Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
File: 3MpSIZb9CbrnOba9IyLl65DaT7k.mft (raw, json)
Hash identifier: SURQTp8fJdwpQH2/xHdSzcbF9tb8MkPJLngMdjklRhY=
Subject key identifier: 3A:94:C3:CA:8B:B1:DA:65:3B:BA:41:81:06:1A:B3:F1:91:79:36:6C
Authority key identifier: DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
Certificate issuer: /CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Certificate serial: 019D28847877E2837C19B8371FCE52021488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
Manifest number: 1243
Signing time: Thu 26 Mar 2026 05:01:03 +0000
Manifest this update: Thu 26 Mar 2026 05:01:03 +0000
Manifest next update: Fri 27 Mar 2026 05:01:03 +0000
Files and hashes: 1: 3MpSIZb9CbrnOba9IyLl65DaT7k.crl (hash: 2DHdaocywM1WMYQUUuyb6Jflh2GH1qLsgRN97Ph921E=)
2: 3dytCQRLOyyF8BB1A5B-6F1xVBM.roa (hash: WNCavQmenTSfXPZnZ/JnExGVfMwWPV0krWA6OaC4XXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:78:77:e2:83:7c:19:b8:37:1f:ce:52:02:14:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Validity
Not Before: Mar 26 05:01:03 2026 GMT
Not After : Mar 27 05:01:03 2026 GMT
Subject: CN=3a94c3ca8bb1da653bba4181061ab3f19179366c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f1:f0:7f:6d:f0:38:15:d5:04:2d:b1:7a:cb:
25:2a:fc:08:04:17:23:37:c9:af:4b:83:ce:04:fa:
ba:a1:e1:95:ec:b8:19:a3:3b:5e:b6:39:43:c2:90:
b8:ce:27:bc:34:5e:aa:aa:78:87:df:8e:00:5a:50:
57:54:01:a1:fb:a9:c2:58:c9:41:0e:c2:ca:eb:2e:
ad:05:04:5d:fc:05:2c:ce:60:47:46:46:8c:42:df:
9d:99:51:4d:6e:bc:94:46:e7:07:11:78:fd:5d:ae:
28:2d:a3:d0:26:8d:ae:26:8c:b2:93:30:63:9c:a8:
81:2d:f0:28:01:70:60:14:17:ee:9b:c5:d9:ef:4e:
3f:c6:f8:4a:83:c1:04:4a:f6:a1:69:d3:36:5b:b9:
e9:90:2c:81:1b:d8:38:77:9c:f1:1b:ec:03:50:7c:
cf:b3:da:35:7d:b7:4e:a4:f7:94:2d:14:b1:71:b8:
ff:cd:91:81:45:27:09:d6:51:3a:b7:80:a8:59:1e:
50:dc:58:25:c7:d5:7c:f4:95:45:d9:8e:a0:6e:b8:
5d:46:e6:e0:85:5b:f9:f5:03:c7:d0:7b:e2:f5:70:
cc:6e:3a:0c:59:88:ce:a2:36:bf:5a:fe:d4:13:dd:
4f:27:10:22:67:9c:9f:41:0e:b6:d3:fc:e8:4f:26:
5f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:94:C3:CA:8B:B1:DA:65:3B:BA:41:81:06:1A:B3:F1:91:79:36:6C
X509v3 Authority Key Identifier:
keyid:DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:85:38:70:b7:33:74:da:0d:98:79:b3:a2:1e:4c:3a:44:c2:
13:c7:18:92:ab:a8:a4:f7:4b:3d:51:81:cd:1d:36:9a:d9:9d:
