Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
File: 3sQzl3xytL5diI9WhT7TGh_x78Y.mft (raw, json)
Hash identifier: ARxszvX9MFVVUgGSAayMokKJBUnF/0qJwVmUhCXUuas=
Subject key identifier: FF:3B:DD:27:4D:66:15:8F:7B:31:33:67:EB:62:18:81:16:A4:00:F4
Authority key identifier: DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6
Certificate issuer: /CN=dec433977c72b4be5d888f56853ed31a1ff1efc6
Certificate serial: 019E20FFCE983DD0C19274674B2870601B03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
Manifest number: 0FE7
Signing time: Wed 13 May 2026 11:01:35 +0000
Manifest this update: Wed 13 May 2026 11:01:35 +0000
Manifest next update: Thu 14 May 2026 11:01:35 +0000
Files and hashes: 1: 3sQzl3xytL5diI9WhT7TGh_x78Y.crl (hash: +4AbHs0+tUACJmY7eCcy1fGvyPUtdZ46XWXXRGTx7nI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:ce:98:3d:d0:c1:92:74:67:4b:28:70:60:1b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec433977c72b4be5d888f56853ed31a1ff1efc6
Validity
Not Before: May 13 11:01:35 2026 GMT
Not After : May 14 11:01:35 2026 GMT
Subject: CN=ff3bdd274d66158f7b313367eb62188116a400f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:90:0f:4d:a8:fe:df:0c:e6:b9:bf:e3:df:cc:
55:9f:c3:db:67:4e:3a:d1:25:a4:2b:a0:1f:e1:1a:
3d:cb:5c:30:05:ee:dd:a5:bb:da:e1:93:73:3e:6a:
6e:c2:47:55:5c:c3:17:d9:0b:b7:ab:cc:7c:36:25:
82:27:ab:f4:d9:09:90:7f:94:c5:c6:8a:0f:c8:66:
00:b2:3a:74:83:af:4c:92:7c:af:2e:3c:0e:02:07:
83:af:25:7a:63:86:40:8d:72:18:8e:3b:f0:79:98:
98:0d:b6:1b:17:60:46:ab:c6:69:56:6b:98:c0:c9:
d2:50:21:1d:a4:fd:f2:d6:4a:9d:0d:53:eb:66:8b:
12:99:23:61:92:36:76:1f:a8:6a:28:9d:ff:9a:13:
b2:e9:e1:d1:68:4c:1c:f4:6a:34:f7:5f:40:64:12:
40:55:97:c5:13:41:50:5b:1c:bf:8d:78:31:f0:b4:
6b:18:90:2d:ae:e5:5a:74:e5:03:ad:ac:8f:c7:0f:
ca:90:2e:16:a5:e9:92:9c:46:41:d7:dd:b5:e6:76:
48:6d:a7:62:0f:d8:36:f4:2d:78:31:6e:d9:7f:1d:
d6:2b:43:bf:66:63:11:fa:81:be:4e:00:01:fd:48:
68:02:ff:f2:19:08:31:70:80:29:1b:7f:b2:d6:83:
f1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3B:DD:27:4D:66:15:8F:7B:31:33:67:EB:62:18:81:16:A4:00:F4
X509v3 Authority Key Identifier:
keyid:DE:C4:33:97:7C:72:B4:BE:5D:88:8F:56:85:3E:D3:1A:1F:F1:EF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sQzl3xytL5diI9WhT7TGh_x78Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/456a85-b7a1-4183-a64f-223f508c055a/1/3sQzl3xytL5diI9WhT7TGh_x78Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:46:f1:2e:d7:0a:1f:59:55:00:48:77:3a:6e:ba:12:4f:a5:
