Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
File: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft (raw, json)
Hash identifier: wb4j8dfIagBvmJPkNNrWEHOv7jtY27UvzLPZ9C4Zb0s=
Subject key identifier: E4:0F:E8:A4:9C:D5:25:D3:A9:9C:2A:E8:0F:DF:21:B5:C5:45:5A:CA
Authority key identifier: DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
Certificate issuer: /CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Certificate serial: 019D284E56934BD95E2349D4D88783AAC08C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
Manifest number: 06BC
Signing time: Thu 26 Mar 2026 04:01:55 +0000
Manifest this update: Thu 26 Mar 2026 04:01:55 +0000
Manifest next update: Fri 27 Mar 2026 04:01:55 +0000
Files and hashes: 1: 3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl (hash: A6g9uEqCdvxaq7G09rONDuhN92JQLdsevohnG5uWeHc=)
2: HrUPMg6A27LayY1nzJVXakWil-8.roa (hash: 6oiaD9+R084Ie04PfQ9j94YYcX9VFnuvxlsXJPk70DA=)
3: LsW7E92fgqyb4h0SFoyQ1iS_A-A.roa (hash: lZdLHI5/Pom2chJvXWn7/eiTGrnfbJ5HoDaiu046MUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:56:93:4b:d9:5e:23:49:d4:d8:87:83:aa:c0:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddd9770c307ea3960c8da268a8865a4a9fa634c9
Validity
Not Before: Mar 26 04:01:55 2026 GMT
Not After : Mar 27 04:01:55 2026 GMT
Subject: CN=e40fe8a49cd525d3a99c2ae80fdf21b5c5455aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c2:c0:91:a2:73:83:a7:89:81:d4:af:95:07:
ac:ef:28:a2:56:85:92:81:f8:74:45:9a:15:be:56:
ed:c7:43:8b:eb:55:6a:59:88:ff:4c:ff:e2:88:4f:
a2:20:77:12:09:fa:87:4d:cd:9a:c1:10:b2:f0:8b:
9a:59:cc:51:39:c1:14:6c:d5:ea:27:5f:26:dd:92:
6f:46:68:fc:bf:51:ec:9f:c0:30:e5:64:a3:b9:2b:
77:9e:7b:5b:3a:c3:27:60:35:7e:42:25:51:d7:db:
61:33:59:76:de:61:24:d4:35:87:f6:f5:34:08:71:
6d:a7:2f:82:54:3b:24:03:b8:41:cb:a3:98:1e:c5:
be:65:49:13:43:de:13:ee:59:1b:58:1a:3e:c0:61:
f6:d1:18:e9:45:4d:84:34:5c:f7:ae:6d:64:32:b2:
2a:c9:d7:14:d9:3f:34:80:7f:83:f8:e6:fa:fb:ce:
a6:1b:51:df:a5:60:28:9e:4c:f5:5b:28:aa:76:9f:
7d:7e:c5:5c:f8:ae:fb:9f:57:09:57:7c:24:33:6e:
40:e8:e4:39:8f:71:88:61:c7:9e:14:67:df:47:ae:
5d:db:dc:4f:79:b9:af:d1:33:f6:9b:86:61:64:9c:
33:16:8f:aa:38:e0:8e:54:08:31:b0:c5:4c:5b:b7:
11:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0F:E8:A4:9C:D5:25:D3:A9:9C:2A:E8:0F:DF:21:B5:C5:45:5A:CA
X509v3 Authority Key Identifier:
keyid:DD:D9:77:0C:30:7E:A3:96:0C:8D:A2:68:A8:86:5A:4A:9F:A6:34:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dl3DDB-o5YMjaJoqIZaSp-mNMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/4444ab-3da3-418b-a105-f2fe0d04bfbf/1/3dl3DDB-o5YMjaJoqIZaSp-mNMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f5:45:4d:25:0e:7f:6e:e9:1c:7f:ed:2d:1a:0c:e6:42:26:
b7:8e:e5:fb:61:03:d4:e6:ff:b8:eb:ff:9a:24:12:0c:64:3b:
d2:0c:0a:47:d8:f6:cf:67:1b:e1:78:0c:2c:19:f7:63:25:4b:
00:b6:07:cb:39:8e:9c:25:53:21:0e:e7:ad:59:36:1b:c1:7f:
5b:f1:89:1f:a1:95:2a:87:68:8a:23:62:a8:eb:ea:b2:2c:1e:
24:1b:3c:16:a4:5c:52:99:78:2c:e4:36:20:2c:17:35:0e:43:
4f:b6:43:18:c0:31:83:92:98:55:19:13:ee:e8:a1:0c:df:6e:
88:ca:06:da:2e:9c:fa:94:c0:39:02:c6:69:7d:00:c6:b9:3f:
09:62:ae:06:8c:7d:2d:3f:4d:f6:b2:08:be:cf:2e:18:4e:1e:
83:cb:4d:79:50:18:73:a9:df:d1:96:f4:38:db:c1:af:ac:68:
27:b2:c9:ed:af:77:1a:06:eb:e6:77:5f:ae:62:96:10:f0:37:
24:4c:ab:4b:c6:03:25:42:50:c6:d0:e3:6e:5c:80:67:61:85:
f7:b4:73:6a:e7:8f:f8:b3:47:7a:18:27:65:5d:bf:f0:f8:fa:
46:68:ac:cf:62:cf:76:b2:85:52:24:1c:52:11:ca:33:29:c8:
6a:6b:04:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTlaTS9leI0nU2IeDqsCMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZDk3NzBjMzA3ZWEzOTYwYzhkYTI2OGE4ODY1YTRhOWZh
NjM0YzkwHhcNMjYwMzI2MDQwMTU1WhcNMjYwMzI3MDQwMTU1WjAzMTEwLwYDVQQD
EyhlNDBmZThhNDljZDUyNWQzYTk5YzJhZTgwZmRmMjFiNWM1NDU1YWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8LAkaJzg6eJgdSvlQes7yiiVoWS
gfh0RZoVvlbtx0OL61VqWYj/TP/iiE+iIHcSCfqHTc2awRCy8IuaWcxROcEUbNXq
J18m3ZJvRmj8v1Hsn8Aw5WSjuSt3nntbOsMnYDV+QiVR19thM1l23mEk1DWH9vU0
CHFtpy+CVDskA7hBy6OYHsW+ZUkTQ94T7lkbWBo+wGH20RjpRU2ENFz3rm1kMrIq
ydcU2T80gH+D+Ob6+86mG1HfpWAonkz1Wyiqdp99fsVc+K77n1cJV3wkM25A6OQ5
j3GIYceeFGffR65d29xPebmv0TP2m4ZhZJwzFo+qOOCOVAgxsMVMW7cRGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQP6KSc1SXTqZwq6A/fIbXFRVrKMB8GA1UdIwQY
MBaAFN3ZdwwwfqOWDI2iaKiGWkqfpjTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2RsM0REQi1vNVlNamFKb3FJWmFTcC1tTk1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My80NDQ0YWItM2RhMy00MThiLWExMDUt
ZjJmZTBkMDRiZmJmLzEvM2RsM0REQi1vNVlNamFKb3FJWmFTcC1tTk1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My80NDQ0YWItM2RhMy00MThiLWExMDUtZjJmZTBkMDRiZmJm
LzEvM2RsM0REQi1vNVlNamFKb3FJWmFTcC1tTk1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/VFTSUO
f27pHH/tLRoM5kImt47l+2ED1Ob/uOv/miQSDGQ70gwKR9j2z2cb4XgMLBn3YyVL
ALYHyzmOnCVTIQ7nrVk2G8F/W/GJH6GVKodoiiNiqOvqsiweJBs8FqRcUpl4LOQ2
ICwXNQ5DT7ZDGMAxg5KYVRkT7uihDN9uiMoG2i6c+pTAOQLGaX0Axrk/CWKuBox9
LT9N9rIIvs8uGE4eg8tNeVAYc6nf0Zb0ONvBr6xoJ7LJ7a93Ggbr5ndfrmKWEPA3
JEyrS8YDJUJQxtDjblyAZ2GF97RzaueP+LNHehgnZV2/8Pj6Rmisz2LPdrKFUiQc
UhHKMynIamsEgQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:20 2026 by rpki-client