c8:04:86:d8:8d:2f:89:b2:7e:91:ad:b0:ca:e8:ea:a8:d1:32:
c5:ad:1c:b1:5a:f8:b2:01:dd:d1:7e:15:42:b4:dd:f7:12:34:
72:9b:7e:8a:19:97:7d:2e:77:5b:bf:33:8a:ab:b6:2c:54:f4:
1e:f6:d9:a4:42:28:dd:f4:10:47:3d:14:cc:04:ff:dd:bc:ee:
57:a4:c4:bc:ab:08:f9:d5:4d:65:dd:ea:71:db:10:e8:ac:01:
84:ab:4f:0e:1e:41:23:45:4b:0d:ec:ff:e9:0d:11:b9:d6:d5:
cb:a5:8b:f5:22:18:69:41:86:ff:7b:1a:46:07:c5:d5:ee:59:
ea:59:36:ae:6e:7e:88:e7:53:43:fb:6c:85:12:41:ef:7c:06:
3c:b9:e3:fa:c8:0c:6d:1d:fa:58:16:36:ee:61:c0:c5:da:0e:
fe:31:3f:de:7c:6b:61:26:d6:b6:e4:8d:55:21:30:03:89:f7:
79:8b:36:2f:1d:df:62:4a:c0:11:2e:ab:39:11:67:da:c8:13:
cc:12:7b:e3:25:63:fd:10:6a:46:5b:f2:7f:79:e1:1f:2a:fe:
d2:3c:59:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohHh34oN8Gbg3H85SAhSIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjY2E1MjIxOTZmZDA5YmFlNzM5YjZiZDIzMjJlNWViOTBk
YTRmYjkwHhcNMjYwMzI2MDUwMTAzWhcNMjYwMzI3MDUwMTAzWjAzMTEwLwYDVQQD
EygzYTk0YzNjYThiYjFkYTY1M2JiYTQxODEwNjFhYjNmMTkxNzkzNjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofHwf23wOBXVBC2xesslKvwIBBcj
N8mvS4POBPq6oeGV7LgZoztetjlDwpC4zie8NF6qqniH344AWlBXVAGh+6nCWMlB
DsLK6y6tBQRd/AUszmBHRkaMQt+dmVFNbryURucHEXj9Xa4oLaPQJo2uJoyykzBj
nKiBLfAoAXBgFBfum8XZ704/xvhKg8EESvahadM2W7npkCyBG9g4d5zxG+wDUHzP
s9o1fbdOpPeULRSxcbj/zZGBRScJ1lE6t4CoWR5Q3Fglx9V89JVF2Y6gbrhdRubg
hVv59QPH0Hvi9XDMbjoMWYjOoja/Wv7UE91PJxAiZ5yfQQ620/zoTyZfdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqUw8qLsdplO7pBgQYas/GReTZsMB8GA1UdIwQY
MBaAFNzKUiGW/Qm65zm2vSMi5euQ2k+5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM01wU0laYjlDYnJuT2JhOUl5TGw2NURhVDdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi82NDlhZjAtMTMyYy00NTMzLTlmYmMt
M2IyNTBhZTE4OTM2LzEvM01wU0laYjlDYnJuT2JhOUl5TGw2NURhVDdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi82NDlhZjAtMTMyYy00NTMzLTlmYmMtM2IyNTBhZTE4OTM2
LzEvM01wU0laYjlDYnJuT2JhOUl5TGw2NURhVDdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABYU4cLcz
dNoNmHmzoh5MOkTCE8cYkquopPdLPVGBzR02mtmdyASG2I0vibJ+ka2wyujqqNEy
xa0csVr4sgHd0X4VQrTd9xI0cpt+ihmXfS53W78ziqu2LFT0HvbZpEIo3fQQRz0U
zAT/3bzuV6TEvKsI+dVNZd3qcdsQ6KwBhKtPDh5BI0VLDez/6Q0RudbVy6WL9SIY
aUGG/3saRgfF1e5Z6lk2rm5+iOdTQ/tshRJB73wGPLnj+sgMbR36WBY27mHAxdoO
/jE/3nxrYSbWtuSNVSEwA4n3eYs2Lx3fYkrAES6rORFn2sgTzBJ74yVj/RBqRlvy
f3nhHyr+0jxZ0g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:26 2026 by rpki-client