
73:34:8c:04:c3:ff:c7:3f:5d:aa:60:93:4f:77:9d:63:ed:55:
d7:0f:35:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTVdaF5W6IsyEzw4OD5HnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3N2NkMDg2ZDZiODI5MjVhYmI4YmI4MTVlNjU4ODUyNTIy
ZTA5MjEwHhcNMjYwMzI2MDQwMDUwWhcNMjYwMzI3MDQwMDUwWjAzMTEwLwYDVQQD
Eyg4ZDU0MDE3NzY5MGMxOGZhMDg4NGYyMmE3NTBiMmYzNjc0MWJmZTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzitgxGoSOqqqJXwZVuE2/GPjFpN
JFPdrQM9Q70OnUo4bZqA61h1JU4fhal2i3jlluZaYwfqpPlHdeuyYPs0VXrSApSE
BNxqTnvPLO86DRUK24YZvVz6BgkeUMNG0ZBGzPugf4SHccDyyEGLTpVtvs16n/0x
FLZIgv+KMyqScPvlBXZbiCbexLr1tzzEsdWev/w5awcq+0jxzOUmfjevx48OrEt1
Bl4HPBQy9x7ZFPkzsWA6i/LcFtg7Fs4sacqqHrzkVA+xZUV0tGMNUwkTyGM/RIZr
bLQx856uzWfQWQJ3zTRnojwcZ1PXMku09lMOoXZNL111oOCpcjxbin5fNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1UAXdpDBj6CITyKnULLzZ0G/6IMB8GA1UdIwQY
MBaAFFd80IbWuCklq7i7gV5liFJSLgkhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjN6UWh0YTRLU1dydUx1QlhtV0lVbEl1Q1NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83YWE4OWUtNGJhZS00MDE0LTgyYjkt
NzIwOGNkOThkODgxLzEvVjN6UWh0YTRLU1dydUx1QlhtV0lVbEl1Q1NFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS83YWE4OWUtNGJhZS00MDE0LTgyYjktNzIwOGNkOThkODgx
LzEvVjN6UWh0YTRLU1dydUx1QlhtV0lVbEl1Q1NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAraqVyFDC
GRb1X78wSIMl/828Dk65NQ6k+3brrUYzWtHPrvAkO9e51ykSfT2hWUmlo9J9GX4M
Dk7Za1PhoNP8XJOOgAdVcB1EdvzcmAbpxBrCzyBzDzJcq5IYYXH3o8z2gDSVwR3i
gfYOyeE47jhrwFL0Kgx6r/ysPLh/Q5Lyjvyf13pQ0g5YXy+meUwnX5rAMOsNTIDC
YkgrmvMDdcmsNv556dsWqUtZ9SlP8BXNH9uLhJzU7i2QjjtCvjgurrK0Xx5U51b/
ECgVHLwwwVjTNY9DzyT786mWaU/ww6T86nVgimvLQT33dTuXczSMBMP/xz9dqmCT
T3edY+1V1w81bw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:44 2026 by rpki-client