1a:84:fa:8e:33:b5:b5:e8:49:74:21:c3:6d:aa:1f:a8:0e:20:
44:dc:1e:7f:ab:d4:df:20:94:ea:bd:cd:c2:2d:67:44:69:57:
16:fb:e7:87:d7:a4:23:a7:0c:45:94:b3:47:7b:ca:ff:79:85:
f1:2c:7e:d0:32:56:3c:a3:2b:5e:c3:a8:8f:14:5a:c0:a1:59:
21:e3:af:7c:68:e6:17:6b:16:73:88:4d:04:44:e6:97:bb:1e:
33:1f:62:fd:64:7a:4a:3f:a6:1c:5c:21:32:51:06:6e:da:b4:
8a:f0:32:ea:29:f0:53:2d:07:e0:e5:b6:16:05:3b:40:79:d5:
ac:b9:1e:bb:2e:8e:5f:54:76:64:48:3d:89:f1:96:bf:c0:9c:
f0:f5:70:a9:c4:b8:8c:1c:2d:4f:76:8f:ca:0a:96:5d:52:a3:
78:e2:bd:01:5a:63:d7:e1:38:2e:7a:70:c0:fc:75:d4:e7:f6:
55:a0:b6:94:e8:09:6d:71:97:69:6b:3f:ac:25:f5:c0:99:85:
cc:7b:e5:31:09:8a:25:ff:31:5e:1c:78:e1:7b:0d:05:c3:d9:
8b:c0:1b:fb:ca:2f:2b:b1:56:00:fa:5a:2a:f1:33:01:1c:ae:
45:a7:9e:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4g/86YPdDBknRnSyhwYBsDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYzQzMzk3N2M3MmI0YmU1ZDg4OGY1Njg1M2VkMzFhMWZm
MWVmYzYwHhcNMjYwNTEzMTEwMTM1WhcNMjYwNTE0MTEwMTM1WjAzMTEwLwYDVQQD
EyhmZjNiZGQyNzRkNjYxNThmN2IzMTMzNjdlYjYyMTg4MTE2YTQwMGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJAPTaj+3wzmub/j38xVn8PbZ046
0SWkK6Af4Ro9y1wwBe7dpbva4ZNzPmpuwkdVXMMX2Qu3q8x8NiWCJ6v02QmQf5TF
xooPyGYAsjp0g69MknyvLjwOAgeDryV6Y4ZAjXIYjjvweZiYDbYbF2BGq8ZpVmuY
wMnSUCEdpP3y1kqdDVPrZosSmSNhkjZ2H6hqKJ3/mhOy6eHRaEwc9Go0919AZBJA
VZfFE0FQWxy/jXgx8LRrGJAtruVadOUDrayPxw/KkC4WpemSnEZB19215nZIbadi
D9g29C14MW7Zfx3WK0O/ZmMR+oG+TgAB/UhoAv/yGQgxcIApG3+y1oPxNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP873SdNZhWPezEzZ+tiGIEWpAD0MB8GA1UdIwQY
MBaAFN7EM5d8crS+XYiPVoU+0xof8e/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3NRemwzeHl0TDVkaUk5V2hUN1RHaF94NzhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80NTZhODUtYjdhMS00MTgzLWE2NGYt
MjIzZjUwOGMwNTVhLzEvM3NRemwzeHl0TDVkaUk5V2hUN1RHaF94NzhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi80NTZhODUtYjdhMS00MTgzLWE2NGYtMjIzZjUwOGMwNTVh
LzEvM3NRemwzeHl0TDVkaUk5V2hUN1RHaF94NzhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANkbxLtcK
H1lVAEh3Om66Ek+lGoT6jjO1tehJdCHDbaofqA4gRNwef6vU3yCU6r3Nwi1nRGlX
Fvvnh9ekI6cMRZSzR3vK/3mF8Sx+0DJWPKMrXsOojxRawKFZIeOvfGjmF2sWc4hN
BETml7seMx9i/WR6Sj+mHFwhMlEGbtq0ivAy6inwUy0H4OW2FgU7QHnVrLkeuy6O
X1R2ZEg9ifGWv8Cc8PVwqcS4jBwtT3aPygqWXVKjeOK9AVpj1+E4LnpwwPx11Of2
VaC2lOgJbXGXaWs/rCX1wJmFzHvlMQmKJf8xXhx44XsNBcPZi8Ab+8ovK7FWAPpa
KvEzARyuRaeeig==
-----END CERTIFICATE-----
Generated at Wed May 13 15:43:03 2026 by rpki-client